252 Commits (000fc7c0e014d01dbbcef87e8a62aa2f2b149641)

Author	SHA1	Message	Date
Irena Rindos	1821cb4631	Use tofu token from controller (#3064) ... * initial commit	3 years ago
Jeff Mitchell	b2bab45c13	Port over changes (#3061) (#3062)	3 years ago
Johan Brandhorst-Satzkorn	18eed58ec5	fix(targets): Use correct error string in enterprise (#2984) ... In enterprise the error is different, so we need a different test error string to compare against. Create a variable that can be overwritten in the enterprise repo.	3 years ago
Johan Brandhorst-Satzkorn	8a0ee97f3b	fix(targets): Readd WorkerFilterDeprecationMessage (#2982) ... This variable is updated in the enterprise repo and needs to stay.	3 years ago
Johan Brandhorst-Satzkorn	ac3543bdfb	fix(targets): Use correct field name in deprecation warning (#2978)	3 years ago
Todd	fe5b554370	AuthorizedDownstreamWorkers now separated from AuthorizedWorkers to maintain API compatibility (#2957) ... * AuthorizedDownstreamWorkers now separated from AuthorizedWorkers to maintain API compatibility	3 years ago
Todd	3461caee41	fix downstream manager test (#2950)	3 years ago
Johan Brandhorst-Satzkorn	cf412b95a2	fix: Support streaming HTTP responses (#2956) ... * all: Upgrade listenerutil dependency The new listenerutil implements http.Flusher, which is necessary for streaming responses from the grpc-gateway to work. * daemon/controller: Remove newline delimiter in streaming responses The default gRPC-Gateway HTTPBody marshaler uses newlines as a delimiter. This introduces newlines in our streamed responses. Wrapping the default marshaler lets us define a nil delimiter, which ensures our streaming responses are unaffected by the server side chunking.	3 years ago
Todd	1e89be1b1a	Downstream worker connections are tracked by worker id (#2949) ... When possible downstream workers will include their worker id information in the connections they establish with the upstream using the nodeenrollment library. The tracking listener now tracks connections that are connected in this same way instead of just connections of type *tls.Conn.	3 years ago
Eng Zer Jun	6403b0f389	test: use `t.TempDir` to create temporary test directory (#2922) ... This commit replaces `os.MkdirTemp` with `t.TempDir` in tests. The directory created by `t.TempDir` is automatically removed when the test and all its subtests [complete. Prior to this commit, temporary directory created using `os.MkdirTemp` needs to be removed manually by calling `os.RemoveAll`, which is omitted in some tests. The error handling boilerplate e.g. defer func() { if err := os.RemoveAll(dir); err != nil { t.Fatal(err) } } is also tedious, but `t.TempDir` handles this for us nicely. Reference: https://pkg.go.dev/testing#T.TempDir Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>	3 years ago
Damian Debkowski	cabe362534	fix(handler): return targetId as hostId for cli edge case support (#2920)	3 years ago
Jeff Mitchell	1e9057d8a3	Update KMS references	3 years ago
Damian Debkowski	84b410974b	fix(handlers): return error when updating json cred w/ empty obj (#2903) ... * fix(handlers): return error when updating json cred w/ empty obj * chore(handlers): split cond stmt & refactor func name	3 years ago
Timothy Messier	e25b0e7888	fix(credentiallibraries): Fallback logic to support 0.11.x cli (#2910)	3 years ago
Johan Brandhorst-Satzkorn	3c29308673	chore: Add license headers to all files	3 years ago
Timothy Messier	718e183a1e	fix(credentiallibraries): Correctly populate attrs for vault-generic (#2901)	3 years ago
Irena Rindos	4114b41527	Filter managed workers from egress workers when the host address is unsafe (#2899)	3 years ago
Hugo	e455e31f9e	fix(target): Incorrectly allowing whitespace on Target's address field (#2862)	3 years ago
Timothy Messier	12a53bbfa9	feat(target): Allow vault ssh cert library as credential source ... This allows the new vault ssh certificate credential library to be used as an injected application credential source.	3 years ago
Timothy Messier	1aaaf4af1d	feat(controller): Translate ssh certificate credentials for worker	3 years ago
Haotian	43f0ba89cf	feat(credentiallibraries): support vault ssh certificates	3 years ago
Todd	d8aea569c5	Only return live workers in ListHcpbWorkersResponse (#2876)	3 years ago
Irena Rindos	a030c15403	Support HCPBInt in hcpb_cluster_id field (#2880) ... * initial commit	3 years ago
Johan Brandhorst-Satzkorn	55259029f1	Add job run cleaner (#2866) ... * chore: remove duplicate import * feat: Add job run cleaner The new job cleans job runs older than a configured interval. Configure the job to clean jobs older than 1 minute.	3 years ago
Irena Rindos	ed9f2b2730	bug(workers): Check initial upstreams for an HCBP environment (#2869)	3 years ago
Jeff Mitchell	19180af0eb	Fix target port handling (#2846) ... * Fix target port handling This fixes two issues that compounded on each other (see the Changelog update for more information): * The verification logic for hosts was not correct for update operations (in multiple ways) which meant that a host could be updated after creation to have a port. Targets had a previously fixed bug where they did not require a default port, which meant that ports could be used from hosts * A recent (unreleased) change had prioritized any port coming from the host over the default port, which would mean there was no way if a host had a port specified to use it in multiple targets. This fixes the update verification logic, and strikes a middle ground between breaking things and not by allowing existing addresses with ports to be used with targets but ignoring that port, instead requiring targets to have default port set at authorize time (currently there is backwards compat that does not require this due to the original optional port bug). * Update CHANGELOG.md Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	3 years ago
Irena Rindos	00a73f64d9	bug(sessions): Fix authorizeSession race conditions in handleProxy (#2795) ... * initial commit	3 years ago
Todd	d66b92abe0	Add directly connected downstream workers to the worker resource api (#2831)	3 years ago
Todd	87b09d5e27	Rename router to receiver for secondary connections (#2816)	3 years ago
Todd	b359561e51	Filter WorkerList by feature and go from version string to version.Info (#2807)	3 years ago
Jim	e64163ad1d	fix (controller): prevent panic when controller stops when there's no listener (#2793)	3 years ago
Todd	bc409bc7d4	Graceful shutdown blocks on running proxy handler connections (#2789)	3 years ago
Todd	38b74ce897	Provide a worker decryption function to proxy handlers (#2784)	3 years ago
Todd	0b87acb896	Always call PostConnectionHook in dialer and fix Dial bug (#2783)	3 years ago
Irena Rindos	bb281e494f	Fix status NPE if worker has been sitting waiting for registration (#2781)	3 years ago
Irena Rindos	5d5dc7524c	update dial function doc to include options (#2776)	3 years ago
Irena Rindos	d3d1fa0b55	initial commit (#2768)	3 years ago
Irena Rindos	beb97ac9f2	SSH Proxy support (#2736) ... * initial commit	3 years ago
Hugo	1fb960575f	Merge pull request #2613 from hashicorp/llb-target-address ... Assign a Network Address to a Target	3 years ago
Irena Rindos	a403b3904c	initial commit (#2735)	3 years ago
Hugo Vieira	f85da3ee2b	feat(cmd): Create target using address on boundary dev / database init ... Creates a target using an address for boundary dev and when first init-ing boundary (boundary database init). It also makes this newly created target the default one (ttcp_1234567890). The target using host sources is now a secondary target (ttcp_0987654321).	3 years ago
Damian Debkowski	1d3930a711	feat(handlers): Support address field on a Target	3 years ago
Johan Brandhorst-Satzkorn	61c90c5623	Add grant parsing fuzz test (#2534) ... * testing(perms): Add Parse fuzz test I ran this for a few minutes and it didn't discover anything catastrophic. * Add roundtrip tests * Fix invalid unicode parsing, empty output fields * Do the unicode conversion once on input * Remove incorrect fix for empty output fields * Allow empty output_fields This is the same behavior as output_fields=, * Add tests back, make JSON behaviour consistent * Rework the output fields mechanism to fix some bugs such as properly handling no fields * Change signature of Fields Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	3 years ago
Irena Rindos	9135cc7668	In absence of ingress filter, use directly connected worker (#2757) ... * directly connected ingress filtering	3 years ago
Irena Rindos	24bbf57a19	AuthorizeConnection with filters (#2734) ... * AuthorizeConnection with filters	3 years ago
Irena Rindos	7db9fc59ce	Expose State() *structpb.Struct interface through the metric connection trackers	3 years ago
Irena Rindos	5c73e43912	revert 2712 (#2713)	3 years ago
Irena Rindos	a135127524	Move dialingListener setAddresses	3 years ago
Irena Rindos	173e1587d0	Append initial worker upstreams if current upstreams are unresponsive (#2698) ... * Append initial worker upstreams if current upstreams are unresponsive	3 years ago
Todd	7a6983c463	Fix wrapped reverse grpc listener (#2702)	3 years ago