1302 Commits (02ff2db66e015aed51a2b9d1735dcc8036d9bfba)

 

All Branches   

Search

Author	SHA1	Message	Date
Randall Morey	02ff2db66e	docs: add credential doc redirects and fix session redirect (#1425) ... * docs: add credential doc redirects and fix session redirect * fix: source -> library	5 years ago
Susmitha Girumala	868a165a86	Bump admin UI version for credential brokering feature (#1429)	5 years ago
Chris Marchesi	bf679c2f05	Fix Makefile target (docker-multiarch-build) (#1427)	5 years ago
Louis Ruch	76a7ce93e8	Fix race with base context cancel and final run update in scheduler (#1422) ... * Fix race with base contedt cancel and final run update * Use scheduler waitgroup to wait for all running jobs to exit:	5 years ago
Chris Marchesi	a15961e461	Close connections on worker on shutdown, add force shutdown (#1354) ... This adds functionality to ensure that connections are closed on a worker when the server is shut down or reloaded. Connections are closed, and then the shutdown process waits for the next report to the controller to go through, waiting the grace period that was added in #1330. The rest of shutdown is then proceeded with. Listener shutdown has been moved to the start of the process to ensure that new connections can't be made while we are shutting down. Additionally, functionality has been added to force shut down servers after a second interrupt has been received after the first one. This takes the form of code in both the server and dev mode code paths that just performs an os.Exit if another shutdown is received during the normal shutdown process. Additionally, the commit also includes some refactoring to tests so that we could use some of the new E2E testing code to test session connections during shutdown and reload. Additionally, this fixes a panic in worker startup when there are no controllers defined. Looks like the shutdown call was attempting to call into the controller, not the worker. Finally, this also removes the extra shutdown within the outer worker startup. Shutdown is actually handled within the inner StartWorker(), attempting shutdown on errors was actually leading to potential use of an uninitialized worker, which is leading to panics in testing.	5 years ago
Jacob Mammoliti	fc998b7034	Adding support to build multi-arch Boundary images (#1395) ... * updated dockerfile to support multi-arch; added new section in Make for multi-arch * adding a line to changelog * switching base image to hashicorp mirror	5 years ago
Nico Vibert	05869a6f74	Update manage-targets.mdx (#1376) ... Fixed typo (equivalient -> equivalent)	5 years ago
Jim	be8c3cb1ea	prevent panics when waitgroup == nil (#1423)	5 years ago
Jim	70ad081e39	Events: convert from hclog to events (#1409)	5 years ago
xuwhao	ade67e6bb5	fixed typo: specifc -> specific, varibles -> variables, idomatic -> idiomatic. (#1421)	5 years ago
Mike Wickett	acede17909	changes desktop CTA language (#1412)	5 years ago
Todd Knight	10e8aeae4b	Subtype Id registration moved to its own package (#1416) ... * Allow repo packages to register subtypes and id prefixes. * Refactor out request authentication logic to a new package as a sibling to handler.	5 years ago
Jeff Mitchell	ab6f3eaeb4	Migrate credential-library nomenclature around targets to credential-source (#1413) ... See the CHANGELOG entry for more information. Co-authored-by: Jim <jlambert@hashicorp.com> Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	5 years ago
Jeff Mitchell	528d54b4ad	Add token/userinfo claims to account read output (#1419) ... This is very useful when trying to write managed groups filters as you can directly look at the structure of the claims for the accounts you're trying to filter. The output of the claims in text format on the CLI currently leaves something to be desired. I started revamping some of the formatting functions and it quickly got very fragile. Fundamentally at this point we're likely better off -- now that we have a good idea what our output format/standards are like -- rewriting the formatting code. I'll take that as a tasker as I have a lot of ideas...	5 years ago
Michael Gaffney	d4fc2efa53	Move base interfaces of the domain into a boundary package (#1415)	5 years ago
Jim	11124794bf	Events: add node for formatting/filtering cloudevents (#1390)	5 years ago
Chris Marchesi	1ebb8efab6	Apply extra review feedback from #1340 (#1400) ... * internal/servers/controller: refactor WaitForNextWorkerStatusUpdate * internal/servers/worker: use connId instead of conn.GetConnectionId() * internal/servers/worker: remove Worker.logClose * internal/session: complement versus inclusive state search * internal/session: use ScanRows instead of Scan * internal/session: make closeConnectionsForDeadServersCte results gormable * internal/tests/cluster: rename TestWorkerSessionCleanup to TestSessionCleanup * Simplify SQL query for CloseConnectionsForDeadWorkers (#1410) Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	5 years ago
Jim	cab3dd6986	update eventlogger dep which should eliminate a possible panic with the gated.Broker is nil (#1411)	5 years ago
Jeff Mitchell	324f4d5532	Bump to Go 1.16.6, which fixes some important issues (#1407) ... * Bump to Go 1.16.6, which fixes some important issues * use linux/arm64 golang base image - Discovered the correct digest using: 'docker manifest inspect golang:1.16.6 | jq -r '.manifests[] | select(.platform.os == "linux" and .platform.architecture == "amd64") | .digest' Co-authored-by: Sam Salisbury <samsalisbury@gmail.com>	5 years ago
Chris Marchesi	aae0c29f88	internal/servers/worker: fix TestWorkerWaitForNextSuccessfulStatusUpdate (#1402) ... This fixes this test which was failing intermittently. * Ups the grace period timeout to 2s. * Re-positions the testify require.New() so that incorrect code path warnings are not given.	5 years ago
Louis Ruch	2dae498123	Ensure job progress is always reported (#1396) ... * Update completed and total when job finishes * Remove unused option in test * Add comment * Use writer for updates and inserts	5 years ago
Louis Ruch	74aba58c73	Remove Telemetry from config tests (#1401)	5 years ago
Jeff Mitchell	ed6c59a053	Update the rest of the shared libs locations	5 years ago
Jeff Mitchell	fccdf80161	Update API import	5 years ago
Jeff Mitchell	4900f249e6	Update parseutil import location	5 years ago
Jeff Mitchell	b533e12c1a	Update password import	5 years ago
Jeff Mitchell	ce52acb968	Update strutil import	5 years ago
Jeff Mitchell	44329d4ff9	Repoint mlock import	5 years ago
Jeff Mitchell	140c54e319	Repoint base62 import	5 years ago
Jeff Mitchell	5b7544c81f	Update API against shared libs and sdk	5 years ago
Jeff Mitchell	b80607ff46	Update against updated go-secure-stdlib	5 years ago
Jeff Mitchell	9ba1948298	Remove telemetry calls as we aren't using them	5 years ago
Jeff Mitchell	051fe60718	Duplicate logging instead of using from shared secure libs, as it's going out of there and we'll be moving away from hclog anyways	5 years ago
Chris Marchesi	5a70875726	internal/servers/controller: Worker failure connection cleanup (#1340) ... This commit adds the support to do the following: * Mark connections for non-reporting workers as closed. This is the controller counterpart to the worker functionality (see #1330). This is written as a scheduled job that does the work DB-side in a single atomic query. * Works to reconcile states if such a broken controller-worker connection resumes and a worker reports a connection as connected that should be disconnected. In this case, the controller will send an update request, and the worker will honor it and terminate the connection. * Further refinement of the grace period setting has been added here. We have converged on the current server "liveness" setting as our default here, which is half of the previous 30s (15 seconds, in other words). Additionally, this is now configurable on the controller and worker side, with the caveat that it's currently impossible to do so in config as the setting has been untagged in HCL. This is exposed so that we can run some sophisticated testing scenarios where we skew the grace period to either the controller or worker to ensure the aforementioned reconciliation works. * Some repository functions have been added to support the new functionality, in addition to some test code to the worker to allow querying of session state while testing. * Finally, we've added some add timestamp subtraction functions as well, basically serving as the opposite of the addition functions.	5 years ago
Mike Green	462306fea5	Remove tls_disable from cluster listener (#1389) ... Per https://www.boundaryproject.io/docs/configuration/listener/tcp#tls - having this here is invalid. All tls parameters are valid only for the api listener. cluster and proxy connections use their own ephemeral TLS stacks	5 years ago
Jeff Mitchell	2cbcf9a563	Update usage of shared-secure-libs (#1393)	5 years ago
Noel Quiles	a0c0d17c1d	Bump hashi-stack-menu (#1392)	5 years ago
Chris Marchesi	895de869ab	internal/db: add enumeration constraints for the server table (#1386) ... This adds enumeration constraints to the server table, ensuring that no servers can be added other than the types "controller" and "worker". This should already be impossible to do in code, but this adds a check on the database level to ensure it's the case as well.	5 years ago
Michael Gaffney	8890b97b6f	Update docs for minimum value of max_open_connections (#1387) ... Closes #1374	5 years ago
Michael Gaffney	a9c2674395	Document dependency on pgcrypto (#1385) ... Closes #823	5 years ago
Jim	1daa3ebefe	integrate events into the servers (#1355)	5 years ago
Carlos Alcaide Corvo	ec7577c5fe	Bump types/react dependency version (#1307)	5 years ago
Jeff Mitchell	c9e4c877b8	Update shared-secure-libs for kms block fix (#1384) ... Fixes #1305	5 years ago
Joe Thompson	e41ffb0b28	Add additional logic to entrypoint to handle more subcommands. (#1350)	5 years ago
Mike Green	d474cc6e29	Clarify default Postgres behavior (#1382)	5 years ago
Carlos Alcaide Corvo	8e8a802f21	Bump desktop client version (#1373)	5 years ago
Pete Pacent	fc4fcbda7c	[Do not Merge] Adding release notes for 0.3 and 0.4 (#1370) ... * Adding release notes for 0.3 and 0.4	5 years ago
Jim	0b66464a3a	fix typo in changelog	5 years ago
Jim	a68f131089	update api dep	5 years ago
Jeff Mitchell	7c3d5be4f6	Update format of secret to return both raw and decoded when possible (#1372)	5 years ago