boundary

Commit Graph

Author	SHA1	Message	Date
irenarindos	15844f5879	Revert "CE changes for ENT (#6334 )" This reverts commit `a1718effba`.	4 months ago
Sorawis Nilparuk (Bo)	42e682e120	Mark expired Vault token as expired when Vault is unreachable (#6235 ) * add shutdown function to TestVaultServer * implement shutdown function in TestVaultServer * stop renewing vault token when token has already expired * Add comment * clean up error checks * modify credential_vault_token_renewal_revocation_view to include expiration_time * include TokenExpirationTime in clientStore * add test to validate that unexpired tokens are not set as expired * add token status validation * add expiration time validation to tests * add small comment * remove unnecessary renew from test * fix token translation uses wrong time field and add tests * add more token status validation * fix lint * move migration to 103 * remove t.Parallel() comments * remove unused setup code * use atomic for testvault.stopped implement atomic read/write for testvault * remove file created by merge conflict * make gen	4 months ago
hashicc	ef75427403	Add path attribute to split cookies (#6298 ) * Add "Path" attribute to "/" Without this the browser defaults to a path of the parent of the path in the request. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie#pathpath-value This means the cookie isn't included in api requests since the path is too restrictive * Update tests with split cookie path attribute	4 months ago
Abhishek Manjegowda	a1718effba	CE changes for ENT (#6334 ) Approved	4 months ago
Sorawis Nilparuk (Bo)	fe09f61a85	chore(test) fix flaky tests (#6315 ) * internal/cmd/commands/server/listener_reload_test.go remove t.Parallel() comment * internal/cmd/commands/server/worker_initial_upstreams_reload_test.go remove t.Parallel * internal/cmd/commands/server/worker_tags_reload_test.go wait by polling worker instead of sleep * internal/daemon/worker/routing_info.go make deep copy in LastRoutingInfoSuccess to avoid race condition * internal/tests/cluster/parallel/orphaned_connections_test.go raise grace period time to allow test to wait for longer * improve logging in sequential tests * move ports around and use t.Cleanup to send shutdown signal to test server * fix one typo * do final assert in t.Cleanup instead of defer * undo t.Cleanup change * add another signal to force shutdown running servers * add exit early and increase server start timeout * tighten workerRPC settings on session tests * tighten more workerRPC timing * make gen * add comment explaining deep copying lastRoutingInfoSuccess	5 months ago
Abhishek Manjegowda	f56158b7df	ICU-18284-testcase param removed (#6310 )	5 months ago
Abhishek Manjegowda	c4dc2a43cc	refactor : ICU-18284-Unify SecureRandomReader (#6303 ) * Unify SecureRandomReader * vault changes updated * target changes added * reviwed changes updated	5 months ago
Ryan Derr	a396d60232	fix(db): Update migration 102 sql file to correct name including .up (#6295 )	5 months ago
Abhishek Manjegowda	0fc70d82ee	refactor: Update Password use of crypto/rand to SecureRandomReader (#6259 ) * reactor: Update Password use of crypto/rand to SecureRandomReader * changes updated * make gen error changes * make gen error changes * new changes updated * new changes updated * Revert "new changes updated" This reverts commit `85ee1d2186`. * Revert "new changes updated" This reverts commit `b4df844523`. * SecureRandomreader introduced to password * SecureRandom pkg removed * updated	5 months ago
Priya Patel	d81c474aeb	Bump internal/ui/VERSION commit to 2766be2 (#6290 )	6 months ago
Hugo	ad5ce4fbf8	fix(db): Delete legacy credential_vault_library_deleted purge job (#6284 ) With the refactor in version 99, the credential_vault_library_deleted table was renamed to credential_vault_generic_library_deleted, but its corresponding purge job was not removed from the job table, leading to an error: "job credential_vault_library_deleted_items_table_purge not registered on scheduler". This commit deletes the legacy job entry. The new job that takes over the legacy one is credential_vault_generic_library_deleted_items_table_purge.	6 months ago
Priya Patel	2fb43e943e	Bump internal/ui/VERSION commit to 95f72e1 (#6270 )	6 months ago
dani	814ffcca07	chore: bump version to 0.21.0 (#6267 )	6 months ago
Louis Ruch	4bae4f23f5	feat(ssh): support ssh known hosts file (#6263 )	6 months ago
Justin Nguyen	d3b2e7402b	feat: add password credential to meta_session.go (#6257 )	6 months ago
Justin Nguyen	dc7f0b00fc	Merge pull request #6207 from hashicorp/llb-password-credential-type Password credential type	6 months ago
dani	08015e9d98	feat(clientproxy): automatically close boundary connect when proxy is no longer in use (#6232 ) Co-authored-by: Andrew Gaffney <andrew@gaffney.cc>	6 months ago
Bharath Gajjala	c39a50570a	fix(db): vault password library migration adjustments and mapping overrides (#6229 )	6 months ago
Justin Nguyen	1ac444d0a8	feat(cli): Add support for password credential in redis helper (#6213 )	6 months ago
Bharath Gajjala	d4f7bd55d1	feat(cli): Add password credential CLI commands (#6117 )	6 months ago
Bharath Gajjala	11c4fd7580	feat(handlers): CRUDL support for static password credential (#6181 )	6 months ago
Bharath Gajjala	ec7450961c	feat(credential/static): Implement CRUDL support for password credentials (#6163 )	6 months ago
Justin Nguyen	82745e16be	feat(handlers): Implement CRUDL for vault generic Password credential (#6161 )	6 months ago
Justin Nguyen	4a8009fec4	feat(credential/vault): Implement repository for vault password credential (#6140 )	6 months ago
Justin Nguyen	3ab1019bc2	feat(db): Add db migration to support vault password credential (#6129 )	6 months ago
Bharath Gajjala	1c2bc2cc74	feat(db): Password credential migration (#6125 )	6 months ago
Justin Nguyen	8bce750933	feat(db): Add new tables for password credential type (#6101 )	6 months ago
Bharath Gajjala	5cf33fa8b3	feat(credentials): Add PasswordAttributes credential type (#6110 )	6 months ago
Irena Rindos	4a4bbd723e	chore(sqltest): update readme (#6228 )	6 months ago
dani	4a7342b074	fix(credential/vault): add case for upd creds in injected creds switch (#6226 )	7 months ago
Hugo	546550fa4f	docs(credential/vault): Clarify LdapCredentialLibrary issuing cred type	7 months ago
Andrew Gaffney	9652ebe032	feat(cmd): Support Vault LDAP Credential Library	7 months ago
Hugo	84dd5543cf	feat(handlers/credentiallibraries): Support Vault LDAP credential library	7 months ago
Hugo	9e08eafcff	feat(credential/vault): Implement LDAP Credential Library	7 months ago
Andrew Gaffney	ebf0450b03	feat(db): LDAP Credential Library history entities	7 months ago
Andrew Gaffney	f4d81e0026	feat(db): LDAP Credential Library operational entities	7 months ago
Hugo	548782a261	refact(db): Redefine credential_vault_library The existing credential_vault_library table is the table that holds operational state for Vault generic credential libraries. This commit renames that table and all its associated database entities to credential_vault_generic_library. Additionally, a new credential_vault_library table is created as the base table for all Vault-subtype credential libraries (eg: Vault generic, Vault SSH Cert).	7 months ago
Robert Main	18f469105c	Deprecate website folder (#6212 ) * Update website folder to indicate deprecation Adds an alert banner to the top of all MDX files within `/website` to indicate deprecation * Update website README	7 months ago
Robin Beck	25847c3884	Docs: permstable resource-table UDR migration (#6162 ) * moves resource-table.mdx to internal/website/permstable * updates location of generated resource-table.mdx file to internal/website/permstable/ This change facilitates the implementation of the web-unified-docs content migration, which will need to source generated content like this table from outside the website folder after the content migration.	7 months ago
Johan Brandhorst-Satzkorn	8f5bb3a8b1	config: remove unused telemetry stanza (#6137 ) I think this was somehow accidentally included from Vault back in the day and never removed. As far as I can tell these options have absolutely no effect on anything in Boundary and will probably only cause confusion.	7 months ago
April-May	003007aaa3	chore(proxy): Reduce noisy error logs (#6136 )	7 months ago
April-May	dc25c1aadd	chore(errors): Add early disconnection error (#6126 )	7 months ago
Bharath Gajjala	4078838f56	feat(mongo): Add MongoDB connection support for Boundary CLI PORT (#6069 ) * feat(mongo): add mongo for boundary cli * Fix: remove changes added by mistake during testing * feat(enos): install MongoDB client (mongosh) in e2e Docker test runtime * Remove explicit Boundary DB/server startup from target_tcp_connect_mongo_test.go * Add a full stop and trigger CI * feat: add mongosh support to boundary connect mongo * feat: add mongosh support to boundary connect mongo * feat: add auth-source flag for MongoDB connect command - Add -auth-source flag with default value 'admin' for root users - Add BOUNDARY_CONNECT_MONGO_AUTH_SOURCE environment variable support - Update documentation with new flag and correct mongosh default - Improve MongoDB test with explicit auth-source parameter - Fix Docker configuration formatting for better readability This ensures MongoDB root users authenticate against the admin database by default while allowing flexibility for custom authentication databases. * test(e2e): Fixed false positive in Mongo connect test; use UriNetwork and container hostname * make gen * fix: Removed unnecessary variable containerName from the MongoDB E2E test * feat(connect/mongo): Build URI compatible with mongosh and set default authSource * feat(connect/mongo): use mongosh flags following PostgreSQL pattern * remove 'connection string' from auth-source usage text * Update internal/cmd/commands/connect/mongo.go Co-authored-by: Bharath Gajjala <120367134+bgajjala8@users.noreply.github.com> * remove 'connection string' from auth-source usage text * refacotr: replace authSource flag with authenticationDatabase --------- Co-authored-by: Enbiya <100806254+enbiyagoral@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	7 months ago
David Kanney	7e6e70a40f	feat(plugins): Add IBM Key Protect (IBM Cloud KMS) wrapper (#6112 ) * feat(plugins): Add IBM Key Protect (IBM Cloud KMS) wrapper * make gen	7 months ago
Justin Nguyen	4548028efe	ICU-14484: redis connect helper (#6001 ) * add redis connect support * Setup redis in docker for e2e testing * Update docs and changelog * Commenting out e2e tests for now, will revisit in a separate task	8 months ago
Louis Ruch	6f945ec27a	fix(host): move GetWrapper call out of transaction (#6071 )	8 months ago
April-May	1a6a0b9d94	Revert "fix(target): Skip fetching proxy server cert (#6055 )" (#6066 ) This reverts commit `3dd238a6cf`.	8 months ago
hashicc	84446112df	Bump internal/ui/VERSION commit to 31f0044 (#6064 )	8 months ago
April-May	3dd238a6cf	fix(target): Skip fetching proxy server cert (#6055 )	8 months ago
dani	5ebf11caeb	create a deferral to automatically close sessions after creating them during boundary connect (#6054 )	8 months ago

1 2 3 4 5 ...

2841 Commits (rand-read-reverting)