28 Commits (1cf94d0e3edd25f412ffdb618b0e2116a7c343ea)

Author	SHA1	Message	Date
Louis Ruch	6a92e08928	refact(worker): update worker porxy handler signature to return an error (#1536) ... Instead of requiring the each proxy handler to handle the webSocket connection closure. On error the worker handler will appropriately close the connection and event any errors.	5 years ago
Louis Ruch	4cdce29a84	fix(connect): Remove erroneous event error message (#1500) ... When a session is terminated by the user, the cancel session path is triggered, in this path the websocket connection is closed. If the connection is already closed, an EOF is returned. In this situation an EOF is expected and should not be logged to the user. Example log line: { "id": "ezqk6w9dOQ", "source": "https://hashicorp.com/boundary/dev-controller/boundary-dev", "specversion": "1.0", "type": "error", "data": { "error": "failed to close WebSocket: failed to read frame header: EOF", "error_fields": {}, "id": "e_n60YPsDkaj", "version": "v0.1", "op": "worker.(Worker).handleProxy", "info": { "msg": "error closing client connection" } }, "datacontentype": "text/plain", "time": "2021-09-02T10:05:46.587513-07:00" }	5 years ago
Louis Ruch	db8e9bb0c6	refactor(worker): refactors the proxy handler to use endpoint scheme (#1491)	5 years ago
Louis Ruch	31af49e76d	refactor(worker): Move tcp_proxy into its own package (#1458) ... * refactor(worker): Move tcp_proxy into its own package This refactors: - the tcp_proxy.go into worker/proxy/tcp - add a missing unit test for the HandleTcpProxyV1 - refactors session.go into worker/session, needed to avoid import cycle - adds a baseline for a mock controller session client - go lint fixes * Add sleep between spinning listener goroutine and dialing Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Jim	477b541bf0	Events: ongoing clean up of eventing (#1448)	5 years ago
Jim	70ad081e39	Events: convert from hclog to events (#1409)	5 years ago
Jeff Mitchell	ed6c59a053	Update the rest of the shared libs locations	5 years ago
Chris Marchesi	9f9acce972	[Merge to main] internal/servers/worker: Controller failure connection cleanup (#1330) (#1357) ... This commit adds some rudimentary functionality for cleaning up connections on controller failure, or more specifically, a failure to communicate with the controllers. In this scenario, when a status cannot be sent for any reason for longer than 30 seconds, the worker will close all connections that are normally not cleaned up (so for sessions that currently are *not* in the progress of being canceled or terminated). Status requests now time out after 10 seconds if they are not made successfully. Session status is not touched during this process, but natural cleanup or connectionless sessions will still occur. This should be okay, as the session should be added on re-connect if need be. A few other changes are made to cancelConnections: first, error logging has been moved to the function so that we can handle errors requesting cancellation directly within the function; this entails simply just locally marking these connections as closed with a warning. Second, there was a minor logging bug where closed connections were not properly being noted in the last trace log, this has been fixed. Additional changes: * Circle: Set acceptance test no_output_timeout to 30m	5 years ago
Michael Gaffney	94cb79bbdd	See how Boundary would look with gofumpt applied (#853) ... * See how Boundary would look with https://github.com/mvdan/gofumpt applied Results of running `gofumpt -w -s .` * Update tools file and Makefile for gofumpt Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Jeff Mitchell	a6cca576a3	Attempt canceling sessions by the client (#831) ... * Attempt canceling sessions by the client In some circumstances (like a Ctrl-C), the client knows it's shutting down and the TOFU token will be lost. In this case it makes sense to cancel the session rather than have it time out. This introduces a command enum to the handshake message which can be used for the client to send commands to the worker -- in this case the only specified command is to cancel the session. It doesn't occur if the session is already timed out or if we can't authorize connections as this generally means the session is already invalid.	5 years ago
Jeff Mitchell	1f48d97327	Support for Unix domain socket listeners (#705) ... The client already supports protocol-agnostic transport so handles unix:/// schemes.	6 years ago
Jeff Mitchell	e86c11db62	Add session lifecycle info to controller's INFO log. (#431) ... This required some plumbing, but nothing major.	6 years ago
Christian Frichot	3940842c4d	Remove legacy references to Vault's API (#426)	6 years ago
Jeff Mitchell	33b0021547	Add Sessions CLI command and add session cleanup to worker (#388)	6 years ago
Jeff Mitchell	9cbc7b5c3d	Add connection close call from worker to controller (#387)	6 years ago
Jeff Mitchell	7ff4b7f106	Send connected RPC to controller (#386)	6 years ago
Jeff Mitchell	4669c95999	Pass more session info around, make proxy UX nicer (#385)	6 years ago
Jeff Mitchell	f7e48ec836	Plumb connection limit to proxy and output it (#384)	6 years ago
Jeff Mitchell	5214f14105	Work on connection authorization (#381)	6 years ago
Jeff Mitchell	e002326293	Plumb timeouts to worker and set appropriate deadlines (#378)	6 years ago
Jeff Mitchell	07a7e9750a	Tie together the database-driven session handling with the worker and add relevant CLI comands (#370)	6 years ago
Todd Knight	33e7b4538e	WorkerCoordination and GetSession API refactoring (#354) ... * Possible api changes. * Worker API update. * Updating import alias name. * Moving session down a level as a member of the GetSessionResponse. * Marshal the auth flag into the GetSessionResponse proto instead of the session.	6 years ago
Jeff Mitchell	c689af4306	Implement a TOFU mechanism on auth to worker (#348) ... This sets us up to better support multiple connections per session at some future point.	6 years ago
Jeff Mitchell	23156afa11	Add in most of the proxy flow (#326)	6 years ago
Jeff Mitchell	b47cca0329	Add (non-db aspects of) the recovery key workflow (#286)	6 years ago
Jeff Mitchell	5d104a7a01	Migrate off Vault's internalshared folder to the separated-out repo	6 years ago
Jeff Mitchell	6661117d4c	The name. The name. The name!	6 years ago
Jeff Mitchell	1645c3106e	Migrate a bunch of stuff around to prep for worker command (#2) ... Right now it's essentially a copy; it needs some updating, integration into dev, and so on.	6 years ago