475 Commits (4d966c8eb40d8c1194e20ec0983f736f8dde6fd6)

Author	SHA1	Message	Date
Jeff Mitchell	fa17fdf9d7	Update wording and fix a missing prompt (#2329)	4 years ago
Jeff Mitchell	fe2ee7ef4a	Change behavior of `-token` and `-password` to support env/file only (#2327) ... * Revert "Remove `-token` flag (#2303)" This reverts commit 65cff995d7. * Change behavior of -token * Add use of MustParsePath * Update changelog * Use errors.Is	4 years ago
Louis Ruch	53dbd51f14	Only consume ssh brokered credentials if the target is tcp (#2323)	4 years ago
Jeff Mitchell	26ffa705e5	Add parsepath logic to password in various places (#2325) ... * Add parsepath logic to password in various places: * Account password create/set/change * Authenticate Also fixes a bug where confirmation on a change-password call would run for the current password instead of the new one.	4 years ago
Jeff Mitchell	090b2b28f8	Clean up some dev config kms code (#2321) ... * Clean up some dev config kms code Although it didn't matter in the combined state, the KMS for auth storage was not actually being set properly if only a worker was being instantiated.	4 years ago
Jeff Mitchell	8800ec9c94	Reorganize logic to allow a poison pill (#2317)	4 years ago
Louis Ruch	fc25178827	bug(server): Start ops listener even if controller is nil (#2314)	4 years ago
Jeff Mitchell	65cff995d7	Remove `-token` flag (#2303) ... Token values can be shown in output of `ps` and so, and we support env vars and keyrings, so remove it.	4 years ago
Damian Debkowski	2db5840790	fix(cli) check error value in executeExtraActionsImpl funcs (#2293)	4 years ago
irenarindos	4908aba546	feat(vault): Add unimplemented worker filter support to OSS	4 years ago
Damian Debkowski	1e44ed3d92	fix(cli) check error value from command func (#2286)	4 years ago
Jeff Mitchell	5117cf9548	Add some safety checks in server command (#2288)	4 years ago
Timothy Messier	439566cd10	feat(target): Add ssh target support to sdk/api/cli ... This add the generated code and additional configuration to support sending the ssh target subtype to the api via the sdk or cli. The cli now supports an additional subcommand for the ssh target subtype: boundary targets create ssh boundary targets update ssh	4 years ago
Jeff Mitchell	1ef6e87a26	Add extra commands funcs (#2279)	4 years ago
Damian Debkowski	c2bfcc0664	refactor(api module): enforce typed definitions (#2238)	4 years ago
Louis Ruch	d6c1402223	bug(cli): Correctly generate private key file (#2274)	4 years ago
Louis Ruch	7d1a989ea7	feat(cli): Support using brokered private key in ssh subcommand (#2267) ... * feat(cli): Support using brokered private key in ssh subcommand	4 years ago
Louis Ruch	a17e973712	feat(credentials): Refactor credential purposes (#2260) ... * feat(credentials): Refactor credential purposes * Application credentials have been refactored to Brokered credentials * Egress credentials have been refactored to Injected Application credentials Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	4 years ago
Jeff Mitchell	271cc8f781	Add ssh private key to CLI (#2265)	4 years ago
Jeff Mitchell	7ab7c8eaf4	Have fallback eventing use json format (#2216) ... * Have fallback eventing use json format The server will initialize a logger via InitFallbackLogger(...) after setting up the server's logging (and honoring the related cmd flags). This fallback logger will be used if when no eventer is initialized. If no fallback logger is initialized, then a event.defaultLogger() will be used if no eventer is defined. Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Timothy Messier	fd5d15af27	feat(config): Add database config options for idle connection management (#2176) ... This adds two new config options for the `database` stanza: - `max_idle_connections` - `max_idle_time` These correspond to settings for the underlying `sql.DB` instance. They can be used to have finer control over the controller's database connection pool. For example this can be used to mitigate the high connection overhead when connecting to postgres by setting a high `max_idle_connections` and either setting `max_idle_time` to zero or to a high duration. Alternatively, if using a connection pool like pgpool-II or pgbouncer, `max_idle_connections` can be set to 0. See: https://pkg.go.dev/database/sql#DB.SetMaxIdleConns https://pkg.go.dev/database/sql#DB.SetConnMaxIdleTime https://www.pgpool.net/mediawiki/index.php/Main_Page https://www.pgbouncer.org/	4 years ago
Damian Debkowski	3e9c99c217	refactor(user_password) rename all references of user_password to username_password (#2232)	4 years ago
Todd	19b549c44a	Rename package servers to server (#2222)	4 years ago
Todd	eb37fc8d07	Quote tags before printing them out. (#2211)	4 years ago
Louis Ruch	9671daf6e0	Revert "refactor(user_passsword) change all references of user_password into username_password (#2189)" ... This reverts commit ab58b24142.	4 years ago
Damian Debkowski	ab58b24142	refactor(user_passsword) change all references of user_password into username_password (#2189) ... * (refactor) change all sql references of user_password to username_password * refactor(pkg) renamed pkg userpassword to usernamepassword * refactor(proto) updated protocol buffers to use UsernamePassword * refactor(code) updated references from UserPassword to UsernamePassword in golang files * refactor(test) updated unit tests to reference UsernamePassword changes * refactor(ddtest) updated references in dbtests to use UsernamePassword * chore(sql-test) fixed spelling issue * chore(sql) added and updated comments in migartion & tables. fixed indentations * chore(proto) updated comments to reflect username_password changes * refactor(tests) updated unit tests to replace user-password with username-password * refactor(cmd) updated cmd help text to use username * chore(tests) update test name & comments * fix(cmd) fixed cmd usage definition for credentials update * refactor(tests) removed out of scope changes * fix(sql) incremented sql migration id & updated migration comments	4 years ago
Jeff Mitchell	a589c32269	Minor capitalization change	4 years ago
Jeff Mitchell	32d04b9ce7	Allow a worker to use KMS auth but accept PKI for proxy (#2206) ... This essentially worked for non-dev mode before but would create storage directories that weren't actually used or needed, and it didn't work in dev mode because it made assumptions about the presence of a worker auth kms or not. This fixes those behaviors.	4 years ago
Jeff Mitchell	9a4545e59e	Fix eventing and worker name setup (#2204) ... * Don't automatically create worker names, as this is now invalid for PKI workers * Fix a check in dev that clears out name/description in exactly the wrong cases * Change eventing setup to use a hostname-based ID instead of the name (which could change on every start anyways)	4 years ago
Jeff Mitchell	704d68848c	Merge remote-tracking branch 'origin/main' into llb-byow	4 years ago
Jeff Mitchell	bfd9565010	Merge remote-tracking branch 'origin/byow-attrib-consolidation' into llb-byow	4 years ago
Jeff Mitchell	3d42737789	Don't display active connection count if it's not authorized (#2200)	4 years ago
Johan Brandhorst-Satzkorn	d06ac0d370	Propagate plugin execution dir to CreatePlugin (#2183) ... * fix: Propagate plugin options to CreatePlugin Plugin options were previously only applied to the BuildPluginMap call, resulting in the plugin execution_dir variable being ineffective. Also add a test to verify functionality * fix: Support plugin execution_dir for all plugins Previously, only external host plugins would respect the plugin execution dir. Now, all uses of the embedded plugins respect the configuration.	4 years ago
Jeff Mitchell	4efbce3112	Add description updating via worker status (#2197)	4 years ago
Louis Ruch	5ef9496e0a	feat(cli): Support credential brokering with sshpass (#2191)	4 years ago
Louis Ruch	68eb6e2bed	chore(targets): remove deprecated credential libraries on target resources (#1533)	4 years ago
Todd	beecbbb8a2	Upsert creates a new KMS and Updates PKI workers (#2187)	4 years ago
irenarindos	80752e9a24	cli(workers): Add extra help func	4 years ago
Jeff Mitchell	e6f6665bea	Merge remote-tracking branch 'origin/llb-byow' into byow-attrib-consolidation	4 years ago
Jeff Mitchell	8335deb8b6	Update protos, generated code, and service handlers (#2188) ... * Update protos, generated code, and service handlers * Address review feedback	4 years ago
Louis Ruch	4b365db634	feat(target): Add support for static credentials during authorize-session	4 years ago
Louis Ruch	58d546cdd4	feat(credential): Add static credential store and username_password credential	4 years ago
Jeff Mitchell	8fd663af47	Send more info on KMS connect (#2182)	4 years ago
Haotian	40ba275759	feat(worker): add 'initial_upstreams' field to worker config to prepare to replace 'controllers' field. Update worker config description on website.	4 years ago
Jeff Mitchell	8a131ef4f7	Fix missing guardrail for worker kms auth population (#2172) ... * Fix missing guardrail for worker kms auth population	4 years ago
Jeff Mitchell	5d3facf561	Merge remote-tracking branch 'origin/main' into llb-byow	4 years ago
Louis Ruch	c4285b29cc	fix(target): Correctly return egress credentials assocaited with target (#2167)	4 years ago
Irena Rindos	f7dbf2a532	Merge pull request #2163 from hashicorp/irindos-clusterid-upstreams ... feat(worker): Map cluster ID in config to upstream address	4 years ago
Jeff Mitchell	5a7291131f	Make current key update on rotation	4 years ago
Jeff Mitchell	b84001c07d	Add CLI for workers (#2164)	4 years ago