* Add NIST guidance on rotating keys used for AES-GCM encryption

* Capture more places barrier encryption is used

* spacing issue

* Probabilistically track an estimated encryption count by key term

* Un-reorder imports

* wip

* get rid of sampling

Describes the setup and config for using multiple injector replicas
with auto and manual TLS.
Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>

* docs: update vault-helm for 0.9.0

* Fix typo in leaderElector config

* Add default value to ttl

* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* Add affinity default for injector

* Update website/content/docs/platform/k8s/helm/configuration.mdx
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

Will merge this after the release is done.

* Update to add the newly released Couchbase DB SE

* Update website/pages/docs/plugin-portal/index.mdx
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>

* A Database Secrets Engine plugin for Aerospike

* Order the subsections consistently

* Add PrimeKey EJBCA as partner secrets plugin

* Update website/pages/docs/plugin-portal/index.mdx

* Update website/pages/docs/plugin-portal/index.mdx
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>

Modernizing the Partner language as part of the evolution of the partner program.

The AES256-GCM96 key was mis-labeled as AES128 under Transit storage limits. Corrected the table.
Co-authored-by: Mark Gritter <mgritter@hashicorp.com>
Co-authored-by: Kyle Rarey <1784572+krarey@users.noreply.github.com>

Avoid using "KMS seal" since it causes confusion: some people think that excludes HSMs, and it's not obvious that Transit is a KMS. (#10414)

Highlight that recovery keys can't be used for recovery when an auto seal is broken (unfortunate name, that.)

* Update to list policy docs

It seems
(https://github.com/hashicorp/vault/blob/master/http/logical.go#L137) we
do not require the trailing slash any more.
Also added notes about go-discover

* Added additional note on quorum

* Added link to remove-peer command

* Add Learn links

* Update website/pages/docs/secrets/transform/tokenization.mdx
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>
Co-authored-by: Calvin Leung Huang <cleung2010@gmail.com>

* Link to transform concepts page in sidebar

* ,

* Add tokenization

* Fixes

* Add 1.6 Release Notes

* Remove usage command

* Apply suggestions from code review

* Website version + CHANGELOG
Co-authored-by: Meggie <meggie@hashicorp.com>

* Add upgrade note for tokenization

* nav

* Just 1.5

* Clarify relationship to API changes
Co-authored-by: Meggie <meggie@hashicorp.com>

Co-authored-by: Clint <catsby@users.noreply.github.com>
Co-authored-by: Yoko <yoko@hashicorp.com>

* more info on when vm params are not needed

* more updates

* Error on root rotation when username is empty

* Don't panic if the field doesn't exist