Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport of Fix PKI Synopsis, add Transit help text and casing fixes into release/1.13.x #19396

Conversation

hc-github-team-secure-vault-core
Copy link
Collaborator

Backport

This PR is auto-generated from #19395 to be assessed for backporting due to the inclusion of the label backport/1.13.x.

The below text is copied from the body of the original PR.


As reported by @miagilepner, thank you!


This fixes the typo in the PKI synopsis, incorrectly reporting it as a K/V helper. We introduce a matching one for Transit and clarify a few help texts.

[cipherboy@xps15 vault]$ vault -help
Usage: vault <command> [args]

Common commands:
    read        Read data and retrieves secrets
    write       Write data, configuration, and secrets
    delete      Delete secrets and configuration
    list        List data or secrets
    login       Authenticate locally
    agent       Start a Vault agent
    server      Start a Vault server
    status      Print seal and HA status
    unwrap      Unwrap a wrapped secret

Other commands:
    audit                Interact with audit devices
    auth                 Interact with auth methods
    debug                Runs the debug command
    events               
    kv                   Interact with Vault's Key-Value storage
    lease                Interact with leases
    monitor              Stream log messages from a Vault server
    namespace            Interact with namespaces
    operator             Perform operator-specific tasks
    patch                Patch data, configuration, and secrets
    path-help            Retrieve API help for paths
    pki                  Interact with Vault's PKI Secrets Engine
    plugin               Interact with Vault plugins and catalog
    policy               Interact with policies
    print                Prints runtime configurations
    secrets              Interact with secrets engines
    ssh                  Initiate an SSH session
    token                Interact with tokens
    transit              Interact with Vault's Transit Secrets Engine
    version-history      Prints the version history of the target Vault server
[cipherboy@xps15 vault]$ vault transit -help
Usage: vault transit <subcommand> [options] [args]

  This command has subcommands for interacting with Vault's Transit Secrets
  Engine. Here are some simple examples, and more detailed examples are
  available in the subcommands or the documentation.

  To import a key into the specified Transit or Transform mount:

  $ vault transit import transit/keys/newly-imported @path/to/key type=rsa-2048

  Please see the individual subcommand help for detailed usage information.

Subcommands:
    import            Import a key into the Transit or Transform secrets engines.
    import-version    Import key material into a new key version in the Transit or Transform secrets engines.
[cipherboy@xps15 vault]$ vault transit import -help
Usage: vault transit import PATH KEY [options...]

  Using the Transit or Transform key wrapping system, imports key material from
  the base64 encoded KEY (either directly on the CLI or via @path notation),
  into a new key whose API path is PATH.  To import a new version into an
  existing key, use import_version.  The remaining options after KEY (key=value
  style) are passed on to the Transit or Transform create key endpoint.  If your
  system or device natively supports the RSA AES key wrap mechanism (such as
  the PKCS#11 mechanism CKM_RSA_AES_KEY_WRAP), you should use it directly
  rather than this command.

HTTP Options:

  -address=<string>
      Address of the Vault server. The default is https://127.0.0.1:8200. This
      can also be specified via the VAULT_ADDR environment variable.

...snip...

Overview of commits

@hc-github-team-secure-vault-core hc-github-team-secure-vault-core force-pushed the backport/cipherboy-fix-pki-synopsis-add-transit/adversely-assuring-pig branch from 1240c8c to 1d6c07e Compare February 28, 2023 14:43
@hc-github-team-secure-vault-core hc-github-team-secure-vault-core force-pushed the backport/cipherboy-fix-pki-synopsis-add-transit/adversely-assuring-pig branch from ddc1c85 to de5db00 Compare February 28, 2023 14:43
@cipherboy cipherboy enabled auto-merge (squash) February 28, 2023 14:51
@cipherboy cipherboy added this to the 1.13.1 milestone Feb 28, 2023
@cipherboy cipherboy added bug Used to indicate a potential bug core/cli pr/no-changelog labels Feb 28, 2023
@cipherboy cipherboy merged commit b3dc15f into release/1.13.x Feb 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Used to indicate a potential bug core/cli pr/no-changelog
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants