Describe the bug As per the recommendation here, we are using the wrapped_token query parameter to the logout endpoint in order to automatically log in. This works as expected it the client is already logged into the UI, i.e., the client is logged out of the UI, the wrapped token is unwrapped, and...

Is your feature request related to a problem? Please describe. using the various auth methods as a end user is overly complicated and requires a ton of variables to specify. for example using gcp iam. vault login -address https://vault.dev -method=gcp service_account={account} project=dev role=admin...

Is your feature request related to a problem? Please describe. In the GUI if we have a widely used secret in a folder containing an abundant amount of secrets I have to label it starting with an "a" to get it to sort to the top. Describe the solution you'd like I would like to be able to pin secrets...

Describe the bug TOTP method MFA generate QR, that Android google authenticator does not support (cods, that it generate does not fit to vault) On IOS such problem is absent, To Reproduce Steps to reproduce the behavior: Turn on MFA for LDAP login method (or userpassword). Encryption SHA512 or SHA2...

Is your feature request related to a problem? Please describe. Since upgrading to 1.11.3 from 1.9.9 we are unable to login via the Web UI as our "secrets" page takes too long to load. We are utilizing over 20,000 secrets, and loading all of them at once is a painful process Describe the solution yo...

Is your feature request related to a problem? Please describe. I'm always frustrated when scrolling up and down in the Secrets Engines list (100's of entries that we have) to find the secret i am looking for Describe the solution you'd like Please add dynamic search/filter box on top of the Secrets...

Describe the bug I tried to use vault.NewTestCluster method to run server to test my application against it. I set up Go application like in the Gist: https://gist.github.com/camaeel/36e25e577aeaa74f947b6a5d800b44ef When I try to run go test it can't be built: # github.com/shirou/gopsutil/disk iosta...

Is your feature request related to a problem? Please describe. Hey! Pretty simple, I think it would be a nice QoL improvement if vault would throw an error if an invalid k8 cert key is provided when setting up the auth engine. This comes from a very confusing couple of days that I spent banging my h...

Describe the bug CSR subject field is not carried over to certificate subject while PKI signing process. By definition in the RF5280 states that certificate Subject field should identify the entity associated with the public key. The only way to know it for the CA is to read it from the CSR Subject...

Problem Description We're using vault PKI engine to generate certificates. One of the requirements is to have dependant on certificates services running without access to vault for at least a week (time required for recovery in worst case infrastructure/servers/datacenter outage). This means we have...