boundary

Commit Graph

Author	SHA1	Message	Date
Timothy Messier	64ef193cfc	test(account): Fix parallel validation tests	4 years ago
Timothy Messier	e76c48ad36	feat(account): Mark auth_method_id as a source id for subtypes	4 years ago
Timothy Messier	cc7e7429ab	feat(account): Add domain file option	4 years ago
Timothy Messier	349e32afe4	feat(account): Use new filterable function to support filtering	4 years ago
Timothy Messier	3d58ce5f5c	feat(subtypes): Add function to convert protobuf for filtering This will transform a protobuf message with a oneof for attributes into the API format to support filtering for list endpoints.	4 years ago
Timothy Messier	198a39ef1e	feat(subtypes): Add grpc interceptor for transforming attributes This interceptor is responsible for maintaining compatability with the JSON API with the change to the protobuf messages. The messages are changing from a single attribue field to a oneof to explicitly associate subtype attribute messages with the resource message. The interceptor transforms the request prior to the auditReqeust interceptor, and transforms the response after the auditResponse interceptor. This allows the audit interceptors to use all the necessary classification information when creating the audit events.	4 years ago
Timothy Messier	af93f7fccb	feat(subtypes): Attribute field registration and lookup	4 years ago
Timothy Messier	185d8b392d	refact(auth): Move subtype registration into global registry	4 years ago
Timothy Messier	31ef40ec5a	feat(subtype): Add global registry	4 years ago
Timothy Messier	8cbbfbe3a0	feat(proto): Add new field option to indicate a in id for subtypes This allows for marking a field in a message as an id that can be used to determine the message's subtype. When creating some resources, an id from a related resource is used to indicate the resource's subtype, since the resource must have the same subtype as the related resource.	4 years ago
Timothy Messier	760b090567	feat(proto): Add new option for proto files to set domain This allows for associating all of the messages in a file with a domain. This will be used by the global subtype registry to group subtypes within a domain. When registering a subtype, it must be unique within a domain. This allows for cases where two domains have the same subtypes, such as two domains both having a "plugin" subtype.	4 years ago
Johan Brandhorst-Satzkorn	6e6efeee71	feat(account): Add gotags classification Add gotag classification to all account proto and service definitions.	4 years ago
Johan Brandhorst-Satzkorn	ac5a1acca8	feat(account): Hide internal attribute fields These fields are not intended for use by API consumers, so we hide them from the generated API documentation by marking them as INTERNAL.	4 years ago
irenarindos	eb43941771	refact(account): Use OneOf for Account attributes	4 years ago
irenarindos	e76db2cd13	feat(proto): create custom option for attribute subtype	4 years ago
Johan Brandhorst-Satzkorn	6a37bd9710	Upgrade grpc-gateway version to v2.10.0 (#1954 ) This new version will let us hide fields from the OpenAPI output	4 years ago
Zed	0c8dd578e6	Bump UI version for 0.8.0 release (#2029 )	4 years ago
Jim	addbfee593	chore: upgrade gofumpt to v0.3.1 (#2028 )	4 years ago
Timothy Messier	b5080c30c1	fix(config): Prevent panic when setting audit config filter orverrides (#2021 ) This updates the config parsing for this stanza so prevent panics like the following: panic: reflect.Value.MapIndex: value of type string is not assignable to type event.DataClassification goroutine 1 [running]: reflect.Value.assignTo({0x13fbb20, 0xc000a28700, 0x461367}, {0x1693f9d, 0x16}, 0x14375c0, 0x0) /usr/lib/go/src/reflect/value.go:2810 +0x2ad reflect.Value.MapIndex({0x145b1c0, 0xc000a16570, 0xc00072ff20}, {0x13fbb20, 0xc000a28700, 0x98}) /usr/lib/go/src/reflect/value.go:1535 +0x7e github.com/hashicorp/hcl.(decoder).decodeMap(0x8, {0xc00012b0b0, 0x28}, {0x67b40a8, 0xc0005fdc80}, {0x14bac80, 0xc0005fdc20, 0x1}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:380 +0xa95 github.com/hashicorp/hcl.(decoder).decode(0xc000731360, {0xc00012b0b0, 0x28}, {0x67b40a8, 0xc0005fdc80}, {0x14bac80, 0xc0005fdc20, 0x0}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:100 +0x395 github.com/hashicorp/hcl.(decoder).decodeStruct(0x203000, {0xc0005bf500, 0x11}, {0x67b40a8, 0xc0005fdc08}, {0x14fada0, 0xc0005fdc20, 0x7296ce0}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:702 +0x1349 github.com/hashicorp/hcl.(decoder).decode(0xc000731360, {0xc0005bf500, 0x11}, {0x67b40a8, 0xc0005fdc08}, {0x14fada0, 0xc0005fdc20, 0x0}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:108 +0x62f github.com/hashicorp/hcl.(decoder).decodePtr(0x8, {0xc0005bf500, 0x11}, {0x67b40a8, 0xc0005fdc08}, {0x1442220, 0xc0005ca2f0, 0x1}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:405 +0xd3 github.com/hashicorp/hcl.(decoder).decode(0xc000731360, {0xc0005bf500, 0x11}, {0x67b40a8, 0xc0005fdc08}, {0x1442220, 0xc0005ca2f0, 0x12}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:102 +0x3e8 github.com/hashicorp/hcl.(decoder).decodeStruct(0x7f8c99b698f0, {0x1676310, 0x4}, {0x67b40d0, 0xc0005c82a0}, {0x1621c80, 0xc0005ca240, 0x0}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:702 +0x1349 github.com/hashicorp/hcl.(decoder).decode(0xc000731360, {0x1676310, 0x4}, {0x67b40d0, 0xc0005c82a0}, {0x1621c80, 0xc0005ca240, 0xc0005ca240}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:108 +0x62f github.com/hashicorp/hcl.DecodeObject({0x1442400, 0xc0005ca240}, {0x67b40d0, 0xc0005c82a0}) /go/pkg/mod/github.com/hashicorp/hcl@v1.0.0/decoder.go:60 +0x126 github.com/hashicorp/boundary/internal/cmd/config.parseEventing(0xc0005fa2a0) /go/src/github.com/hashicorp/boundary/internal/cmd/config/config.go:622 +0x1ec github.com/hashicorp/boundary/internal/cmd/config.Parse({0xc000683100, 0x66c}) /go/src/github.com/hashicorp/boundary/internal/cmd/config/config.go:553 +0x149b github.com/hashicorp/boundary/internal/cmd/config.LoadFile({0x7fff4c8fdeef, 0xc0008e2d40}, {0x0, 0x0}) /go/src/github.com/hashicorp/boundary/internal/cmd/config/config.go:306 +0x6f github.com/hashicorp/boundary/internal/cmd/commands/database.(InitCommand).ParseFlagsAndConfig(0xc0005ae000, {0xc000132030, 0x2, 0x2}) /go/src/github.com/hashicorp/boundary/internal/cmd/commands/database/init.go:516 +0x605 github.com/hashicorp/boundary/internal/cmd/commands/database.(InitCommand).Run(0xc0005ae000, {0xc000132030, 0xc0002857a0, 0xc000285788}) /go/src/github.com/hashicorp/boundary/internal/cmd/commands/database/init.go:175 +0x4a github.com/mitchellh/cli.(*CLI).Run(0xc0002b2c80) /go/pkg/mod/github.com/mitchellh/cli@v1.1.2/cli.go:262 +0x5f8 github.com/hashicorp/boundary/internal/cmd.RunCustom({0xc000132010, 0x60, 0x0}, 0x0) /go/src/github.com/hashicorp/boundary/internal/cmd/main.go:186 +0x9d6 github.com/hashicorp/boundary/internal/cmd.Run(...) /go/src/github.com/hashicorp/boundary/internal/cmd/main.go:92 main.main() /go/src/github.com/hashicorp/boundary/cmd/boundary/main.go:13 +0xc9	4 years ago
Johan Brandhorst-Satzkorn	80b2c9230f	refact(authmethods): Add top level token type to Authenticate (#2010 ) Other parts of the system make use of a "type" field, while the AuthenticateResponse sets a "token_type" on the response attributes directly. Rename this field to "type", and move it up to the response level, to be more consistent with other RPCs. Also adds a new field to the AuthenticateRequest, "type" which will replace the "token_type" field over time.	4 years ago
Jeff Mitchell	bf9e7874b1	Use custom X.509 verification logic for proxy connections (#2008 ) This reduces the chance that we'll hit a failure due to a mismatched worker address, on the certificate, especially if a worker has multiple addresses. We aren't relying on IP/DNS for security anyways, so let's not have it be a hindrance.	4 years ago
Todd	631de192d3	Initialize the build info metrics using init to always register to the DefaultRegistery. (#2020 ) This fixes errors related to calling NewServer or NewCommand multiple times when using autocomplete.	4 years ago
Jeff Mitchell	3d9e541930	Switch request.WithContext to request.Clone (#2017 ) The Go docs now say to use request.Clone (introduced in Go 1.13) instead of request.WithContext (introduced in Go 1.7) as it deep copies instead of shallow copies.	4 years ago
Todd	0b12feb953	Do not register the build_info collectors multiple times. (#2014 ) Since we call base.NewServer multiple times when building the Commands map this was returning an error "duplicate metrics collector registration attempted". This PR only creates a single server which is used for both the "server" command as well as "dev".	4 years ago
Jim	4636efce8f	refactor (tests): GetEventDetails(...) will stop returning nil (#2019 )	4 years ago
Jim	cb93c6bdfd	chore: update auditResponseInterceptor const op (#2018 )	4 years ago
Hugo	cc54a834e8	feat(worker): Instrumentation for Controller Cluster Communication (#1998 ) * feat(worker): Instrumentation for Controller Cluster Communication Adds request latency observations to the worker side (client) of worker <-> controller cluster communications by integrating a new grpc client interceptor. * style(controller): make-gen-deltas changes	4 years ago
Todd	36b7f3e1f8	Update the cluster server metrics to use the gRPC status.Handler. (#2000 ) gRPC status.Handler gives us visibility into gRPC returned errors. In contrast, there are some situations where no metric would be counted at all using the interceptor approach (for example, in out of memory cases where gRPC would return a resource exhausted error).	4 years ago
Haotian	e3f72bd0a4	feat(metrics): add build info metric on server start (#1984 ) Adds a Prometheus gauge metric set to the value of 1, with labels for go version, git revision, and Boundary version. Assigns the Prometheus DefaultRegisterer to the Server struct as a parameter to NewServer(), to avoid "duplicate metrics collector registration" panics from test cases.	4 years ago
Johan Brandhorst-Satzkorn	8d80d10ff7	fix(controller): Cancel tests on fatal errors (#1994 ) When requesting a token, any error is fatal to the test. The previous behavior would return a nil token, which could cause subsequent uses to panic. This will instead interrupt any test immediately on error.	4 years ago
Louis Ruch	9b48dbc2fd	fix(logs): Remove erroneous scheduler run logs at first run. (#1980 ) The Scheduler is dependant on the server being inserted into the database. Adding an upsert server call before starting scheduler and tickers removes the race that caused log spam due to a missing foreign key relationship.	4 years ago
Jim	8895bc08e0	fix (kms): properly reconcile DEKs for existing scopes (#1976 )	4 years ago
Hugo Vieira	3564776517	feat(worker): Implement proxy handler websocket instrumentation Add metrics on read/written bytes and active worker websocket connections.	4 years ago
Louis Ruch	e6b7b7f60a	feat(db): Suppress not found events during db lookups (#1979 )	4 years ago
Johan Brandhorst-Satzkorn	f2fa1142d3	fix(test): Remove uses of t.FailNow in goroutines (#1978 ) It is documented as illegal to use t.FailNow in a goroutine. Uses of require assertions call t.FailNow. This may have led to inconsistent test results as some assertions were subject to undefined behavior. Note that it is still allowed to call assert assertions in goroutines. See: https://pkg.go.dev/testing#T.FailNow	4 years ago
Jeff Mitchell	1be55b50c7	Pull up Server to top level of Init command (#1959 ) * Pull up Server to top level of Init command Init was using a local server variable but not passing in the existing command, resulting in the context being lost. This caused the command to fail to run since the changes to add logging to KMS plugins were introduced. This also fixes a couple of places that were not using the global const value for config KMS. * Fix test compilation	4 years ago
Jim	0ca86c8a2c	chore: remove unneeded ref to gorm.DB (#1971 )	4 years ago
Todd	fb068341a4	Update naming for initializing collectors and tweak some comments. (#1968 )	4 years ago
Johan Brandhorst-Satzkorn	b1d6a1da9a	Switch to buf for protobuf generation (#1944 ) * Install buf with go install This reduces the impact of using buf on our dependency closure, which was significant. It also avoids potential issues with building buf given our own internal dependency constraints. This has caused issues (including crashes!) in the past. See https://github.com/cockroachdb/cockroach/issues/67216#issuecomment-874176186 for more discussion on using tool dependencies generally, and https://github.com/bufbuild/buf/issues/52 for an example of where this sort of thing caused an issue for a user. * Upgrade buf version We should migrate to v1 sooner rather than later, as it has some breaking changes from v0. * Change buf lint/breaking commands These commands were moved up one level for v1 * Migrate to buf.yaml to v1 * Remove unused imports These were uncovered by using "buf lint". * Use buf v1.3.1 * Depend on googleapis and grpc-gateway via BSR * Switch to buf for proto generation * Remove third party dependency * Remove unused tools and scripts * Move local protos up one level * Temporarily don't fail on breaking changes * Generate CI config * Fix generation of controller.json * Replace use of deprecated flag * Remove unused import, regenerate files * Remove temporary skipping over breaking check	4 years ago
Jeff Mitchell	58a448fc6a	Put session ID in ALPN (#1966 ) This allows us to use SNI for actual host (e.g. routing) information. We don't have the client cert yet so we can't look at that, so this provides a way for us to convey the information needed to look up that session's TLS stack. Using SNI for hosts means we also run into the fact that we don't have automatic agreement in terms of SANs. So when generating the certs we now also pass worker address information to the function to be encoded in the cert. Finally, there is a change in how the websocket dialing happens, because http.RoundTripper tries to be too clever for its own good and overwrites NextProtos on a whim.	4 years ago
Haotian	62f0d18885	Initialize and provide handler for proxy worker http metrics (#1961 ) *feat(metrics): implement prometheus handler for proxy worker http requests and record metric for header write duration	4 years ago
Todd	20e6c0ce6c	Add collector updating interceptor to the controller cluster grpc server (#1964 )	4 years ago
Jeff Mitchell	07dc3db974	Remove ALPN Muxer (#1965 ) We never ended up using this and it makes it much harder to reason about the listeners. An explanation: for the moment I separated out all of the listeners in the struct, even though one should suffice, because when I did it that way first I was hitting some really weird and hard to find intermittent behavior where it seemed like the listeners were getting crossed. So I re-did it this way with each listener very explicitly referenced. I'm happy to make a follow-up PR that attempts to combine them all into a single listener without hitting the issues I did, if desired, but at least doing it via a separate PR means that it won't be something with removing the ALPN muxer that is at fault.	4 years ago
A-440Hz	95e1fe8df0	typo(metrics) changing response size to request size	4 years ago
Todd	3eb22b073a	Defines the controller api metrics and registers them at controller startup (#1917 ) Co-authored-by: Hugo Vieira <hugoamvieira@users.noreply.github.com>	4 years ago
Hugo Vieira	aae944be37	test(worker): Remove test-only hooks from actual code This change introduces a `nonceFn` field that can be changed by a test but at runtime is transparent to the code that calls it. The current nonce-generating logic defaults to a test-only field which opens us up to this value inadvertently being set. With this change, the default behavior becomes using `base62` to generate a random nonce, and any tests have to explicitly change that.	4 years ago
Hugo Vieira	61e310998f	refactor(worker): Decouple listeners/servers shutdown This change is the Worker-side counterpart to the change in `eebdfb88dc`.	4 years ago
Hugo Vieira	657b099440	refactor(worker): Ensure `startListeners` consistency with controller Implements changes on Worker's `startListeners` func to be consistent with the changes on the Controller's side done in `b5ef468d33`.	4 years ago
Hugo Vieira	1ebd7deccf	refactor(worker): Validate listener configuration in New With this change, the Worker is now aware of its own listeners in a more codified and structured way. These changes have already been made in the controller on `8d48a8515c`. They're now made on the worker for similar reasons.	4 years ago
Hugo	244237cd2f	feat(controller): Add health endpoint (#1882 ) * feat(controller): New health service and server This change also implements a new listener purpose, `ops`. `ops` (short for operations) is a new listener purpose that is responsible for serving Boundary's operations endpoints, like health and possibly metrics. At Startup: `ops` listeners get configured as late as possible to catch any errors with the startup process; At Shutdown: If the health endpoint has been set-up, we introduce a configurable delay in the process. This is to enable the health endpoint to report unhealthy for that amount of time. `ops` listeners are also the last listeners to be shutdown.	4 years ago
Hugo Vieira	eebdfb88dc	refact(controller): Decouple listeners/servers shutdown from Worker In general, these changes were introduced in the same vein of the changes to controller `startListeners`. Specifically, these changes also decouple the Controller and the Worker shutdown processes. Currently, a call to `stopListeners` on an instance that is running as both a Controller and a Worker would stop the listeners for both. Lastly, we also add unit/integration tests to the shutdown code.	4 years ago
Hugo	d438a6d2dd	Merge pull request #1907 from hashicorp/hugoamvieira-controller-start-listeners refactor(controller): `startListeners` improvements	4 years ago
Jeff Mitchell	c99907c6c5	Update keyring deps to remove deprecation warnings (#1924 )	4 years ago
Hugo Vieira	b5ef468d33	refact(controller): Ensure deterministic listeners start order Previously, we initialized the listeners on the order they were provided to us on the config file. In the future, we'll want to add new listener purposes that depend on existing ones, so the init order needs to be deterministic. With this change, we'll initialize components in this order: 1. gRPC Server for Controller API. 2. All `api` HTTP Servers & gRPC Gateway Muxes. 3. `cluster` gRPC Server. This commit introduces some renames for the sake of clarity as well as improved test coverage: - Removes `gatewayMux` reference from Controller object. This object was misleading and is now uneeded. - Removed uneeded `context.Context` arguments. - Separates gRPC Server and gRPC Gateway concerns, both in functionality and in naming. These two were conflated before. - Added unit tests on `startListeners`.	4 years ago
Hugo Vieira	8d48a8515c	refact(controller): Validate listener configuration in New With this change, the Controller is now aware of its own listeners in a more codified and structured way. The reasoning behind these changes are as follows: 1. Currently, we're iterating over these listeners in multiple spots along this initialization flow to check each listeners' purpose. By doing this once when we create a Controller and essentially storing the result, we can clean up the downstream code to use those results. 2. Initial effort to centralize Controller validation. At the moment, we are doing a lot of validation all over the `cmd` and `config` packages. From a conceptual perspective, Controller-related validation should be performed in the function that is responsible for constructing the Controller object itself. This enables any developer to look in a single place for all the constraints that we place on creating a Controller.	4 years ago
Lars Lehtonen	b6ee5dc9cc	internal/session: fix dropped test errors (#1928 )	4 years ago
irenarindos	0eb70b7942	bug(worker): create error and handle session cancel with no tofu token	4 years ago
Jeff Mitchell	e596daf34d	Add hclog adapter and gating to eventer (#1915 ) This contains to related things: 1. An adapter allowing an hclog interface to take in information and send them to the eventer 2. A gate on the eventer, which is the analogue to the behavior prior to eventing where we'd ensure logs were not printed prior to the startup information. Without this, plugin logs using the hclog adapter will start showing up too early.	4 years ago
Jeff Mitchell	7eb29261b2	Update to go-kms-wrapping version 2, and plugin-based KMS (#1901 )	4 years ago
Johan Brandhorst-Satzkorn	89273a2f3e	Update references to "make dev" (#1920 ) "make dev" has been replaced with "make install" since `b53e4d4c3e`.	4 years ago
Timothy Messier	9aa2d4cd84	test(session): Speed up some tests around dead worker cleanup This removes or reduces the time that is waited in a number of tests by allowing the grace period time be a configuration option on the connection repository.	4 years ago
Timothy Messier	79670180a7	refact(session): Move domain logic of Worker Status into domain service This creates a domain service function `session.WorkerStatusReport`. The service performs two functions: 1. Checks the status for all of the reported sessions, returning a report of the sessions that are in a "non-active" state, i.e. "cacneling" or "terminated". 2. Looks for any "orphaned" session connections, i.e. connections that are active but were not reported by the worker. These connections are marked as closed. This also removes the "ShouldCloseConnectionsOnWorker" logic, as this was determined to not be a possible state, and was unnecessary.	4 years ago
Timothy Messier	cdb035f5fc	test(worker_service): Add baseline tests for Status This adds tests for the Status method of the WorkerService grpc service that is exposed by controller.	4 years ago
Timothy Messier	4de6464978	refact(session): Make CloseDeadConnectionsForWorker more testable The query for CloseDeadConnectionsForWorker includes a time comparison to exclude results that are too close to the current time. This is done to account for a delay in reporting by the worker. However, since the delay was hardcoded in the query, it made it difficult to test. This moves the delay duration into a parameter that is set on the repository. The amount of the delay can be set at repository creation time using the new WithWorkerStateDelay option. This defaults to the previously hardcoded amount. This will allow tests to control the delay to exercise this functionality fully.	4 years ago
Timothy Messier	e0603534c0	lint(session): Whitespace and missing ; in sql queries	4 years ago
irenarindos	32132d6bc1	refactor(session connections): Refactor connection closure	4 years ago
irenarindos	3482f91a17	refactor(connections): Move connect connect to the Connection repo	4 years ago
irenarindos	ac9fb8016f	refactor(session connections): Worker only closes connections in memory on grace period expiration	4 years ago
Irena Rindos	5a2c0db586	fix(session connections): Create session connection repository	4 years ago
Louis Ruch	f8b27645d9	fix(scheduler): Update job run query to not error on running conflict (#1914 )	4 years ago
Irena Rindos	bc6689fb16	docs(permissions): break permissions into sections (#1893 ) * docs(permissions): break permissions into sections * fixup! docs(permissions): break permissions into sections	4 years ago
Timothy Messier	bdb98d508e	fix(genapi): Sort slice in removeDups template function (#1889 ) The removeDups template function converts a slice into a map and back into a slice in order to leverage the map keys to remove duplicates. However, since the iteration order over a map is not specified it would be possible to get different orders for multiple runs of `make api`. While this would not have an impact on any functionality, it is causing sporadic failures for the new make-gen-deltas CI job. See: https://go.dev/ref/spec#For_statements Ref: `d57603022a`	4 years ago
Justen Walker	8279397dbb	fix(connect): do not panic on multiple `--` args (#1858 ) Passthrough args looks for the an instance of -- and re-slices the arg list to pass through those args to the underlying connect exec command. However such commands may also need to parse their own '--', such as kubectl exec. This change updates the logic so that boundary arg parser only considers the first instance of '--' when deciding which args to pass to the -exec= commands. Fixes: #1857	4 years ago
Carlos Alcaide Corvo	b529f4af44	Bump ui version (#1868 )	4 years ago
Louis Ruch	4ed4575802	chore(fmt): make fmt	4 years ago
Todd	7ee1f74388	fix(hostsets/plugin): Only delete preferred endpoints when there are preferred endpoints to delete. (#1865 )	4 years ago
Carlos Alcaide Corvo	360ff9cf2b	Update changelog with latest changes in the UI (#1866 ) * Update changelog with latest changes in the UI * Change to lowercase for consistency * Bump UI version	4 years ago
Todd	e4d1e501cf	fix(warehouse): Handle duplicate addresses when migrating into wh_network_address_dimension (#1860 )	4 years ago
Irena Rindos	c6c10cbec7	Merge pull request #1859 from hashicorp/irindos-remove-terminate-session refactor(session): Remove dead session termination code	4 years ago
Irena Rindos	5d6aa3b729	refactor(session): Remove dead session termination code	4 years ago
Todd	11ce54f8fb	Add DW network address dimension tables (#1855 )	4 years ago
Louis Ruch	8cab9a4315	feat(scheduler): Update job description on conflict (#1852 )	4 years ago
Todd	3242d3936e	Add test coverage for dns names on a host when authorizing a session in target_service_test.go. Add the recent fixes to the changelog. (#1854 )	4 years ago
Justen Walker	bd30ff4140	fix(controller/targets): authorize-session should allow h_ ids (#1853 ) * fix(controller/targets): authorize-session should allow h_ ids The targets controller previously only allowed hosts from a static catalog since it checked for the ID subtype from the static package. This change validates host ids with the plugin.Subtype as well Fixes: #1850 * test: cover authorize-session with host id Add a regression test to cover the case where an explicit host ID was given when calling AuthorizeSession	4 years ago
Justen Walker	6166d2240f	bug(plugin): Fix incorrect use of WithIpAddrs in Repository.Endpoints (#1849 ) When creating the options for the preferencer, this used WithIpAddrs for both the host addresses and also DNS names. This causes errors when a host contains DNS names that are not IP addresses (ie: whenever dns names are present). This change will: - Replace WithIpAddrs with WithDNSNames option for DNS Names when constructing options for the preferencer. - Add a test which includes a DNS name to prevent regressions Fixes #1848	4 years ago
Louis Ruch	aaaf0241ff	bug(host): Fix sync job failure blocking other set syncs (#1841 ) During the plugin_host_set_sync job, a single set failing to sync can cause all following syncs to fail.	4 years ago
Haotian	fa00a06bef	feat(host): Add host set information to static host (#1828 ) * feat(host): Add host set information to static host Updates LookupHost and ListHost API to include sets a static host is part of, as like with plugin hosts. * test: updated TestList_Plugin and TestCrud to be more consistent under race conditions	4 years ago
Jeff Mitchell	5743580ca5	Update authenticate command/subcommands help text (#1835 ) * Make it clear in the subcommands that the given strings are examples * Add an OIDC example to show that there are different types * Remove password flag from examples	4 years ago
Irena Rindos	86245c48da	Merge pull request #1824 from hashicorp/irindos-fix-session-termination-msg bug(connect): Fix Session has expired messaging	4 years ago
Irena Rindos	24ae5dfe94	bug(connect): Fix Session has expired messaging	4 years ago
Irena Rindos	963fbcbdf2	bug(session): Fix CreateSession foundStates logical ordering	4 years ago
Louis Ruch	61fe77572e	chore: make tools & make gen	4 years ago
Louis Ruch	ac78ee6315	Merge pull request #1819 from hashicorp/louis-scheduler feat(scheduler): Add support for run now option	4 years ago
Louis Ruch	c4506ec743	feat(scheduler): Add support for run now option	4 years ago
Jeff Mitchell	5d33393cbd	Add target resource listing to default roles (#1803 ) This addresses the issue of a user being created in a normal or dev environment that is given access to authorize sessions against specific targets but the permission hasn't been configured for the UI clients to actually list them. Resolves #1791	4 years ago
Irena Rindos	edae7c899f	bug(session): Allow only valid state transitions	4 years ago
Louis Ruch	a90f1f4eb1	feat(target): Decode based on credential type	4 years ago
Jim	591ec476e7	refactor: Update internal/db and oplog to use go-dbw package for database operations. (#1785 ) * chore: Add new dbw dependency * refactor: Convert to use dbw.DB * refactor (db): Change GetTicket(...) signature * feature (db tests): Added TestDeleteWhere(...) Adding this allows us to eliminate a leak of the gorm library * refactor: Add ctx to ScanRows(...) signature This is required to refactor all the deprecated errors pkg calls. This refactor required adding a context to quite a few call chains and in particular the job scheduler bits * feature (db/tests): Add support for test opt: WithTestLogLevel(...) This test only option allows callers to specify a log level for the underlying db package (where supported/applicable) when calling TestSetup(...) * refactor (db): Simplify Db type Only store the underlying DB and create the RW on demand when needed. * refactor (oplog): Port to using dbw pkg for db operations * refactor (db): Remove gormDB(...) func * tests (db): Add unit tests for TestDeleteWhere(...) * chore: make fmt changes to formatting	4 years ago
A-440Hz	3afbfbf8c2	fix(cli): Remove duplication of target host sources (#1805 ) fix(cli): Remove duplication of target host sources	4 years ago
Louis Ruch	425a56179f	feat(worker): Implement egress credentials Egress credentials Issued during AuthorizeSession are stored in the session repo. These credentials are retrieved and stored in-memory on the worker during the LookupSession call. Each proxy handler will need to handle the credentials as required.	4 years ago
Louis Ruch	5fe23ab14d	feat(session): Store session credentials Creates a new session_credential table and repository functions to add and list credentials attached to a session. All credentials are encrypted using the session scope id.	4 years ago
Timothy Messier	27ebfa1125	Merge pull request #1796 from hashicorp/llb-credential-type-mapping This allows users to set the type of credential that a credential library will provide. A User Password credential type and an Unspecified credential type are included with the expectation that additional credential types will be added in the future. This change also adds the credential type attribute to existing credential libraries and sets it to Unspecified. The credential type can only be set when a credential library is created. The vault credential library includes functionality for converting a Vault Secret into a User Password Credential. This mapping is enabled by default, however, the user can override the attributes used for this mapping.	4 years ago
Louis Ruch	d46daa573f	feat(server): Add grpc_middleware recovery interceptor	4 years ago
Louis Ruch	b8afd4f50c	feat(cli): Display credential type in library list	4 years ago
Michael Gaffney	4636d34943	test(credential): Add credential mapping override to delete test	4 years ago
Michael Gaffney	888f8cea03	test(credential): Add credential mapping override to list test	4 years ago
Louis Ruch	e75f1d2f73	feat(credential): Add mapping override update for API/SDK/CLI This change adds support for updating a credential mapping override on a credential library.	4 years ago
Louis Ruch	da20a8b434	feat(credential): Add support for Vault KV2	4 years ago
Michael Gaffney	035182681a	feat(credential): Allow updating of credential mapping overrides	4 years ago
Michael Gaffney	9cdfc5f986	docs(vault): Add comment about the default value of HttpMethod	4 years ago
Michael Gaffney	ba8188e6d7	feat(credential): Add mapping override to credential library on lookup This change returns any mapping override set on a credential library when the library is retrieved from the repository using the lookup method.	4 years ago
Michael Gaffney	0e637f47b5	feat(credential): Use credential type when issuing credentials This change uses the credential type attribute when issuing credentials including mapping overrides.	4 years ago
Michael Gaffney	17762ed01e	test(vault): Fix use of assert library in tests	4 years ago
Louis Ruch	1cc35fb0df	feat: Credential library mapping API/SDK/CLI on create path * feat(sdk): Add fields to credential library proto Adds CredentialType and CredentialMappingOverrides to credential library SDK. * feat(api): Add fields to credenttial library service Adds support for CredentialType and CredentialMappingOverrides to the credential library service (API) * feat(cli): Add feilds for credential library cmd Adds support for CredentialType and CredentialMappingOverrides to the credential library cmd command.	4 years ago
Michael Gaffney	c317901db4	feat(credential): add credential type to credential library on create This change adds a credential type attribute to credential library and allows it to be set when creating a credential library. Specifying the type of credential returned from a library allows for new features and additional error checking to be added over time. A User Password credential type and an Unspecified credential type are included with the expectation that additional credential types will be added in the future. This change also adds the credential type attribute to existing credential libraries and sets it to Unspecified. Known Limitations: - Credential type is only supported on the repository create method. Support for the other CRUD methods will be added in the future.	4 years ago
Louis Ruch	f4b9b83caf	fmt: Fix import groups	4 years ago
Louis Ruch	9b39345c7f	bug(credential): Fix panic in credential Issue Vault KV backend returns a nil secret and no error if the secret does not exist. This caused a panic in during Issue: panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x20 pc=0x1388279] goroutine 2639 [running]: github.com/hashicorp/boundary/internal/credential/vault.(Repository).Issue(0xc001222200, {0x3b932d0, 0xc001203350}, {0xc000dc6e90, 0xc}, {0xc0010e5e40, 0x0, 0x0}) /home/louis/boundary/internal/credential/vault/repository_credentials.go:67 +0x2d9 github.com/hashicorp/boundary/internal/servers/controller/handlers/targets.Service.AuthorizeSession({{}, 0xc000cd4a38, 0xc000cd4840, 0xc000cd48d0, 0xc000cd4a50, 0xc000cd4870, 0xc000cd4858, 0xc000cd48b8, 0xc0001a8880}, {0x3b932d0, ...}, ...) /home/louis/boundary/internal/servers/controller/handlers/targets/target_service.go:1059 +0x1525 github.com/hashicorp/boundary/internal/gen/controller/api/services._TargetService_AuthorizeSession_Handler.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}) /home/louis/boundary/internal/gen/controller/api/services/target_service_grpc.pb.go:631 +0x78 github.com/hashicorp/boundary/internal/servers/controller.auditResponseInterceptor.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}, 0x461279, 0x40d234) /home/louis/boundary/internal/servers/controller/interceptor.go:262 +0x4e github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}) /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a github.com/hashicorp/boundary/internal/servers/controller.statusCodeInterceptor.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}, 0x203000, 0x203000) /home/louis/boundary/internal/servers/controller/interceptor.go:207 +0x34 github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}) /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a github.com/hashicorp/boundary/internal/servers/controller.errorInterceptor.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}, 0x18e2b40, 0x0) /home/louis/boundary/internal/servers/controller/interceptor.go:156 +0x4e github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}) /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a github.com/hashicorp/boundary/internal/servers/controller.auditRequestInterceptor.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}, 0x1a1c860, 0xc0010e5280) /home/louis/boundary/internal/servers/controller/interceptor.go:248 +0x198 github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}) /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a github.com/hashicorp/boundary/internal/servers/controller.requestCtxInterceptor.func1({0x3b932d0, 0xc001203260}, {0x1a0dd40, 0xc000dc8880}, 0x18, 0xc0010e52a0) /home/louis/boundary/internal/servers/controller/interceptor.go:140 +0x5de github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203260}, {0x1a0dd40, 0xc000dc8880}) /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1({0x3b932d0, 0xc001203260}, {0x1a0dd40, 0xc000dc8880}, 0xc00331abb8, 0x18675e0) /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:34 +0xbf github.com/hashicorp/boundary/internal/gen/controller/api/services._TargetService_AuthorizeSession_Handler({0x1ada420, 0xc00093a180}, {0x3b932d0, 0xc001203260}, 0xc001200840, 0xc000465260) /home/louis/boundary/internal/gen/controller/api/services/target_service_grpc.pb.go:633 +0x138 google.golang.org/grpc.(Server).processUnaryRPC(0xc000cca540, {0x3bb4c58, 0xc0005a9c80}, 0xc001208480, 0xc0004a7440, 0x499e2b8, 0x0) /home/louis/go/pkg/mod/google.golang.org/grpc@v1.40.0/server.go:1297 +0xccf google.golang.org/grpc.(Server).handleStream(0xc000cca540, {0x3bb4c58, 0xc0005a9c80}, 0xc001208480, 0x0) /home/louis/go/pkg/mod/google.golang.org/grpc@v1.40.0/server.go:1626 +0xa2a google.golang.org/grpc.(Server).serveStreams.func1.2() /home/louis/go/pkg/mod/google.golang.org/grpc@v1.40.0/server.go:941 +0x98 created by google.golang.org/grpc.(*Server).serveStreams.func1 /home/louis/go/pkg/mod/google.golang.org/grpc@v1.40.0/server.go:939 +0x294	4 years ago
Carlos Alcaide Corvo	86eead3a3e	Bump UI version (#1795 )	4 years ago
Louis Ruch	72a15b8d2d	bug(target): Add *-host-sources actions to target service (#1794 )	4 years ago
Hugo Vieira	5f36057f65	feat(config): Env/file support for Worker description	4 years ago
Jim	baa1d88f1f	feature: Add client ip to inbound request information (#1678 ) * feature: Add client ip to inbound request information * feature (workers): Add the user's client IP to a session's connection information (#1749)	4 years ago
Irena Rindos	7bf787ec40	feat(config): Add env and file support for database max connections	4 years ago
Hugo Vieira	8462a65637	feat(config): Add env/file support to Worker.Controllers field This feature allows the user to set the `controllers` field to a string that points to either an environment variable or file. We then dynamically pull out the value and parse it into the config.	4 years ago
Hugo Vieira	a097b6db8f	fix(server): Duplicated Worker nil check inside Worker nil check stmt	4 years ago
Irena Rindos	5601f2bc5f	feat(config) Add env and file support to Plugins execution dir	4 years ago
Irena Rindos	1f43ec174f	Merge branch 'main' into irenarindos-env-file-controllerconfig	4 years ago
Hugo	faabfc0002	Merge pull request #1758 from hashicorp/hugoamvieira-env-file-workertags feat(config): Add env and file support to Worker Tags	4 years ago
Chris Marchesi	bf18555d5e	internal/host/plugin: remove custom queries for secrets (#1676 ) * internal/host/plugin: remove custom queries for secrets This removes the custom queries for host catalog secrets, now that #1658 has been merged. It also does a lot of cleanup surrounding the related oplog entries, using db.WithOplog natively. * Simplify conflict actions by replacing SetColumnValues with SetColumns * Remove unused oplog method	4 years ago
Irena Rindos	161916f6d3	feat(config): Add env and file support to Controller description	4 years ago
Thor	8c842df8a8	Remove public_id and session id from Connection api (#1767 ) * removed public_id and session_id from Connection msg	4 years ago
Hugo Vieira	1576af70cc	feat(config): Add env and file support to Worker Tags This feature allows the user to set the `tags` field to a string that points to either an environment variable or file. We then dynamically pull out the value and parse it into the config. This can also be done at the keys level, where you set your keys directly in Boundary's config file, but point the values to env/file.	4 years ago
Louis Ruch	b692e0e54c	api(session): Add connection to api input (#1763 )	4 years ago
Timothy Messier	0cfd8279b0	fix(controller/targets): Fix creation of credential libraries The arg order was incorrect for ingress/egress credentials. Ref: `2cc58ff901` Blame: `36f1ae75f7`	4 years ago
Timothy Messier	533b434d1a	refact(controller/targets): Move tcp functionality into subpackage This follows a similar pattern as the target domain package, providing a subpackage for the tcp target functionality, allowing this to be pluggable.	4 years ago
Timothy Messier	c9b99306e1	refact(target): Add NewFunc to registry This adds a new requirement onto subtypes to register a NewFunc. Previously the subtypes where implementing this function anyway, but the target package was not including them in the registry. This resulted in packages that use the target package needing to import the subtypes directly, which we want to avoid. This refactor will require the subtypes to register their NewFunc which can then be used by `target.New` so packages that need to create targets can do so by only using the target package. This also updates the tcp subpackage to register a NewFunc.	4 years ago
Timothy Messier	1ae388438f	feat(subtypes): Add function to provide all known prefixes	4 years ago
Thor	9f7c650101	api: Returns connections as part of sessions (#1714 ) * session.proto: added connections to Session message * make proto * handler: convert connections on toProto * updated unit test to check connections	4 years ago
Michael Gaffney	72d4d6d205	fix(sql): Remove warning from create_time trigger (#1751 ) Raising a warning in the default trigger used for setting the value in create_time columns creates unnecessary noise in the PostgreSQL log files. Closes #1744	4 years ago
Jim	983f7b019c	refactor (db): Remove unused gorm formatter (#1738 )	4 years ago
Chris Marchesi	84febd9983	internal/host/plugin: ensure UpdateCatalog triggers updates for sets (#1736 ) * internal/host/plugin: ensure UpdateCatalog triggers updates for sets This ensures that attribute updates to a host catalog triggers an update to any of its downstream host sets. This ensures that updates to elements that affect a host set, such as the region a host catalog is configured for, take effect immediately instead of requiring a wait of long as 10m after an update. * Add WithNextRunIn to test sync job This is to ensure it doesn't run right away when added. This ensures that we can accurately test when the job is set to run immediately. * Update internal/host/plugin/repository_host_catalog.go Co-authored-by: Todd <T.Alan.Knight@gmail.com> * Change TestRepository_UpdateCatalog_SyncSets to check next run time, not wait for run * Remove explicit version increment and instead rely on implicit increment * Fix lanuage for rows updated check when flagging host sets for sync * remove errant non-zero check when looping over the thing we're checking * remove scheduler start line from TestRepository_UpdateCatalog_SyncSets Co-authored-by: Todd <T.Alan.Knight@gmail.com>	4 years ago
Hugo Vieira	f1063a62a0	feature(config): add sockaddr template support	4 years ago
Hugo Vieira	21a771b581	test(servers base): add tests ahead of functionality change Adds tests to `SetupControllerPublicClusterAddress` and `SetupWorkerPublicAddress` ahead of changes in these functions to ensure functionality is preserved.	4 years ago
Jeff Mitchell	5417cc5cb0	Fix setting nil attributes on host sets (#1746 ) This is the analogue of #1743 but for host sets	4 years ago
Jeff Mitchell	269fb94885	Add test controller option to not use a templated database	4 years ago
Jeff Mitchell	1c39691023	Fix setting host catalog attributes to nil (#1743 ) Internally attributes are not allowed to be the null value. However, as currently implemented, this then breaks our normal model of sending an explicit `null` in the JSON to reset/clear a field. This is a problem because the CLI doesn't have a way to say "set this but to empty" without a lot of hoops, and causes some issues for API users and TF as well. This changes PatchBytes and PatchStruct to return an empty value (or marshaled empty value in the case of PatchBytes) if the source is null or empty. In the host catalog update function we then always set this value if it's in the db mask (removing the nil check). Together this means a null value ends up coming out as an empty value (and thus valid for the DB) from PatchStruct/PatchBytes, and our API translation function already returns nothing for attributes if the length of the fields are zero.	4 years ago
Jeff Mitchell	b2efce961d	Fix comment on sync_interval_seconds being invalid (#1745 )	4 years ago
Jeff Mitchell	dc2148496b	Actually enable loopback plugin in dev (#1742 )	4 years ago
Louis Ruch	9bec68f32c	refact(servers): Cleanup redundant if else (#1741 )	4 years ago
Chris Marchesi	9e976cb4ae	internal/host/plugin: Fix TestUpdateSet (#1735 ) Now asserts on error on the last lookup check and removes the plugin lookup since we're not asserting on that.	4 years ago
Jeff Mitchell	95568ef07f	Fix tests using multiple controllers (#1734 ) The previous PR only initialized plugins if they were required, which meant that there may not actually be a plugin manager running because a second node would not actually create the dev database, which is where the plugin was being added. The assumption that a plugin manager is running is still a fine one at the moment, but we just need to make sure it's running in _all_ cases.	4 years ago
Jeff Mitchell	ad8ce50f69	Fix Windows (#1733 ) The embed package always uses Unix-style forward slashes. filepath.Join utilization looking for files would cause the slashes to be the wrong direction on Windows and result in the files not being found.	4 years ago
Jeff Mitchell	5559cf54d3	Don't always assume plugins should be activated (#1732 )	4 years ago
Jeff Mitchell	3b83184700	Add missing read only check on secrets hmac field in handler (#1729 )	4 years ago
Jeff Mitchell	9213e4b821	Handle same-named options across subtypes (#1728 ) This updates the API generation code to allow the same option names to be used in subtype-scoped options. This means if we have attribute structs with the same fields, they won't overwrite each other, but will instead create attribute-specific options.	4 years ago
Todd	18de3653f5	Set sync job still syncs when plugin reports no hosts in sets (#1726 ) * Allow the set sync job to sync when no hosts are returned by the sync job.	4 years ago
Todd	63bf60654e	Add plugin info on the CLI when reading a host. (#1725 )	4 years ago
Michael Gaffney	55c6c5872f	feat(sqltest): Make container port configurable	4 years ago
Todd	056e72491d	Attempt to fix the ci error. (#1723 )	4 years ago
Louis Ruch	0cf9573f24	chore: make fmt	4 years ago
Louis Ruch	c33efbf223	chore: make fmt (#1721 )	4 years ago
Todd	1417e17909	Fix nil pointer error when listing by non existing host catalog. (#1720 ) * Fix nil pointer error when listing hosts from nonexisting host catalog.	4 years ago
Jim	5232be905b	fix (auth/oidc): Revert to working version of oidc acct upsert (#1719 )	4 years ago
Todd	b1c53951d5	Use the correct collection actions response when updating host catalogs. (#1718 )	4 years ago
Jeff Mitchell	866bfceefc	Add secrets_hmac to host catalog output (#1712 ) Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Dharini Jeeva	c6e7abc9e0	update ui version (#1717 )	4 years ago
Jim	ebea283421	fix (kms): Add kms.ReconcileKeys(...) to fix missing audit DEK scenario (#1711 ) This fix addresses the situation where an existing boundary database doesn't have the audit DEKs in the global scope.	4 years ago
Thor	7fa2cd2526	rename migration from 01-09 after bad merge (#1709 ) * rename migration from 01-09 after bad merge	4 years ago
Thor	ad31b6d6c3	repo: Return connection informat in Session response object (#1690 ) Add connections to the Session object * db: creat new session_list view * repo: session use new session_list view	4 years ago
Jeff Mitchell	8cd8453113	Update dev loopback host plugin flag name	4 years ago
Jeff Mitchell	8110e0eab3	Increment version of host during updates (#1707 ) Currently host does not use a version, which means it's not protected against race conditions of either itself or its value objects. This adds and plumbs through version to ensure that if a host or its value objects change that they are not going to be affected by a race condition.	4 years ago
Jim	1b6c9a25c8	Add more opts when using Create + WithOnConflict (#1706 )	5 years ago
Jeff Mitchell	b3fd23863f	Add external ID to host output (#1705 ) This also fixes a bug if no hosts were returned where the job would run over and over in a loop, and some other cleanup.	5 years ago
Todd	46a1edcb3b	Add DNS Names and IP Addresses to the CLI output. (#1701 )	5 years ago
Todd	78dc6cf370	OnConflict constraints for adding host ip and dns names in upsertHosts (#1700 ) * Ignore constraint violations when adding ip addresses and dns addresses that already exist.	5 years ago
Jim	c6d79bc911	feature (db): Add WithOnConflict support to CreateItems(...) (#1699 )	5 years ago
Todd	5d2b0e94aa	Update sync interval seconds field. (#1698 ) * Update sync interval seconds field. * If the sync interval was updated, schedule the next sync job wakeup immediately. * Calculate the next sync time for the scheduler should wake up if we only updated the sync interval.	5 years ago
Todd Knight	5850001a07	Rename file to match others in directory and remove TODO.	5 years ago
Todd	b16ce175e5	Fix secrets clearing bug in update. Changes to update count behavior for catalogs (#1691 ) * Fix secret clearing bug in update. Always return 1 catalog updated if we can find a catalog w/ a matching version.	5 years ago
Todd	5cfcc41f00	Fix bug for adding preferred endpoint when non existed prior. (#1692 )	5 years ago
Todd Knight	f41bceda83	Merge from main and `make gen`	5 years ago
Todd Knight	884e1f2d18	Merge branch 'main' into plugin-hostcatalogs # Conflicts: # go.mod # sdk/go.mod	5 years ago
Jim	f46803d808	feature (authmethod): Add managed grps perms to auth collection actions (#1695 )	5 years ago
Todd	61f9d1f6af	Add update set handler and sdk functionality (#1684 )	5 years ago
Jim	1ac151100e	docs (internal/db): Add docs Update/Delete operations using WithWhere (#1687 )	5 years ago
Todd	29b4537d3b	Reference PreferredEndpoints by top level struct name (#1688 ) * Reference PreferredEndpoints by top level struct name instead of embedded proto GetPreferredEndpoint method. Reorganize the sql files a little. * Make PreferredEndpoints replayable. Test refactoring to remove variables that persist across test calls. DeleteItems instead of trying to use WithWhere.	5 years ago
Jeff Mitchell	30e9f944a2	Add sync interval to host sets (#1680 ) This adds a parameter to host sets allowing the sync interval to be user-specified on a per-host-set basis. A value of -1 disables syncing; a value of null uses the current default.	5 years ago
Todd Knight	dba7c6b531	Fix value of op constant for syncSets	5 years ago
Chris Marchesi	c2cd6febca	internal/host/plugin: add UpdateSet (#1686 ) * internal/host/plugin: add UpdateSet This adds the UpdateSet repository function. UpdateSet runs the OnUpdateSet plugin call within the transaction as per the changes in #1683. The plugin call returns the updated set, the hosts in the set, the rows updated, and any error. * Ensure that attributes can be cleared by supplying a full null * move version increment to the end and track perferred endpoint update separately * move plugin call to end of transaction * only clone returned set once, and move host fetch call out of transaction * Request a sync when attributes are updated * Add test to assert that old preferred endpoints are being removed correctly	5 years ago
Todd	2229d1a819	Call OnCreate or OnUpdate on the plugin after db constraints are checked (#1683 ) * Only call the Plugin at create/update time after the db has been partially updated. This allows more constraints to be checked prior to calling the plugin.	5 years ago
Todd	050553ffcf	Add update catalog support for plugin based catalogs in handler and go sdk (#1673 ) * Create catalog service handler for updating plugin. Add tests for handler and run make fmt. Silently drop attributes where the value is nil when creating the catalog or set.	5 years ago
Jim	c047c4d89d	refactor (db): Remove the internal/db test tables from the migrations (#1675 )	5 years ago
Jim	048fceaf54	feature (workers): Add audit events for worker requests (#1681 ) * feature (audit events): Add interceptor for auditing worker requests * feature (events): Add default deny filter for worker status events * feature (worker audit events): Add tags to SessionService req/resp	5 years ago
Jim	b96f57ec4e	fix (events): Only "sign" audit events (#1677 ) * chore: Update eventlogger dependency. We need the latest version, so we can limit the type of events that are signed. * fix (events): Only "sign" audit events	5 years ago
Jeff Mitchell	48ac8b8f0b	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jim	eecd878b36	feature: Add signing (hmac-sha256) of audit entries (#1666 )	5 years ago
Chris Marchesi	157f1a091b	internal/host/plugin: add update catalog test for empty/same description (#1672 ) This is to mainly get coverage on the empty description case, but it follows the same logic as the "update name to same" test.	5 years ago
Timothy Messier	242e353f18	fix(schema): Prevent duplicate versions per edition (#1670 ) This should help prevent issues like the one fixed in `f2ad4de554`. A version for a particular edition should only exist once, previously which ever file was read last for a version would be included, which would lead to some migrations not running.	5 years ago
Chris Marchesi	0670e272e3	internal/host/plugin: Add UpdateCatalog (#1634 ) * internal/host/plugin: Add UpdateCatalog This adds support for updating plugin-based host catalogs. The workflow is: * The existing catalog is fetched. * Any attribute changes are patched against it, along with other changes such as name and description. * Both the existing catalog, and the state of the catalog as it will exist post-update, along with any persisted secrets, are sent to the plugin via an OnUpdateCatalog request. Upon success, the following is done: * The record is updated if non-secret updates need to be made. * Secrets are updated if they still exist. * If an empty secret set was sent back, secrets are instead deleted. * If the secrets field was instead null, secret update is skipped altogether. There has also been a lot of helper code added to the tests to help make the update tests more readable and reduce boilerplate. While the create tests have not been updated to use these new helpers, it might be a good idea to do so for consistency. * move secret/persisted state closer to plugin call * Update internal/host/plugin/repository_host_catalog.go Co-authored-by: Todd <T.Alan.Knight@gmail.com> * Update internal/host/plugin/repository_host_catalog_test.go Co-authored-by: Todd <T.Alan.Knight@gmail.com> * move all test helpers for UpdateCatalog inline * WIP - transparent attributes struct/wire conversion * Revert "WIP - transparent attributes struct/wire conversion" This reverts commit `31af1b1b7e`. * deal with multiple attribute masks * Note TODO for upsertQuery for HostCatalogSecret * add version check guard * Update internal/host/plugin/host_catalog_secret.go Co-authored-by: Todd <T.Alan.Knight@gmail.com> * remove redundant JIRA reference * don't separate number of updated catalogs and secrets * increment version when secrets is the only thing being updated * add another test for updating both catalog and secrets at once * correct comment for mock plugin manager section * add first-part path matching for secrets * update plugin lookup error to return errors.Internal * only add name/description to plugin request if they are non-empty * update duplicate tests to use two project scopes * remove unused test checks * return plugin record along with host catalog in update * move away from using passed in catalog after patching newCatalog * use t.Cleanup() instead of defer Co-authored-by: Todd <T.Alan.Knight@gmail.com>	5 years ago
Jim	b6ad76e4d2	fix (db): Clean up tests a bit (#1669 )	5 years ago
Chris Marchesi	165cc5ef1b	fix ineffectual assignment to err in DeleteCatalog (#1664 ) Was being caught by my linters. Looks like the error wasn't being checked after getCatalog.	5 years ago

... 2 3 4 5 6 ...

1298 Commits (4b526538af660cf4c29988cd514b18fe673dc8a8)