156 Commits (jeff-error-cli-update)

Author	SHA1	Message	Date
Jim	dc379ed09f	handle unlimited connections when terminating sessions. (#536)	5 years ago
Jim	09b43e5569	deprecate/remove LookupByName (#530)	5 years ago
Jim	bd547fd0d6	terminate a canceled session when its last connection is closed. (#520)	5 years ago
Jeff Mitchell	fa700dc002	Add account ID templating (#518) ... * Remove default role and create via the same mechanism as other initial resources	5 years ago
Jim	19aecfefae	terminate "completed" sessions (#477)	5 years ago
Jeff Mitchell	6ddfe407a3	Update allowed formats of ACL strings (#508)	5 years ago
Jim	1e71c55920	deprecate access to underlying *sql.DB via internal/db.DB() (#506)	5 years ago
Michael Gaffney	a9e806b673	Data warehouse (#475) ... * Define initial warehouse schema * Add session id as the primary key to the session accumulating fact table * Insert a row to use instead of nulls in the time and date dimensions * Add missing attributes and a partial index * Rename files * Refactor: move fact table to a separate migration * Add domain types for the warehouse * Add session connection transaction fact table * Change columns to match ingress data types * Add views for host dimension ingress * Create source and target views for the host and user dimensions * Generate random ID for dimension table primary key * Formatting changes * Add current dimension id to target views * Implement upsert function for host dimension * Use domain types for upsert function parameters * Fix indentation * Add wh_public_id domain type * Fix value of type columns when the other columns are null * Implement upsert function for user dimension * Add warehouse domain types for timestamps and text fields * Move fact table migrations to a higher number * Add functions for getting the current date and current time IDs * Rename backend to endpoint in column names * Rename fact tables The fact tables are actually accumulating fact tables not transactional fact tables. * Add default value to connection_authorized_time column * Update session fact table * Add session_max_seconds, session_connection_limit, and default_port to wh_host_dimension * Move session table above connection table * Add after insert trigger to session table for warehouse ingress * Add fk from connection warehouse table to session warehouse table * Implement insert trigger for session connections * Update warehouse for a user having multiple auth accounts * Rename warehouse columns to be consistent with operational tables * Add connection specific columns to the connection fact table * Update session calculations in warehouse * Rename functions and formatting changes * Rename session columns to match names of session states * Implement warehouse triggers for session and connection state changes * Run 'make migrations' * Use a static start and end date for the warehouse date dimension * Document warehouse functions * Remove outdated TODO comments * Add TODO comments for additional dimensions and fact table columns	5 years ago
Jeff Mitchell	cefea936c3	Update ACLs to allow type=*. (#504)	5 years ago
Jeff Mitchell	a38f40606e	Create default roles in scopes to allow authentication and listing scopes/auth methods (#502)	5 years ago
Jeff Mitchell	c1a1f8bb1b	Separate out docker dep into package (#482) ... This also then removes support for docker-based containing starting (for now) from platforms other than windows/darwin/linux as there are build issues on several.	6 years ago
Jeff Mitchell	bec3d702fb	Add -database-url to dev mode (#459) ... Create default dev mode login name of "admin" and password of "password"	6 years ago
Jim	978f7dc34c	fix immutable columns for session_state and session_connnection_state (#449)	6 years ago
Jim	21ca0b6388	SetAssociatedAccounts, DisassociateAccounts, AssociateAccounts with support for multiple accounts. (#439)	6 years ago
Michael Gaffney	36d465476c	Name all the check constraints in the database (#410) ... * Name all of the check constraints * Run 'make migrations'	6 years ago
Jim	57da9f918e	cancel a session when one of its FKs is set to null (#406)	6 years ago
Michael Gaffney	f0c84de49c	Disambiguate auth_account scope_id by adding iam_user_scope_id column (#407)	6 years ago
Jeff Mitchell	dd06615c2e	Add database initialization command (#400)	6 years ago
Jeff Mitchell	7e3c174b70	Disallow deletion of r_default (#398) ... If it's a useful named resource and people accidentally delete it e.g. with TF, they can't get it back. This doesn't affect TF's ability to manage it, just delete.	6 years ago
Jeff Mitchell	f25186f78a	Standardize on one spelling of "canceled" (#399)	6 years ago
Michael Gaffney	d52fb81e68	Change the default max session for a target to 8 hours (#392) ... * Change the default max session for a target to 8 hours * Run 'make migrations'	6 years ago
Jeff Mitchell	7db0e2a5ed	Fix database check	6 years ago
Jim	5764b2c70a	return States as a field of Connection repo operations. (#382)	6 years ago
Jeff Mitchell	edffc7863d	Change connection limit to -1 for unlimited so it works with TF (#383) ... * Migrate connection limit unlimited value to -1 * Fix authorization check	6 years ago
Jim	66400c9cff	changes needed for sessions.AuthorizeConnection (#377)	6 years ago
Jeff Mitchell	5bf555cca2	Remove connection idle timeout seconds for now (#379)	6 years ago
Jeff Mitchell	0a3f9b8357	Rename connection idle timeout duration -> seconds and sessions max duration -> seconds (#376)	6 years ago
Jeff Mitchell	62baef1b7e	Add multi connection parameters through targets and into session creation (#375) ... * Update protos and gen * Add new values to targets CLI command * Lots more plumbing of new parameters through everything * allow fields to be set to zero value. * Disallow set but empty name/description strings in create/update verifiers Co-authored-by: Jim Lambert <jlambert@hashicorp.com>	6 years ago
Jeff Mitchell	07a7e9750a	Tie together the database-driven session handling with the worker and add relevant CLI comands (#370)	6 years ago
Jim	e7e70b1b94	new domain functions for the session repo (#368)	6 years ago
Jim	7e927203e8	schema changes to support multi-connections (#372)	6 years ago
Jeff Mitchell	8bef1d734a	Fix mismatch in default role creation permissions	6 years ago
Jim	611288bdc7	basic sessions (#337)	6 years ago
Jeff Mitchell	c4e2b88022	Add database URL. (#365) ... * Add database URL. This allows specification of either a file://, env://, or other string. If it starts with file:// or env:// the actual value will be read from those resources. * Tidy up the KMS output * Also run migrations in test mode when specifying the URL	6 years ago
Jeff Mitchell	4ef0c57a39	Fix r_default description typo	6 years ago
Todd Knight	b998591add	Adding and updating host address validation checks (#350)	6 years ago
Michael Gaffney	4ae3a52056	Define session database schema (#322) ... * Define session database schema * Update comments * Add insert trigger for session state * Add canceling state and update foreign keys to 'set null' on delete	6 years ago
Jim	f29869b715	support for additional deks: oplog, session and token and new CreateKeysTx() (#321)	6 years ago
Jeff Mitchell	ee35a92f7f	Fix space issue in protobuf that apparently doesn't matter? Also apparently postgres migrations weren't run.	6 years ago
Jim	f3dd62d5d8	database DEKs (#317)	6 years ago
Jim	fcb61d4b67	targets repo (#298)	6 years ago
Michael Gaffney	58dec98ea2	Rename table from servers to server (#307)	6 years ago
Michael Gaffney	de162c5533	Replace and remove ErrNilParameter with ErrInvalidParameter (#295)	6 years ago
Jeff Mitchell	ac4d9fa311	Add nonce storage and replay prevention test (#293)	6 years ago
Jeff Mitchell	b47cca0329	Add (non-db aspects of) the recovery key workflow (#286)	6 years ago
Jeff Mitchell	6bf4a5ce38	Add not null checks to wt_private_id, wt_scope_id, and wt_user_id (#284)	6 years ago
Jim	9570897032	basic keys mgmt repo (#264)	6 years ago
Michael Gaffney	041e1f9fd3	Update host (#278) ... * Add IsNotNullError function to db package * Let the database handle default values not gorm * Implement UpdateHost * Remove unnecessary clone	6 years ago
Jeff Mitchell	282177afc2	Remove the default org (#270)	6 years ago
Todd Knight	01059e6ca8	Wrap StartDbInDocker in a mutex. (#275) ... * Wrap StartDbInDocker in a mutex. * Adding TODO to debug further. * Clarifying the TODO to point out a race condition.	6 years ago