vault
vault copied to clipboard
WIF AWS: add create functionality to SearchSelectWithModal for identity_token_key (take 2)
Description
This PR adds the modal/create part to the aws secret engine mount.
- [x] enterprise test pass.
- if a user has read access it
identity/oidc/key
they can either search existing oidc/keys or they can create one. - if a user does not have read access they can type a key into an input box. If the key does not exist then the API will surface an error.
-
FYI: We are surfacing about half the fields used to create an
identity/oidc/key
(at the very bottom I'll provide a screenshot of that full form). Design would like to only include a limited / required set of form fields to create an identity_token_key here. This has been cleared with the backend as well. - It's important that a user is given the ability to add a key at the mounting stage of an engine because they cannot add this later via the UI.
Screenshots
Admin user with full access to identity/oidc/key
If they created a key
(I have a nice to have ticket to fix the styling of the flash message. That was an existing issue and trying to keep scope tight)
Admin user without access to identity/oidc/key
If they enter a key that does not exist, the API will surface the following error: