Update changelog and docs for release (#1422)

CHANGELOG.md

@@ -1,11 +1,28 @@
 ## 3.5.0 (Unreleased)
 FEATURES:
 * Add MFA support: new resources `vault_mfa_okta`, `vault_mfa_totp`, `vault_mfa_pingid` ([#1395](https://github.com/hashicorp/terraform-provider-vault/pull/1395))
-* `resource/vault_ssh_secret_backend_role`: support configuring multiple public SSH key lengths in vault-1.10+
-  ([#1413](https://github.com/terraform-providers/terraform-provider-vault/pull/1413))
+* *New* `resource/database_secrets_mount`: Configures any number of database secrets engines under 
+ a single, dedicated mount resource
+ ([#1400](https://github.com/terraform-providers/terraform-provider-vault/pull/1400))
 
 IMPROVEMENTS:
-* `data/vault_generic_secret`: Add new field `with_lease_start_time` to `vault_generic_secret` datasource ([#1414](https://github.com/hashicorp/terraform-provider-vault/pull/1414))
+* `data/vault_generic_secret`: Add new field `with_lease_start_time` to `vault_generic_secret` datasource 
+  ([#1414](https://github.com/hashicorp/terraform-provider-vault/pull/1414))
+* `resource/vault_ssh_secret_backend_role`: support configuring multiple public SSH key lengths in vault-1.10+
+  ([#1413](https://github.com/terraform-providers/terraform-provider-vault/pull/1413))
+* `resource/database_secret*`: Add support for configuring TLS, and the `username_template` field for the ElasticSearch.  
+* `resource/pki_secret_backend_cert`: Add support for optionally revoking the certificate upon resource destruction.
+  ([#1411](https://github.com/terraform-providers/terraform-provider-vault/pull/1411))
+* `provider`: Add support for setting the `tls_server_name` to use as the SNI host when connecting via TLS.
+  ([#1145](https://github.com/terraform-providers/terraform-provider-vault/pull/1145)
+* `docs`: Add links to Learn Tutorials.
+  ([#1399](https://github.com/terraform-providers/terraform-provider-vault/pull/1399))
+
+BUGS:
+* `resource/identity_group`: Fix issue where the group's `member_entity_ids` were being unset in error on update.
+  ([#1409](https://github.com/terraform-providers/terraform-provider-vault/pull/1409))
+* `resource/transit_secret_backend_key`: Add `auto_rotate_period` field which deprecates `auto_rotate_interval`.
+  ([#1402](https://github.com/hashicorp/terraform-provider-vault/pull/1402))
 
 ## 3.4.1 (March 31, 2022)
 BUGS:

website/docs/r/database_secrets_mount.md

@@ -214,6 +214,21 @@ Supported list of database secrets engines that can be configured:
 * `username` - (Required) The username to be used in the connection.
 
 * `password` - (Required) The password to be used in the connection.
+
+* `ca_cert` - (Optional) The path to a PEM-encoded CA cert file to use to verify the Elasticsearch server's identity.
+
+* `ca_path` - (Optional) The path to a directory of PEM-encoded CA cert files to use to verify the Elasticsearch server's identity.
+
+* `client_cert` - (Optional) The path to the certificate for the Elasticsearch client to present for communication.
+
+* `client_key` - (Optional) The path to the key for the Elasticsearch client to use for communication.
+
+* `tls_server_name` - (Optional) This, if set, is used to set the SNI host when connecting via TLS.
+
+* `insecure` - (Optional) Whether to disable certificate verification.
+
+* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.  
+  See [Vault docs](https://www.vaultproject.io/docs/concepts/username-templating) for more details.
 
 ### InfluxDB Configuration Options
 
@@ -243,18 +258,15 @@ Supported list of database secrets engines that can be configured:
 
 ### MongoDB Configuration Options
 
-* `connection_url` - (Required) A URL containing connection information. See
-  the [Vault
-  docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
-  for an example.
+* `connection_url` - (Required) A URL containing connection information.  
+  See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
 
 * `username` - (Optional) The root credential username used in the connection URL.
 
 * `password` - (Optional) The root credential password used in the connection URL.
 
-* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.
-See the [Vault
-  docs](https://www.vaultproject.io/docs/concepts/username-templating)
+* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.  
+  See [Vault docs](https://www.vaultproject.io/docs/concepts/username-templating)
 
 ### MongoDB Atlas Configuration Options
 
@@ -266,10 +278,8 @@ See the [Vault
 
 ### SAP HanaDB Configuration Options
 
-* `connection_url` - (Required) A URL containing connection information. See
-  the [Vault
-  docs](https://www.vaultproject.io/api-docs/secret/databases/hanadb.html#sample-payload)
-  for an example.
+* `connection_url` - (Required) A URL containing connection information.  
+  See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/hanadb.html#sample-payload)
 
 * `max_open_connections` - (Optional) The maximum number of open connections to
   use.
@@ -288,10 +298,8 @@ See the [Vault
 
 ### MSSQL Configuration Options
 
-* `connection_url` - (Required) A URL containing connection information. See
-  the [Vault
-  docs](https://www.vaultproject.io/api-docs/secret/databases/mssql.html#sample-payload)
-  for an example.
+* `connection_url` - (Required) A URL containing connection information.  
+  See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/mssql.html#sample-payload)
 
 * `max_open_connections` - (Optional) The maximum number of open connections to
   use.
@@ -302,9 +310,8 @@ See the [Vault
 * `max_connection_lifetime` - (Optional) The maximum number of seconds to keep
   a connection alive for.
 
-* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.
-See the [Vault
-  docs](https://www.vaultproject.io/docs/concepts/username-templating)
+* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.  
+   See [Vault docs](https://www.vaultproject.io/docs/concepts/username-templating)
 
 * `username` - (Optional) The root credential username used in the connection URL.
 
@@ -313,16 +320,13 @@ See the [Vault
 * `disable_escaping` - (Optional) Disable special character escaping in username and password.
 
 * `contained_db` - (Optional bool: false) For Vault v1.9+. Set to true when the target is a
-  Contained Database, e.g. AzureSQL.
-  See the [Vault
-  docs](https://www.vaultproject.io/api/secret/databases/mssql#contained_db)
+  Contained Database, e.g. AzureSQL.  
+  See [Vault docs](https://www.vaultproject.io/api/secret/databases/mssql#contained_db)
 
 ### MySQL Configuration Options
 
-* `connection_url` - (Required) A URL containing connection information. See
-  the [Vault
-  docs](https://www.vaultproject.io/api-docs/secret/databases/mysql-maria.html#sample-payload)
-  for an example.
+* `connection_url` - (Required) A URL containing connection information.  
+  See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/mysql-maria.html#sample-payload)
 
 * `max_open_connections` - (Optional) The maximum number of open connections to
   use.
@@ -341,16 +345,13 @@ See the [Vault
 
 * `tls_ca` - (Optional) x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.
 
-* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.
-See the [Vault
-  docs](https://www.vaultproject.io/docs/concepts/username-templating)
+* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.  
+   See [Vault docs](https://www.vaultproject.io/docs/concepts/username-templating)
 
 ### Oracle Configuration Options
 
-* `connection_url` - (Required) A URL containing connection information. See
-  the [Vault
-  docs](https://www.vaultproject.io/api-docs/secret/databases/oracle.html#sample-payload)
-  for an example.
+* `connection_url` - (Required) A URL containing connection information.  
+  See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/oracle.html#sample-payload)
 
 * `max_open_connections` - (Optional) The maximum number of open connections to
   use.
@@ -365,16 +366,13 @@ See the [Vault
 * `max_connection_lifetime` - (Optional) The maximum number of seconds to keep
   a connection alive for.
 
-* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.
-  See the [Vault
-  docs](https://www.vaultproject.io/docs/concepts/username-templating)
+* `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.  
+  See [Vault docs](https://www.vaultproject.io/docs/concepts/username-templating)
 
 ### PostgreSQL Configuration Options
 
-* `connection_url` - (Required) A URL containing connection information. See
-  the [Vault
-  docs](https://www.vaultproject.io/api-docs/secret/databases/postgresql.html#sample-payload)
-  for an example.
+* `connection_url` - (Required) A URL containing connection information.  
+  See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/postgresql.html#sample-payload)
 
 * `max_open_connections` - (Optional) The maximum number of open connections to
   use.
@@ -392,15 +390,12 @@ See the [Vault
 * `disable_escaping` - (Optional) Disable special character escaping in username and password.
 
 * `username_template` - (Optional) For Vault v1.7+. The template to use for username generation.
-See the [Vault
-  docs](https://www.vaultproject.io/docs/concepts/username-templating)
+  See [Vault docs](https://www.vaultproject.io/docs/concepts/username-templating)
 
 ### AWS Redshift Configuration Options
 
-* `connection_url` - (Required) Specifies the Redshift DSN. See
-  the [Vault
-  docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
-  for an example.
+* `connection_url` - (Required) Specifies the Redshift DSN. 
+  See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
 
 * `max_open_connections` - (Optional) The maximum number of open connections to
   the database.
@@ -421,10 +416,8 @@ See the [Vault
 
 ### Snowflake Configuration Options
 
-* `connection_url` - (Required) A URL containing connection information. See
-  the [Vault
-  docs](https://www.vaultproject.io/api-docs/secret/databases/snowflake#sample-payload)
-  for an example.
+* `connection_url` - (Required) A URL containing connection information.  
+  See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/snowflake#sample-payload)
 
 * `max_open_connections` - (Optional) The maximum number of open connections to
   use.