CODEOWNERS

# Each line is a file pattern followed by one or more owners. Being an owner
# means those groups or individuals will be added as reviewers to PRs affecting
# those areas of the code.
#
# More on CODEOWNERS files: https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners
# Default CODEOWNER primarily for contact purposes
* @hashicorp/vault

# Select Auth engines are owned by Ecosystem
/builtin/credential/aws/      @hashicorp/vault-ecosystem
/builtin/credential/github/   @hashicorp/vault-ecosystem
/builtin/credential/ldap/     @hashicorp/vault-ecosystem
/builtin/credential/okta/     @hashicorp/vault-ecosystem

# Secrets engines (pki, ssh, totp and transit omitted)
/builtin/logical/aws/         @hashicorp/vault-ecosystem
/builtin/logical/cassandra/   @hashicorp/vault-ecosystem
/builtin/logical/consul/      @hashicorp/vault-ecosystem
/builtin/logical/database/    @hashicorp/vault-ecosystem
/builtin/logical/mongodb/     @hashicorp/vault-ecosystem
/builtin/logical/mssql/       @hashicorp/vault-ecosystem
/builtin/logical/mysql/       @hashicorp/vault-ecosystem
/builtin/logical/nomad/       @hashicorp/vault-ecosystem
/builtin/logical/postgresql/  @hashicorp/vault-ecosystem
/builtin/logical/rabbitmq/    @hashicorp/vault-ecosystem

# Identity Integrations (OIDC, tokens)
/vault/identity_store_oidc*   @hashicorp/vault-ecosystem

/plugins/                     @hashicorp/vault-ecosystem
/vault/plugin_catalog.go      @hashicorp/vault-ecosystem

# Content on developer.hashicorp.com

# Web presence gets notified of, and can approve changes to web tooling, but not content.

/website/               @hashicorp/web-presence
/website/data/
/website/public/
/website/content/

# Education gets notified of, and can approve changes to web content.

/website/data/          @hashicorp/vault-education-approvers
/website/public/        @hashicorp/vault-education-approvers
/website/content/       @hashicorp/vault-education-approvers
/website/templates/     @hashicorp/vault-education-approvers
/website/redirects.js   @hashicorp/vault-education-approvers

# Plugin docs
/website/content/docs/plugins/              @hashicorp/vault-ecosystem @hashicorp/vault-education-approvers
/website/content/docs/upgrading/plugins.mdx @hashicorp/vault-ecosystem @hashicorp/vault-education-approvers

/ui/  @hashicorp/vault-ui
# UI code related to Vault's JWT/OIDC auth method and OIDC provider.
# Changes to these files often require coordination with backend code,
# so stewards of the backend code are added below for notification.
/ui/app/components/auth/form/oidc-jwt.ts @hashicorp/vault-ui @hashicorp/vault-ecosystem
/ui/app/components/auth/form/saml.ts     @hashicorp/vault-ui @hashicorp/vault-ecosystem
/ui/app/routes/vault/cluster/oidc-*.js   @hashicorp/vault-ui @hashicorp/vault-ecosystem

# Release config; service account is required for automation tooling.
/.release/                     @hashicorp/github-secure-vault-core @hashicorp/team-vault-quality
/.github/workflows/build.yml   @hashicorp/github-secure-vault-core @hashicorp/team-vault-quality

# Quality engineering
/.github/  @hashicorp/team-vault-quality
/enos/     @hashicorp/team-vault-quality

# Cryptosec
# Temporarily require the crypto team to approve Go updates as we need to make sure
# 1.24 doesn't make it onto release branches until the FIPS paperwork has been completed.
/.go-version                                         @hashicorp/vault-crypto

/api/auth/cert/                                      @hashicorp/vault-crypto
/builtin/logical/pki/                                @hashicorp/vault-crypto
/builtin/logical/pkiext/                             @hashicorp/vault-crypto
/website/content/docs/secrets/pki/                   @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/secret/pki/                @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/secret/pki.mdx             @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/builtin/credential/cert/                            @hashicorp/vault-crypto
/website/content/docs/auth/cert.mdx                  @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/auth/cert.mdx              @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/builtin/logical/ssh/                                @hashicorp/vault-crypto
/website/content/docs/secrets/ssh/                   @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/secret/ssh.mdx             @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/builtin/logical/transit/                            @hashicorp/vault-crypto
/website/content/docs/secrets/transit/               @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/secret/transit.mdx         @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/helper/random/                                      @hashicorp/vault-crypto
/sdk/helper/certutil/                                @hashicorp/vault-crypto
/sdk/helper/cryptoutil/                              @hashicorp/vault-crypto
/sdk/helper/kdf/                                     @hashicorp/vault-crypto
/sdk/helper/keysutil/                                @hashicorp/vault-crypto
/sdk/helper/ocsp/                                    @hashicorp/vault-crypto
/sdk/helper/salt/                                    @hashicorp/vault-crypto
/sdk/helper/tlsutil/                                 @hashicorp/vault-crypto
/shamir/                                             @hashicorp/vault-crypto
/vault/barrier*                                      @hashicorp/vault-crypto
/vault/managed_key*                                  @hashicorp/vault-crypto
/vault/seal*                                         @hashicorp/vault-crypto
/vault/seal/                                         @hashicorp/vault-crypto
/website/content/docs/configuration/seal/            @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/docs/enterprise/sealwrap.mdx        @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/system/sealwrap-rewrap.mdx @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/docs/secrets/transform/             @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/secret/transform.mdx       @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/docs/secrets/kmip-profiles.mdx      @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/docs/secrets/kmip.mdx               @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/secret/kmip.mdx            @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/docs/enterprise/fips/               @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/docs/platform/k8s                   @hashicorp/vault-ecosystem @hashicorp/vault-education-approvers
/website/content/                                    @hashicorp/vault-customer-engineering @hashicorp/vault-education-approvers