Commit Graph

263 Commits (22d400674a6c7aa346fd39afdc5987bb8eb0ffd0)

Author SHA1 Message Date
Hugo Vieira 224f8d2d4e
refact(controller): Move Target Repository Factory to the target package
4 years ago
Timothy Messier eb61ac6304
refact(session): Add context to session factory
4 years ago
Timothy Messier febf0b9984
refact(controller): Use session repo factory that takes options
4 years ago
Timothy Messier 68568828e6
perf(sessions): Use session repository with permissions
4 years ago
Timothy Messier e4bb847ad1
feat(auth): Expose ACL from VerifyResults
4 years ago
Timothy Messier 39fedd843c
test(targets): Remove auth.DisabledAuthTestContext from tests
4 years ago
Timothy Messier 02cef3d8a8
test(sessions): Remove auth.DisabledAuthTestContext from tests
4 years ago
Hugo Vieira ccb17df01a
feat(auth): Get all authorised scope info for a given list request
4 years ago
Haotian 5c715478e4
feat(workers): Add metrics for worker server-side grpc connections, refactor repeated code into common location (#2367)
4 years ago
Louis Ruch d7c4c648ec
bug(vault): Correctly handle credential stores with expired tokens (#2399)
4 years ago
Jeff Mitchell 01fb949d0b
Add controller-led worker auth flow (#2413)
4 years ago
Irena Rindos db21ead31c
Vault proxy supporting code (#2415)
4 years ago
Jeff Mitchell 9b271d7dd8
Fix error about unimplemented HcpbWorkers call (#2361)
4 years ago
Irena Rindos b4b95e0f0e
refactor(vault): add context and remove deprecated errors (#2396)
4 years ago
Johan Brandhorst-Satzkorn aef9073fa6
Upgrade to Go 1.19 (#2347)
4 years ago
Johan Brandhorst-Satzkorn ac591d8283
fix(managed_groups): Fix validation function panic (#2390)
4 years ago
Renato Costa ec3d2ef360
Fix incorrect use of loop variable in parallel tests (#2389)
4 years ago
Damian Debkowski 27e9f775be feat: add initial migration hook
4 years ago
Jim 2818bb65cd
feature (downstreams): Add hooks for optional downstream workers/router (#2359)
4 years ago
Jim 7aa7deafa3
chore: update go-dbw dependencies (#2298)
4 years ago
Jeff Mitchell 7df1331e93
Update configutil/pluginutil deps (#2346)
4 years ago
Jeff Mitchell 02dd28f587
Add support for SSH private key passphrases (#2331)
4 years ago
Jeff Mitchell 8800ec9c94
Reorganize logic to allow a poison pill (#2317)
4 years ago
Damian Debkowski c25b9285c0
fix(test) uncomment ro tests for cred update (#2301)
4 years ago
Todd 1aad2627c8
OSS side of second downstream connections (see enterprise PR 69) (#2292)
4 years ago
Jeff Mitchell 67d789cb6d
When allowed_origins is "*" use that in response (#2289)
4 years ago
irenarindos 4908aba546 feat(vault): Add unimplemented worker filter support to OSS
4 years ago
Louis Ruch 52c1a4f9f9 feat(targets): Support extraWorkerFilterFunc in target
4 years ago
Louis Ruch a17e973712
feat(credentials): Refactor credential purposes (#2260)
4 years ago
Jeff Mitchell 271cc8f781
Add ssh private key to CLI (#2265)
4 years ago
Louis Ruch ef5ac07f02
Add ssh_private_key support for Vault libraries and targets (#2263)
4 years ago
Jeff Mitchell 011e2e7425
Add ssh private key type and add type to static store (#2262)
4 years ago
Jeff Mitchell 8c56a5648d
Migrate plugin host/set/catalog prefixes to typed (#2256)
4 years ago
Haotian 28f53a64b4
feat(workers): implement worker service add/set/remove api tags
4 years ago
Jeff Mitchell 81af61ae7d
Add client next protos to KMS connection info (#2246)
4 years ago
Jeff Mitchell 1596ff3d1c
Update against new nodee conn type (#2245)
4 years ago
Jeff Malnick 1f66685864
feat: set default connection limit to unlimited (-1) instead of 1 (#2234)
4 years ago
Damian Debkowski 3e9c99c217
refactor(user_password) rename all references of user_password to username_password (#2232)
4 years ago
Damian Debkowski afd4437492
fix(error) validate credential store id when creating username/password credentials (#2231)
4 years ago
Todd 9af6c09c36
Move generated pb.go file in to the internal/gen directory (#2225)
4 years ago
Todd 19b549c44a
Rename package servers to server (#2222)
4 years ago
Jim aaf669a044
fix (API): check attributes missing appropriately. (#2219)
4 years ago
Jeff Mitchell c31b8a4383
Fix harmless but nasty-looking error (#2214)
4 years ago
irenarindos b7120bf88e bug(workers): Do not update description for status update
4 years ago
Louis Ruch 9671daf6e0 Revert "refactor(user_passsword) change all references of user_password into username_password (#2189)"
4 years ago
Damian Debkowski ab58b24142
refactor(user_passsword) change all references of user_password into username_password (#2189)
4 years ago
Jeff Mitchell 9a4545e59e
Fix eventing and worker name setup (#2204)
4 years ago
Todd 214ca9a668
Check that WorkerAuthKms is not nil before trying to decrypt with it (#2205)
4 years ago
irenarindos be0f07cc65 Merge remote-tracking branch 'origin/llb-byow'
4 years ago
Jeff Mitchell 704d68848c Merge remote-tracking branch 'origin/main' into llb-byow
4 years ago
Louis Ruch 618bcb451e
fix(target): fix type check (#2202)
4 years ago
Jeff Mitchell bfd9565010 Merge remote-tracking branch 'origin/byow-attrib-consolidation' into llb-byow
4 years ago
Jeff Mitchell 3d42737789
Don't display active connection count if it's not authorized (#2200)
4 years ago
Todd 72d122ef5c
TestUpdate for PKI and KMS workers fixed for worker service. (#2199)
4 years ago
Johan Brandhorst-Satzkorn d06ac0d370
Propagate plugin execution dir to CreatePlugin (#2183)
4 years ago
Todd b3efe0eb3a
Allow TestPkiWorker to be created in an authorized state. (#2198)
4 years ago
Todd e379234259
Remove CanonicalAddress, GetApiTags(), and NewWorkerForStatus. (#2196)
4 years ago
Jeff Mitchell 11b025c016
Start updates on worker service test (#2195)
4 years ago
Todd 90a999d3fe
Some testing fixes (#2193)
4 years ago
Louis Ruch 68eb6e2bed
chore(targets): remove deprecated credential libraries on target resources (#1533)
4 years ago
Todd beecbbb8a2
Upsert creates a new KMS and Updates PKI workers (#2187)
4 years ago
Irena Rindos 06d0f99536
bug(workersAPI): do not allow nonprintable or uppercase name or desc (#2186)
4 years ago
Jeff Mitchell e6f6665bea Merge remote-tracking branch 'origin/llb-byow' into byow-attrib-consolidation
4 years ago
Jeff Mitchell 8335deb8b6
Update protos, generated code, and service handlers (#2188)
4 years ago
Louis Ruch 4b365db634 feat(target): Add support for static credentials during authorize-session
4 years ago
Louis Ruch 00dfea1244 feat(target): Add support for static credential as target credential sources
4 years ago
Louis Ruch 58d546cdd4 feat(credential): Add static credential store and username_password credential
4 years ago
Jeff Mitchell 8fd663af47
Send more info on KMS connect (#2182)
4 years ago
Damian Debkowski 3441fa0447
(fix) added more context to error details for cli command (#2170)
4 years ago
Louis Ruch b6ca61a7f6
refact(cred-libs): Update user_password to username_password (#2154)
4 years ago
Todd 06a2f4ce9c
Require default ports to be defined for newly created tcp targets. (#2148)
4 years ago
Louis Ruch 9663404f1a
feat(scheduler): Support unlimited job runs (#2173)
4 years ago
Jeff Mitchell 82b4e29d78 Properly fix (for now) the job limit
4 years ago
Jeff Mitchell cb190c0ea1 Disable session jobs for now so other jobs work right
4 years ago
Jeff Mitchell 5d3facf561 Merge remote-tracking branch 'origin/main' into llb-byow
4 years ago
Louis Ruch c4285b29cc
fix(target): Correctly return egress credentials assocaited with target (#2167)
4 years ago
Jeff Mitchell 5b978d7fa7
Adjust parameter naming (#2161)
4 years ago
Timothy Messier d741034829
perf(session): Change list behavior around terminated sessions
4 years ago
Timothy Messier 32070678dc
perf(session): Remove connections from session list endpoint
4 years ago
Timothy Messier f9eab71a4a
feat(session): Add periodic job to delete terminated sessions
4 years ago
Jeff Mitchell d6362f9e5e
Restrict anonymous user capabilities (#2156)
4 years ago
Jeff Mitchell 9736b79d4e
Remove temporary node authorization functions (#2147)
4 years ago
Todd 1e3c941be1
Add active session count to the worker (#2145)
4 years ago
Jim 0425384b49
feature (events): add TestWithoutEventing(t) (#2137)
4 years ago
Jim fdf43fc4fe
feature (worker): add CreateWorker(...) service (aka API) (#2143)
4 years ago
Todd 0f7e1ee7fa
Fix canonical tags not getting assigned in the api resource. (#2144)
4 years ago
irenarindos 78150d88d9 feature(WorkerAuth): Create RotateRoots domain and job
4 years ago
Todd 43bcbba47f
Implement UpdateWorker service method (#2133)
4 years ago
Jeff Mitchell c59d0df611
Add worker creation ACLs (#2138)
4 years ago
Haotian 1830605a7e
refact(servers) Update api for new worker and controller server tables (#2101)
4 years ago
Jeff Mitchell 1987264bc3
Migrate storage to database repo (#2132)
4 years ago
Todd a1c2f9f4d8
Add delete service function implementation. (#2124)
4 years ago
Todd abbfe45419
Add the Read/List service functions (#2123)
4 years ago
Jeff Mitchell 98449f25eb Fix build
4 years ago
Todd 4716c1a788
Update List Workers Repo function to allow limits and provide scopes (#2121)
4 years ago
Todd 731a45eba6
Merge the worker_status table with the worker table (#2111)
4 years ago
Jeff Mitchell 46e97a2b91
Update to new nodee lib bits (#2120)
4 years ago
irenarindos c811dff89b refact(api): move worker handlers
4 years ago
Todd a281d10206
Add worker config table and view (#2090)
4 years ago
Todd 3fbf901739
Add source to worker tags table (#2087)
4 years ago
Jeff Mitchell f6ef708466 Update against new nodeenrollment registration cache
4 years ago
Jeff Mitchell 1f550722a2 Sync against current library state
4 years ago
Todd 2ecd550e27
Add fields to server_worker to be a boundary resource (#2083)
4 years ago
Todd 472d7d520a
Remove the server_id from session table, change it to worker_id on session_connection (#2070)
4 years ago
Jeff Mitchell 0581e164f1 Update nodeenrollment dep
4 years ago
Jeff Mitchell 2f06513a3a Merge branch 'main' into llb-byow
4 years ago
Jim 785241237e
refactor (kms): adopt the go-kms-wrapping/extras/kms package (#2027)
4 years ago
Jeff Mitchell 00e57db60f Adapt to library changes
4 years ago
Jeff Mitchell 8ebb8d1477 Merge remote-tracking branch 'origin/main' into llb-byow
4 years ago
Jeff Mitchell 99a16dafc2
Leave cluster listener up when bad data is sent (#2073)
4 years ago
Todd b83f4ece39 Manual merge of main into llb-byow.
4 years ago
Todd d8a443e238 Merge branch 'main' into llb-byow
4 years ago
Todd b58dada40d
Move the server daemons into their own package (#2061)
4 years ago