Merge branch 'main' into TF-31754-document-list-projects-api-tag-filter-parameters

Author: brandonc

.gitignore

@@ -61,3 +61,6 @@ tfe-releases-repos.json
 scripts/prebuild/prebuild-arm-mac-binary
 scripts/prebuild/prebuild-x64-linux-binary
 scripts/prebuild/prebuild-arm-linux-binary
+
+# GA to RC tool output files
+scripts/sync-ga-to-rc/output/*.txt

CODEOWNERS

@@ -5,11 +5,11 @@
 /docs @hashicorp/vault-education-approvers @hashicorp/education
 
 # Terraform documentation ownership
-/content/terraform-plugin-framework @hashicorp/terraform-devex @hashicorp/terraform-education
-/content/terraform-plugin-log @hashicorp/terraform-devex @hashicorp/terraform-education
-/content/terraform-plugin-mux @hashicorp/terraform-devex @hashicorp/terraform-education
-/content/terraform-plugin-sdk @hashicorp/terraform-devex @hashicorp/terraform-education
-/content/terraform-plugin-testing @hashicorp/terraform-devex @hashicorp/terraform-education
+/content/terraform-plugin-framework @hashicorp/terraform-core-plugins @hashicorp/terraform-education
+/content/terraform-plugin-log @hashicorp/terraform-core-plugins @hashicorp/terraform-education
+/content/terraform-plugin-mux @hashicorp/terraform-core-plugins @hashicorp/terraform-education
+/content/terraform-plugin-sdk @hashicorp/terraform-core-plugins @hashicorp/terraform-education
+/content/terraform-plugin-testing @hashicorp/terraform-core-plugins @hashicorp/terraform-education
 /content/terraform-docs-agents @hashicorp/team-hcpt-agent-engineering
 /content/terraform-mcp-server @hashicorp/team-docs-packer-and-terraform
 /content/terraform-migrate @hashicorp/team-docs-packer-and-terraform
@@ -22,8 +22,8 @@
 /content/terraform/*/docs/language/backend/s3.mdx  @hashicorp/terraform-education @hashicorp/terraform-core @hashicorp/team-docs-packer-and-terraform @hashicorp/terraform-aws
 
 /content/terraform-docs-common/ @hashicorp/team-docs-packer-and-terraform
-/content/terraform-docs-common/docs/plugin/ @hashicorp/terraform-devex
-/content/terraform-docs-common/data/plugin-nav-data.json @hashicorp/terraform-devex
+/content/terraform-docs-common/docs/plugin/ @hashicorp/terraform-core-plugins
+/content/terraform-docs-common/data/plugin-nav-data.json @hashicorp/terraform-core-plugins
 
 /content/terraform-enterprise @hashicorp/team-docs-packer-and-terraform @hashicorp/ptfe-review
 

content/boundary/v0.12.x/content/docs/concepts/domain-model/credential-libraries.mdx

@@ -105,7 +105,7 @@ The example above uses the account email, but it could be any other parameter.
 
 ## Tutorial
 
-Refer to the [SSH certificate injection with HCP Boundary](/boundary/tutorials/access-management/hcp-certificate-injection) tutorial to learn how to configure credential injection with SSH certificates using Vault.
+Refer to the [SSH certificate injection with HCP Boundary](/boundary/tutorials/credential-management/hcp-certificate-injection) tutorial to learn how to configure credential injection with SSH certificates using Vault.
 
 ## Referenced by
 

content/boundary/v0.12.x/content/docs/troubleshoot/faq.mdx

@@ -10,52 +10,52 @@ description: |-
 Boundary workers require inbound access from clients. This does not necessarily require that workers be exposed to the public internet.
 If the client is coming from a private network (eg a corporate network), the worker needs to allow connectivity from the private network.
 If the client is coming from the public internet, the worker needs to allow connectivity from the public internet. For more information,
-check out the [worker networking requirements](/hcp/docs/boundary/self-managed-workers).
+check out the [worker networking requirements](https://developer.hashicorp.com/hcp/docs/boundary/self-managed-workers).
 
 #### Q: Does Boundary require Vault? What is the integration story?
 While Vault isn't a *required* secrets backend for Boundary sessions, the potential for Boundary | Vault integration is a core part of Boundary's overall
 value proposition for identity-based access.There are three primary points of integration with Vault:
 1. Vault can be used as a secrets backend for Boundary, offering single signon to end target systems via credential brokering. This was covered in Boundary's
 [0.4 announcement](https://www.hashicorp.com/blog/announcing-hashicorp-boundary-0-4) and there are ample
-[tutorials](/boundary/tutorials/access-management/oss-vault-cred-brokering-quickstart) of this scenario.
+[tutorials](/boundary/tutorials/credential-management/community-vault-cred-brokering-quickstart) of this scenario.
 2. Boundary can use Vault as an OIDC provider to enable sign-in with Vault's supported auth methods (even non-OIDC auth methods like Active Directory kerberos/LDAP).
 This scenario is walked through in this [tutorial](/vault/tutorials/auth-methods/oidc-identity-provider).
 3. OSS Boundary can use Vault as the external KMS that serves as Boundary's root of trust. More information on this use case can be found
 [here](/boundary/docs/configuration/kms/transit).
 
 #### Q: What Identity Providers does Boundary Support?
-Boundary supports [OIDC authentication](/boundary/tutorials/access-management/oidc-auth), which allows support for many popular IdPs
+Boundary supports [OIDC authentication](/boundary/tutorials/identity-management/oidc-auth0), which allows support for many popular IdPs
 like Okta, Azure AD, Auth0, etc. For non-OIDC authentication protocols (such as LDAP), users can also log in with an OIDC bridge identity provider
-such as [Vault's OIDC bridge](/vault/docs/concepts/oidc-provider) capabilities released in 1.9, [Dex](https://dexidp.io), or various others.
+such as [Vault's OIDC bridge](https://developer.hashicorp.com/vault/docs/concepts/oidc-provider) capabilities released in 1.9, [Dex](https://dexidp.io), or various others.
 
 #### Q: Does Boundary support Multi-factor Authentication (MFA)?
 Boundary Open-ID Connect (OIDC)-based authentication supports MFA if the IdP being used enforces MFA. This allows users to authenticate with an identity
 provider supporting MFA, such as Azure AD, Okta, Auth0, etc.
 Boundary also supports syncing permission claims between an IDP-managed identity and Boundary. This can be very useful when you want to sync group memberships
-from an IDP to Boundary to assign role assignments dynamically. See Boundary's [managed groups capabilities](/boundary/tutorials/configuration/oidc-idp-groups).
+from an IDP to Boundary to assign role assignments dynamically. See Boundary's [managed groups capabilities](/boundary/tutorials/identity-management/oidc-idp-groups).
 
 #### Q: Does Boundary automate the discovery and configuration of new targets (e.g. servers)? What happens if a host IP address changes?
 Yes, this is one of the core competencies of Boundary. Boundary can discover new targets in two primary ways
 1. Boundary's [Terraform provider](https://registry.terraform.io/providers/hashicorp/boundary/latest/docs) supports discovery of targets provisioned by Terraform
-2. Boundary's [dynamic host catalog](/boundary/tutorials/access-management/aws-host-catalogs)
+2. Boundary's [dynamic host catalog](/boundary/docs/concepts/service-discovery)
 agentlessly queries infrastructure providers to automate the onboarding and configuration of hosts
 
 All of these methods will automate the discovery and configuration of targets when their ip addresses change. Of course, static hosts can still be manually added via Boundary admin UI and CLI.
 
 For more information on dynamic host catalogs, please see:
-- [Dynamic Host Catalog on AWS](/boundary/tutorials/access-management/aws-host-catalogs)
-- [Dynamic Host Catalogs on Azure](/boundary/tutorials/access-management/azure-host-catalogs)
+- [Dynamic host catalogs on AWS](/boundary/tutorials/host-management/aws-host-catalogs)
+- [Dynamic host catalogs on Azure](/boundary/tutorials/host-management/azure-host-catalogs)
 
 #### Q: Session management capabilities - Does Boundary support live session monitoring and termination?
 **Session Logging/Monitoring:** Supported. Boundary creates a session log of all sessions created between identities and targets that have been onboarded to
-Boundary. You can learn how to monitor these sessions in this [tutorial](/boundary/tutorials/getting-started/getting-started-connect#manage-sessions).
-Boundary supports audit logs for [Boundary OSS](/boundary/tutorials/oss-configuration/event-logging) and [audit log streaming](/hcp/docs/boundary/audit-logging)
+Boundary. You can learn how to monitor these sessions in this [tutorial](/boundary/tutorials/community-administration/community-manage-sessions).
+Boundary supports audit logs for [Boundary OSS](/boundary/tutorials/self-managed-deployment/event-logging) and [audit log streaming](https://developer.hashicorp.com/hcp/docs/boundary/audit-logging)
 for HCP Boundary. Audit logs for both distributions can be exported to SIEM or BI tools.
 
 **Session Termination:** Supported. Session termination for Boundary administrators is a supported capability, as demonstrated in this
-[tutorial](/boundary/tutorials/getting-started/getting-started-connect#manage-sessions).
+[tutorial](/boundary/tutorials/community-administration/community-manage-sessions).
 
 #### Q: As an AWS user, can IAM roles be used to configure Boundary's dynamic host catalog?
 At this time, it is not possible to configure Boundary's dynamic host catalog using IAM roles.
 You can configure the dynamic host catalog using an IAM user, however.
-For more information, refer to the [Dynamic host catalogs on AWS](/boundary/tutorials/access-management/aws-host-catalogs) tutorial.
+For more information, refer to the [Dynamic host catalogs on AWS](/boundary/tutorials/host-management/aws-host-catalogs) tutorial.

content/boundary/v0.13.x/content/docs/concepts/domain-model/credential-libraries.mdx

@@ -109,7 +109,7 @@ The example above uses the account email, but it could be any other parameter.
 
 ## Tutorial
 
-Refer to the [SSH certificate injection with HCP Boundary](/boundary/tutorials/access-management/hcp-certificate-injection) tutorial to learn how to configure credential injection with SSH certificates using Vault.
+Refer to the [SSH certificate injection with HCP Boundary](/boundary/tutorials/credential-management/hcp-certificate-injection) tutorial to learn how to configure credential injection with SSH certificates using Vault.
 
 ## Referenced by
 

content/boundary/v0.13.x/content/docs/troubleshoot/faq.mdx

@@ -14,58 +14,58 @@ Refer to the following for answers to frequently asked questions about Boundary.
 Boundary workers require inbound access from clients. This does not necessarily require that workers be exposed to the public internet.
 If the client is coming from a private network (eg a corporate network), the worker needs to allow connectivity from the private network.
 If the client is coming from the public internet, the worker needs to allow connectivity from the public internet. For more information,
-check out the [worker networking requirements](/hcp/docs/boundary/self-managed-workers).
+check out the [worker networking requirements](https://developer.hashicorp.com/hcp/docs/boundary/self-managed-workers).
 
 ## Q: Does Boundary require Vault? What is the integration story?
 
 While Vault isn't a *required* secrets backend for Boundary sessions, the potential for Boundary | Vault integration is a core part of Boundary's overall
 value proposition for identity-based access.There are three primary points of integration with Vault:
 1. Vault can be used as a secrets backend for Boundary, offering single signon to end target systems via credential brokering. This was covered in Boundary's
 [0.4 announcement](https://www.hashicorp.com/blog/announcing-hashicorp-boundary-0-4) and there are ample
-[tutorials](/boundary/tutorials/access-management/oss-vault-cred-brokering-quickstart) of this scenario.
+[tutorials](/boundary/tutorials/credential-management/community-vault-cred-brokering-quickstart) of this scenario.
 2. Boundary can use Vault as an OIDC provider to enable sign-in with Vault's supported auth methods (even non-OIDC auth methods like Active Directory kerberos/LDAP).
 This scenario is walked through in this [tutorial](/vault/tutorials/auth-methods/oidc-identity-provider).
 3. Boundary Community Edition can use Vault as the external KMS that serves as Boundary's root of trust. More information on this use case can be found
 [here](/boundary/docs/configuration/kms/transit).
 
 ## Q: What identity providers does Boundary support?
 
-Boundary supports [OIDC authentication](/boundary/tutorials/access-management/oidc-auth), which allows support for many popular IdPs
+Boundary supports [OIDC authentication](/boundary/tutorials/identity-management/oidc-auth0), which allows support for many popular IdPs
 like Okta, Azure AD, Auth0, etc. For non-OIDC authentication protocols (such as LDAP), users can also log in with an OIDC bridge identity provider
-such as [Vault's OIDC bridge](/vault/docs/concepts/oidc-provider) capabilities released in 1.9, [Dex](https://dexidp.io), or various others.
+such as [Vault's OIDC bridge](https://developer.hashicorp.com/vault/docs/concepts/oidc-provider) capabilities released in 1.9, [Dex](https://dexidp.io), or various others.
 
 ## Q: Does Boundary support multi-factor authentication (MFA)?
 
 Boundary Open-ID Connect (OIDC)-based authentication supports MFA if the IdP being used enforces MFA. This allows users to authenticate with an identity
 provider supporting MFA, such as Azure AD, Okta, Auth0, etc.
 Boundary also supports syncing permission claims between an IDP-managed identity and Boundary. This can be very useful when you want to sync group memberships
-from an IDP to Boundary to assign role assignments dynamically. See Boundary's [managed groups capabilities](/boundary/tutorials/configuration/oidc-idp-groups).
+from an IDP to Boundary to assign role assignments dynamically. See Boundary's [managed groups capabilities](/boundary/tutorials/identity-management/oidc-idp-groups).
 
 ## Q: Does Boundary automate the discovery and configuration of new targets (e.g. servers)? What happens if a host IP address changes?
 
 Yes, this is one of the core competencies of Boundary. Boundary can discover new targets in two primary ways
 1. Boundary's [Terraform provider](https://registry.terraform.io/providers/hashicorp/boundary/latest/docs) supports discovery of targets provisioned by Terraform
-2. Boundary's [dynamic host catalog](/boundary/tutorials/access-management/aws-host-catalogs)
+2. Boundary's [dynamic host catalog](/boundary/docs/concepts/host-discovery)
 agentlessly queries infrastructure providers to automate the onboarding and configuration of hosts
 
 All of these methods will automate the discovery and configuration of targets when their ip addresses change. Of course, static hosts can still be manually added via Boundary admin UI and CLI.
 
 For more information on dynamic host catalogs, please see:
-- [Dynamic Host Catalog on AWS](/boundary/tutorials/access-management/aws-host-catalogs)
-- [Dynamic Host Catalogs on Azure](/boundary/tutorials/access-management/azure-host-catalogs)
+- [Dynamic host catalogs on AWS](/boundary/tutorials/host-management/aws-host-catalogs)
+- [Dynamic host catalogs on Azure](/boundary/tutorials/host-management/azure-host-catalogs)
 
 ## Q: Session management capabilities - Does Boundary support live session monitoring and termination?
 
 **Session Logging/Monitoring:** Supported. Boundary creates a session log of all sessions created between identities and targets that have been onboarded to
-Boundary. You can learn how to monitor these sessions in this [tutorial](/boundary/tutorials/getting-started/getting-started-connect#manage-sessions).
-Boundary supports audit logs for [Boundary Community Edition](/boundary/tutorials/oss-configuration/event-logging) and [audit log streaming](/hcp/docs/boundary/audit-logging)
+Boundary. You can learn how to monitor these sessions in this [tutorial](/boundary/tutorials/community-administration/community-manage-sessions).
+Boundary supports audit logs for [Boundary Community Edition](/boundary/tutorials/self-managed-deployment/event-logging) and [audit log streaming](https://developer.hashicorp.com/hcp/docs/boundary/audit-logging)
 for HCP Boundary. Audit logs for both distributions can be exported to SIEM or BI tools.
 
 **Session Termination:** Supported. Session termination for Boundary administrators is a supported capability, as demonstrated in this
-[tutorial](/boundary/tutorials/getting-started/getting-started-connect#manage-sessions).
+[tutorial](/boundary/tutorials/community-administration/community-manage-sessions).
 
 ## Q: As an AWS user, can IAM roles be used to configure Boundary's dynamic host catalog?
 
 At this time, it is not possible to configure Boundary's dynamic host catalog using IAM roles.
 You can configure the dynamic host catalog using an IAM user, however.
-For more information, refer to the [Dynamic host catalogs on AWS](/boundary/tutorials/access-management/aws-host-catalogs) tutorial.
+For more information, refer to the [Dynamic host catalogs on AWS](/boundary/tutorials/host-management/aws-host-catalogs) tutorial.

content/boundary/v0.14.x/content/docs/concepts/domain-model/credential-libraries.mdx

@@ -115,7 +115,7 @@ The example above uses the account email, but it could be any other parameter.
 
 ## Tutorial
 
-Refer to the [SSH certificate injection with HCP Boundary](/boundary/tutorials/access-management/hcp-certificate-injection) tutorial to learn how to configure credential injection with SSH certificates using Vault.
+Refer to the [SSH certificate injection with HCP Boundary](/boundary/tutorials/credential-management/hcp-certificate-injection) tutorial to learn how to configure credential injection with SSH certificates using Vault.
 
 ## Referenced by