7856 Commits
Author SHA1 Message Date
Fang-Pen Lin e62705a81d Add missing k8s stuff
# Conflicts:
#	frontend/src/pages/pam/PamAccountsPage/components/PamAccessAccountModal.tsx
2025-12-05 12:07:35 -08:00
Fang-Pen Lin 2140956ba8 Fix account creation, remove rotation stuff for now 2025-12-05 12:07:34 -08:00
Fang-Pen Lin 5ac4e0a5bb Fix adding res and add missing forms 2025-12-05 12:07:33 -08:00
Fang-Pen Lin e12f30cd43 Connect k8s 2025-12-05 12:07:32 -08:00
Fang-Pen Lin 284024d10b Add k8s stuff 2025-12-05 12:07:31 -08:00
Victor Santos 6db5188b36 feat: update AWS IAM session duration handling and improve account access functionality
- Changed session duration parameter from maxSessionDuration to defaultSessionDuration for consistency.
- Refactored AWS STS client creation to use a hardcoded default region, simplifying the configuration.
- Enhanced PAM account access modal to include account path and project ID in the access request.
- Updated various components and schemas to reflect the new session duration naming and improve type safety.
2025-12-05 16:56:55 -03:00
Piyush Gupta 1269e7c245 Merge pull request #4976 from Infisical/chore/external-kms-api-refactor
chore: external-kms API refactor
2025-12-06 01:23:05 +05:30
Piyush Gupta 8b32abaf85 fix: assume privileges 2025-12-06 01:22:50 +05:30
carlosmonastyrski bf93644ce0 Merge pull request #4992 from Infisical/fix/pki-renewals
fix: renewals for internal CAs and minor improvement on the export certificate modal
2025-12-05 15:03:24 -03:00
Victor Santos feb1d9b854 Merge branch 'main' into feature/aws-iam-pam 2025-12-05 13:29:30 -03:00
Carlos Monastyrski d8feb988ea Remove redundant null check 2025-12-05 13:06:56 -03:00
Carlos Monastyrski c81116ff60 Fix renewal issue for internal CAs and improve export certificate modal 2025-12-05 12:48:25 -03:00
Piyush Gupta a6255d47b2 fix: review changes 2025-12-05 21:09:37 +05:30
Piyush Gupta 3f70897593 Merge pull request #4970 from Infisical/chore/pam-access-account-with-path
chore: updates pam access account endpoint to use account path instead of id [PAM-64]
2025-12-05 20:03:33 +05:30
Piyush Gupta fd1a3d5d12 fix: review changes 2025-12-05 19:39:21 +05:30
Piyush Gupta 58fbbe0d91 Merge branch 'main' of https://github.com/Infisical/infisical into chore/external-kms-api-refactor 2025-12-05 18:01:43 +05:30
Piyush Gupta fc9ded7d57 Merge branch 'main' of https://github.com/Infisical/infisical into feat/suborg-scope-support 2025-12-05 15:14:52 +05:30
Daniel Hougaard b3f2fb1399 added missed endpoint 2025-12-04 23:02:29 -08:00
Victor Santos b2e4c1e6bf feat: update PAM account types and endpoint handling for optional rotation settings
- Made the rotationEnabled field optional in the account schema to enhance flexibility.
- Updated endpoint logic to default rotationEnabled to false if not provided in the request.
- Adjusted account DTOs to reflect the optional nature of rotationEnabled, improving type safety.
2025-12-05 01:44:33 -03:00
Daniel Hougaard cc9cee3953 fix(additional-privileges): return correct project membership ID 2025-12-04 20:43:30 -08:00
Victor Santos a755b5bfa0 feat: improve PAM account update handling with enhanced error management
- Added try-catch block to handle potential database errors during account updates.
- Implemented specific error handling for unique constraint violations, providing clearer feedback for duplicate account names.
- Updated AWS IAM account schema to indicate that credential rotation is not supported, defaulting to false.
2025-12-05 01:14:28 -03:00
Victor Santos ac5c185f76 feat: enhance PAM account handling with type safety and improved response structure
- Introduced type inference for sanitized accounts to ensure consistent data handling.
- Updated account response structure to explicitly cast accounts to the sanitized type.
- Refined the decryption function to omit sensitive fields from the returned account object.
- Improved error handling in SQL resource factory by enforcing required gateway ID validation.
2025-12-05 00:56:33 -03:00
Victor Santos aac84e3952 feat: enhance AWS IAM resource support with refined validation and response structure
- Updated AWS IAM resource response schema to include distinct object structures for Postgres, MySQL, and SSH resource types.
- Improved validation for project ID to ensure it is a valid UUID.
- Adjusted console URL expiration handling to default to a calculated date if not provided.
- Modified regex for ARN role validation to accommodate additional characters.
2025-12-04 23:54:24 -03:00
Victor Santos b589ab3be4 feat: add AWS IAM resource support with console access functionality
- Introduced AWS IAM resource type in the system, allowing users to create and manage AWS IAM accounts.
- Implemented AWS IAM resource forms and account forms for creating and updating IAM resources and accounts.
- Added functionality to generate AWS Console URLs for IAM accounts, enabling direct access to the AWS Console.
- Updated various components and hooks to handle AWS IAM-specific logic, including session expiration and access management.
- Enhanced the UI to reflect AWS IAM integration, including new modals and forms for user interaction.
2025-12-04 23:41:36 -03:00
carlosmonastyrski 4a62a872eb Merge pull request #4980 from Infisical/feat/PKI-67
feature: refine PKI access control permissions
2025-12-04 23:21:07 -03:00
Carlos Monastyrski e870b449d6 Skip private key on response if user do not have access to read 2025-12-04 21:13:43 -03:00
Carlos Monastyrski 90c73def68 UI improvements on PKI product 2025-12-04 18:55:26 -03:00
Piyush Gupta f14b03b6ac fix: kms endpoints to rerutn credentialsHash 2025-12-05 02:49:20 +05:30
Carlos Monastyrski 003aa1cd59 Remove duplicate read permission on default roles 2025-12-04 14:18:10 -03:00
Carlos Monastyrski 2b038575ad Remove unused ca.id on CertificateAuthorities permission 2025-12-04 12:17:59 -03:00
Carlos Monastyrski 3f73f7cb05 Fix unit test 2025-12-04 10:53:39 -03:00
Carlos Monastyrski 022c2a860e Improve list endpoints permissions check and address PR comments 2025-12-04 04:58:32 -03:00
Victor Santos dfbc2ed033 refactor(mongodb-credentials): remove TLS requirement from MongoDB client options and update documentation formatting 2025-12-03 18:26:12 -03:00
Victor Santos ede26c98a0 refactor(mongodb-credentials): streamline SSL configuration and update documentation references 2025-12-03 18:19:07 -03:00
Piyush Gupta bd149940a5 fix: provider error in external kms 2025-12-04 02:40:36 +05:30
Piyush Gupta fef8d53428 fix: error -> BadRequestError 2025-12-04 02:21:32 +05:30
Piyush Gupta 313fc3f761 fix: provider -> configuration 2025-12-04 02:16:58 +05:30
Akhil Mohan 27af9b935b Merge pull request #4985 from Infisical/fix/scim-range-error
fix(ui): resolves range error that happaned when providing a large ttl for scim token
2025-12-04 02:10:40 +05:30
Victor Santos 42f3566ff4 Merge branch 'main' into feature/mongodb-secret-rotation 2025-12-03 17:23:06 -03:00
Piyush Gupta 23e22eae95 Merge branch 'main' of https://github.com/Infisical/infisical into chore/external-kms-api-refactor 2025-12-04 01:27:37 +05:30
= 02b29b5ae0 fix(ui): resolves range error that happaned when providing a large ttl in scim 2025-12-04 01:18:24 +05:30
= 41aa7f85f5 fix(api): resolved identity name missing in audit log 2025-12-04 01:04:12 +05:30
Fang-Pen Lin aa9c125124 Merge pull request #4967 from Infisical/PKI-49-check-template-for-external-ca-with-acme
improvement(api): check template for external ca with acme
2025-12-03 10:56:31 -08:00
Carlos Monastyrski b53348a684 Address greptile comments 2025-12-03 11:05:27 -03:00
Piyush Gupta 6a8a4ffd52 fix: migration 2025-12-03 17:56:44 +05:30
Piyush Gupta a6d1e24c03 chore: refactor membership check 2025-12-03 17:55:09 +05:30
Piyush Gupta f92cd95125 fix: membership check 2025-12-03 17:52:30 +05:30
Piyush Gupta 54a6ed4f20 fix: review changes 2025-12-03 17:40:05 +05:30
Piyush Gupta 327ebfeb34 fix: review changes 2025-12-03 13:32:18 +05:30
Piyush Gupta ca52bf6732 Merge branch 'main' of https://github.com/Infisical/infisical into feat/suborg-scope-support 2025-12-03 12:08:55 +05:30