131 Commits (4b526538af660cf4c29988cd514b18fe673dc8a8)

Author	SHA1	Message	Date
Todd	4b526538af	Make server_id in job_run type text since it is nullable. (#2177)	4 years ago
Jeff Mitchell	5d3facf561	Merge remote-tracking branch 'origin/main' into llb-byow	4 years ago
irenarindos	16d95262a6	feature(worker): add workerKeyId to status	4 years ago
Timothy Messier	32070678dc	perf(session): Remove connections from session list endpoint ... Including the nested connection information in the session list response had a negative impact on performance as it created a significant multiplier on the number of rows that needed to be fetched from the database. It was also determined that this information was used by neither the admin ui nor the desktop client. Note that nested connection information can still be retrieved via a read request for a specific session.	4 years ago
Timothy Messier	5b0abe2e27	feat(session): Add migration to delete terminated sessions ... There is a new periodic job that will delete terminated sessions that are older than one hour. However, since until now terminated sessions were not deleted, the first time the job runs there could be a large number of sessions that need deleted. This could have a negative impact on a running cluster. To mitigate the operational risk, this adds a migration to perform an initial delete while the cluster is offline.	4 years ago
Todd	1e3c941be1	Add active session count to the worker (#2145)	4 years ago
irenarindos	642e41c9d7	feat(workerAuth): Implement nodeenrollment lib workerauth storage	4 years ago
Todd	731a45eba6	Merge the worker_status table with the worker table (#2111)	4 years ago
irenarindos	bf3b0340e5	feat(workerauth): add storage for RootCertificates aggregate	4 years ago
Todd	a281d10206	Add worker config table and view (#2090) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id constraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller.	4 years ago
Todd	3fbf901739	Add source to worker tags table (#2087) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id contraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller. * Adding worker tag db writing test. * Move the server table back to the top. * Update comment for the worker object. * Update comment for the worker table. * Add worker tag sources ("config" or "api") * Revert renaming of UpsertWorker until later. * Remove no longer needed files. * Moving the TestWorker into the servers package. Fix the worker tags test. * Update internal/proto/controller/storage/servers/store/v1/worker.proto Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> * Place the repos back together so they can be refactored in a different PR. Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>	4 years ago
irenarindos	20c314787d	fixup! feat(pki): Add PKI schemas and protos	4 years ago
irenarindos	88a6ca036f	feat(pki): Add PKI schemas and protos	4 years ago
Todd	2ecd550e27	Add fields to server_worker to be a boundary resource (#2083) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id contraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller. * Updating server_id references to controller_id. * Adding worker tag db writing test. * Move the server table back to the top. * Update comment for the worker object. * Update comment for the worker table. * Update the newWorkerId call to take a context and fix its error. * Correct comment for the wt_network_address domain.	4 years ago
Todd	472d7d520a	Remove the server_id from session table, change it to worker_id on session_connection (#2070) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id constraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller.	4 years ago
Jeff Mitchell	2f06513a3a	Merge branch 'main' into llb-byow	4 years ago
Jim	785241237e	refactor (kms): adopt the go-kms-wrapping/extras/kms package (#2027) ... * feature (db): add Db.UnderlyingDB() This is needed to allow for integration with bits that need a *dbw.DB * feature (kms): add new go-kms-wrapping/extras/kms dependency * refactor (kms): schema changes required to adopt extras/kms pkg * refactor (kms/iam): rename to DeprecateCreateKeysTx(...) * refactor (kms): remove deprecated test * refactor (kms): refactor Kms type This refactor includes renaming the existing type to DeprecatedKms and then refactoring the Kms type to become a wrapper of go-kms-wrapping/extras/kms * refactor (kms): delete all the unneeded bits All this stuff is not needed now that we're using go-kms-wrapping/extras/kms * refactor (db): fixup tests after kms refactor * refactor (kms/tests): use testing.TB for test helpers Our test helper packages were not possible to use with benchmarks. This refactor switches to testing.TB to allow both tests and benchmarks to use the helpers. * tests (session benchmarks): refactor to use new Kms type * refactor (schema): rm test which relies on deprecated Kms code * refactor (kms): post rebase on main changes required * chore (kms refactor): re-add unit test from main * refactor (kms): uses migrations that don't include KMS schema changes	4 years ago
irenarindos	54c30d2cad	bug(session): null fkey trigger also checks for session terminated state	4 years ago
irenarindos	0ef523ba77	Remove column cascade	4 years ago
Todd	d8a443e238	Merge branch 'main' into llb-byow ... # Conflicts: # internal/daemon/controller/handlers/targets/target_service.go # internal/daemon/controller/handlers/workers/multihop_service.go # internal/daemon/controller/handlers/workers/worker_proxy_service.go # internal/daemon/controller/handlers/workers/worker_service.go # internal/daemon/worker/status.go # internal/daemon/worker/worker.go	4 years ago
Todd	b58dada40d	Move the server daemons into their own package (#2061) ... * Move the server daemons into their own package With this change the internal/server package now is dedicated to the server domain (workers and controllers) and not to the server daemons. The hope is that this will make it easier to keep the daemons decoupled from the representation of the servers in the database.	4 years ago
Jeff Mitchell	2a8e179692	Update against changes from merge	4 years ago
irenarindos	8579a248d4	refactor(servers): minor sql adjustments to worker and controller tables	4 years ago
irenarindos	9e27605213	refact(servers): Split server table into worker and controller	4 years ago
irenarindos	c6764e85d9	fix(session): Update session state transition trigger	4 years ago
Timothy Messier	f00af362dc	fix(session): Include where clause with order and limit ... When applying the limit and order by, the where clause also needs to be applied to yield the correct results. This can be seen with an example. Assuming a data set where there are 100 sessions, with 10 sessions belonging to a user with id `u_user1` and 90 sessions belonging to `u_user2`. If the constructed query is like: select * from (select public_id from session limit 10) s, session_list ss where s.public_id = ss.public_id and s.user_id = 'u_user1' order by create_time asc; The initial sub-query with the limit could return sessions only belonging to `u_user2`, then it would apply the where clause and exclude all of the rows. Instead if the query is: with session_ids as ( select public_id from sessions as s where s.user_id = 'u_user1' order by create_time asc limit 10 ) select * from session_list where session_list.public_id in (select * from session_ids) order by create_time asc; The CTE applies the where clause ensuring that only sessions for `u_user1` are used for the final select from the view. Note that the CTE is use primarily for readability. This also adds an index on `session (create_time)` to aide the query planner in performing the order by.	4 years ago
irenarindos	32132d6bc1	refactor(session connections): Refactor connection closure	4 years ago
Irena Rindos	5a2c0db586	fix(session connections): Create session connection repository	4 years ago
Todd	e4d1e501cf	fix(warehouse): Handle duplicate addresses when migrating into wh_network_address_dimension (#1860)	4 years ago
Todd	11ce54f8fb	Add DW network address dimension tables (#1855)	4 years ago
Haotian	fa00a06bef	feat(host): Add host set information to static host (#1828) ... * feat(host): Add host set information to static host Updates LookupHost and ListHost API to include sets a static host is part of, as like with plugin hosts. * test: updated TestList_Plugin and TestCrud to be more consistent under race conditions	4 years ago
Irena Rindos	edae7c899f	bug(session): Allow only valid state transitions	4 years ago
Louis Ruch	5fe23ab14d	feat(session): Store session credentials ... Creates a new session_credential table and repository functions to add and list credentials attached to a session. All credentials are encrypted using the session scope id.	4 years ago
Michael Gaffney	ba8188e6d7	feat(credential): Add mapping override to credential library on lookup ... This change returns any mapping override set on a credential library when the library is retrieved from the repository using the lookup method.	4 years ago
Michael Gaffney	0e637f47b5	feat(credential): Use credential type when issuing credentials ... This change uses the credential type attribute when issuing credentials including mapping overrides.	4 years ago
Michael Gaffney	c317901db4	feat(credential): add credential type to credential library on create ... This change adds a credential type attribute to credential library and allows it to be set when creating a credential library. Specifying the type of credential returned from a library allows for new features and additional error checking to be added over time. A User Password credential type and an Unspecified credential type are included with the expectation that additional credential types will be added in the future. This change also adds the credential type attribute to existing credential libraries and sets it to Unspecified. Known Limitations: - Credential type is only supported on the repository create method. Support for the other CRUD methods will be added in the future.	4 years ago
Jim	baa1d88f1f	feature: Add client ip to inbound request information (#1678) ... * feature: Add client ip to inbound request information * feature (workers): Add the user's client IP to a session's connection information (#1749)	4 years ago
Michael Gaffney	72d4d6d205	fix(sql): Remove warning from create_time trigger (#1751) ... Raising a warning in the default trigger used for setting the value in create_time columns creates unnecessary noise in the PostgreSQL log files. Closes #1744	4 years ago
Jeff Mitchell	ad8ce50f69	Fix Windows (#1733) ... The embed package always uses Unix-style forward slashes. filepath.Join utilization looking for files would cause the slashes to be the wrong direction on Windows and result in the files not being found.	4 years ago
Jeff Mitchell	866bfceefc	Add secrets_hmac to host catalog output (#1712) ... Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Thor	7fa2cd2526	rename migration from 01-09 after bad merge (#1709) ... * rename migration from 01-09 after bad merge	4 years ago
Thor	ad31b6d6c3	repo: Return connection informat in Session response object (#1690) ... Add connections to the Session object * db: creat new session_list view * repo: session use new session_list view	4 years ago
Jeff Mitchell	8110e0eab3	Increment version of host during updates (#1707) ... Currently host does not use a version, which means it's not protected against race conditions of either itself or its value objects. This adds and plumbs through version to ensure that if a host or its value objects change that they are not going to be affected by a race condition.	4 years ago
Todd Knight	5850001a07	Rename file to match others in directory and remove TODO.	5 years ago
Todd Knight	884e1f2d18	Merge branch 'main' into plugin-hostcatalogs ... # Conflicts: # go.mod # sdk/go.mod	5 years ago
Todd	29b4537d3b	Reference PreferredEndpoints by top level struct name (#1688) ... * Reference PreferredEndpoints by top level struct name instead of embedded proto GetPreferredEndpoint method. Reorganize the sql files a little. * Make PreferredEndpoints replayable. Test refactoring to remove variables that persist across test calls. DeleteItems instead of trying to use WithWhere.	5 years ago
Jeff Mitchell	30e9f944a2	Add sync interval to host sets (#1680) ... This adds a parameter to host sets allowing the sync interval to be user-specified on a per-host-set basis. A value of -1 disables syncing; a value of null uses the current default.	5 years ago
Jim	c047c4d89d	refactor (db): Remove the internal/db test tables from the migrations (#1675)	5 years ago
Jeff Mitchell	48ac8b8f0b	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Timothy Messier	242e353f18	fix(schema): Prevent duplicate versions per edition (#1670) ... This should help prevent issues like the one fixed in f2ad4de554. A version for a particular edition should only exist once, previously which ever file was read last for a version would be included, which would lead to some migrations not running.	5 years ago