boundary

Commit Graph

Author	SHA1	Message	Date
Dan Heath	d4dc49fc74	docs: IA reorganization (#5838 ) (#6014 ) * docs: IA reorganization * docs: Updates * docs: Updates * docs: Fix links * docs: Updates * docs: Fix a typo * docs: Fix client agent topic * docs: Update Client Agent nav * docs: Fix conflict * docs: Fix a typo in Client Agent docs (#5853) * docs: Fix client agent topic * docs: Updates * docs: Updates * docs: Updates * docs: Updates * docs: Fixes get started and operations links * docs: Update nav * docs: Partials * docs: Unix partials * docs: Worker partials * docs: Updates * docs: Update workers and targets * docs: Updates * docs: Updates * docs: Fixes link * docs: Updates after sync review * docs: Updates from review feedback * docs: Move worker filter examples * docs: Fix links * docs: Updates for filters based on working session * docs: Fixes broken links * docs: Add links to other filter topics * docs: Update list intro * docs: Adds link * docs: Fixes redirects * docs: Fixes redirects * docs: Deleted mysql page from TOC * docs: Add versioned redirect * docs: Adds versioned redirects * docs: Adds versioned redirects * docs: Update redirects * docs: Update redirects * docs: Redirect fixes * docs: Update redirect format * docs: Fix a typo * docs: Fixes redirects * docs: Fixes redirect * docs: Adds links out to client agent troubleshooting * uses /etc/boundary.d/ as recommended installation directory (#6003) * docs: Updates legacy io links * docs: Fixes redirects * docs: Fix redirect * docs: Restoring deleted file --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	8 months ago
hc-github-team-secure-boundary	27060e86de	backport of commit `a488ef809d` (#5857 ) Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	10 months ago
Dan Heath	53f43edeef	docs: Add interoperability matrix (#5478 ) (#5806 ) * docs: Add interoperability matrix * docs: Remove one table version * docs: New format * docs: Update table format * docs: Revisions and beta label * docs: Add link, WARP caveat * docs: Adjust table spacing * docs: Update table and errors with new info * docs: Remove version column * docs: Adjust width for longer columns * docs: Remove errors in favor of #5674 * docs: Remove beta labels * docs: Update with newest test results	11 months ago
Dan Heath	b0c988f3b1	docs: Update TS documentation for GA (#5761 ) (#5800 )	11 months ago
Dan Heath	89a0506186	docs: Add HCPb grants issue and fix (#5746 ) (#5760 ) * docs: Add HCPb grants issue and fix * docs: Add important change, revise alertbox * docs: Updates based on review feedback * docs: Updates based on review feedback * docs: Rephrase reference to fix * docs: Update date of fix * docs: Update transparent sessions configuration topic	11 months ago
Dan Heath	4a3e3ebb39	backport of commit `9ff8657c8e`	12 months ago
Dan Heath	41eeb55a17	backport of commit `9aa30efb0f`	12 months ago
Dan Heath	7f152a28be	backport of commit `fe13a7b0b9`	1 year ago
Dan Heath	efe877bd54	backport of commit `7bfe697483`	1 year ago
Dan Heath	157a1d10c5	backport of commit `97abab4b30`	1 year ago
Dan Heath	84a056eb0a	backport of commit `cfddc2c12b`	1 year ago
Dan Heath	5be09a1981	backport of commit `1dda1c462c`	1 year ago
Dan Heath	d9812e0dea	docs: Note that IPv4 and IPv6 are mandatory	1 year ago
Mohit Kumar	f2c84ad750	docs: add macOS Internet Sharing and Parallels Desktop conflicts for Boundary Client Agent (#5496 ) * docs: add macOS Internet Sharing and Parallels Desktop conflicts for Boundary Client Agent Updated the "Conflicting Software" section in the Boundary Client Agent documentation to include issues caused by macOS Internet Sharing and Parallels Desktop (macOS VM with shared networking). These configurations cause the system's DNS resolver to bind to port 53, preventing the Client Agent from starting. * chore: change case of macOS to MacOS and added workaround for Parallels macOS VM conflict * Apply suggestions from code review approving style suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago
Aditya Sharma	d001e82817	docs: Fixes examples for alias_refresh_interval & dns_request_timeout (#5544 ) * docs: Fixes examples for alias_refresh_interval & dns_request_timeout * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Michael Li <michael.li@hashicorp.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Michael Li <michael.li@hashicorp.com>	1 year ago
Johan Brandhorst-Satzkorn	c593943209	docs/client-agent: add warning about MacOS 15 (#5543 ) * docs/client-agent: add warning about MacOS 15 MacOS 15.3 has been known to sometimes block users from using the client agent altogether. Explicitly allowing it access to incoming network connections resolves the issue. * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	1 year ago
Johan Brandhorst-Satzkorn	35943cb408	docs: add note about MacOS 15.1, 15.2 incompatibility (#5515 )	1 year ago
Aditya Sharma	0d206aab74	docs: Adds conflicts with Huntress EDR (#5454 ) * docs: Adds conflicts with Huntress EDR * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago
Mohit Kumar	1cf231a147	docs: clarify behavior of launchctl stop and unload for client agent (#5265 ) * docs: clarify behavior of launchctl stop and unload for client agent * docs: update unload command and clarify permanent disabling of Boundary client agent * docs: remove "Note" wrapper and clarify unload/reload command for Boundary client agent * docs: Capitalize Client Agent --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago
Dan Heath	c0a8775951	docs: Update meta content - API and clients (#5281 ) * docs: Update meta content - API and clients * docs: Update titles * Apply batch suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	1 year ago
amitsk6	69fc3a47d0	docs: add ssh host key error to known issues (#5250 ) * docs: ssh error due to change in host key * style: remove trailing whitespace * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: rephrase message * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago
Johan Brandhorst-Satzkorn	680bb02af9	docs/client-agent: clarify use of override_upstream_dns_servers (#5220 ) * docs/client-agent: clarify use of override_upstream_dns_servers The override_upstream_dns_servers option is recommended whenever a user needs to override the DNS servers discovered from the system. However, if a user supplies a DNS server that is only useable while connected to a specific network, it will break the internet in cases where it is not able to resolve these DNS servers. Encourage users to supply both the VPN servers and the default DNS servers. * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	2 years ago
Johan Brandhorst-Satzkorn	5a071442b5	Clarify client agent config reload docs (#5213 ) * docs/client-agent: clarify configuration reload on MacOS The previous configuration was known to confuse at least one reader. It's easy to just copy the first command you see and run it, so make that the non-destructive reload command. * docs/client-agent: correct log level config example * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	2 years ago
Dan Heath	72e6ea8da0	docs: Clarify need to reload or restart Client Agent on Mac (#5183 ) * docs: Clarify need to reload or restart Client Agent on Mac * docs: Wake up Vercel * docs: Use full name of client	2 years ago
Johan Brandhorst-Satzkorn	2d72d2488e	Client agent docs updates (#5180 ) * docs/client-agent: indent PAN docs correctly Identifying the primary network interface is a sub-heading under the PAN troubleshooting section. * docs/transparent-sessions: add known issue around containers/VMs VMs/containers that do not have access to the local network cannot use aliases through transparent sessions.	2 years ago
Dan Heath	0bd699c999	Dheath 0.18.0 assembly (#5175 ) * docs: TS public beta docs * docs: Updates * docs: Move Client Agent sections * docs: Updates * docs: Fix typo * docs: Remove x86 * docs: Add lead in sentence for links * docs: FAQ updates * docs: Edits and file name fixes * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> * docs: Add alias refresh interval * docs: Remove recurse only option * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: Updates from code review * docs: Update support request * docs: Fix a typo * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: Delete log example, create tabs * client-agent: rework configuration docs The section in the configuration talking about reloading the config was repetitive and verbose. Combine the different sections into two separate sections, one for updating general values and one for reloading values, on MacOS only. This also removes the specific Log section. * docs: Minor rewrites * client-agent: consistently use $ for shell sessions * aliases: discourage single-word aliases The use of single-word aliases breaks Transparent Sessions on Windows, so we should discourage it. See ICU-15255 for more information. * transparent-sessions: add known issues Add two new known issues. * client-agent: add troubleshooting section * transparent-sessions: emphasize troubleshooting guide * correct links I haven't actually validated these links, but they are now consistent with the rest of the links. * Review comments * client-agent: clarify that not all sessions are listed by command * transparent-session: add known issue regarding Windows installer * docs: Minor rewrites * docs: Fix a typo * docs: Add AssumeRole support * docs: Add Backblaze support * docs: Minor revision * docs: Update MinIO reqs * docs: Add supported Hitachi version * docs: Trigger a new build * docs: Clarify Desktop compatibility with control plane * Update website/content/docs/enterprise/supported-versions.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: Release notes 0.18.0 * docs: Add link to Client Agent docs * docs: Update ts definition * docs: Remove stray line * docs: Fix minor issues with the assembly branch * docs: Move section * docs: Add section * docs: Remove duplicate section --------- Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	2 years ago
Johan Brandhorst-Satzkorn	e64443c66f	Rename daemon CLI command to cache (#4808 ) * internal/cmd/wrapper: add deprecation wrapper The deprecation wrapper can be used to display a warning to callers when a command is deprecated. * all: rename daemon to cache Rename the boundary daemon command to boundary cache. This avoids confusion with future client/daemons. * changes daemon to cache in nav --------- Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>	2 years ago
Dan Heath	49afe51445	docs: Revise HTTP header documentation (#4637 ) * docs: Revise HTTP header documentation * docs: Define new header * docs: Revise definition * docs: Update if header is not provided	2 years ago
Dan Heath	c01b8df2a3	docs: Clarify need for permissions to search (#4367 ) * docs: Clarify need for permissions to search * docs: List grants	2 years ago
Dan Heath	2005593dc2	docs: Add client cache documentation (#4244 ) * docs: Add client cache documentation * docs: Update command documentation * docs: Add management section * docs: Update commands and examples * docs: Fix code examples * docs: Fix typo * Apply batch of suggestions from code review Co-authored-by: Todd <github@quaddi.com> * docs: Updates from review, rewrite add-token * Apply batch of suggestions from code review Co-authored-by: Todd <github@quaddi.com> * docs: Update commands, add-token * docs: Change keyring name * Update website/content/docs/api-clients/client-cache.mdx Co-authored-by: Todd <github@quaddi.com> * docs: Update commands * Update website/content/docs/commands/search/index.mdx Co-authored-by: Todd <github@quaddi.com> --------- Co-authored-by: Todd <github@quaddi.com>	2 years ago
Dan Heath	cffcc30eda	docs: Update API docs (#4209 ) * docs: Update API docs * docs: Update content * docs: Update content * docs: Update content * docs: Fix typos and word choice * docs: Revisions, add graphic * Apply batch of suggestions from code review Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: Deleting unnecessary content * docs: Clarify deleted items * docs: Add new limitation * docs: Remove list tokens section * docs: Update `list` command pages * Update website/content/docs/api-clients/api/index.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: Remove new options from worker doc --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Dan Heath	3cfc20e6f6	docs: Document API rate limiting (#4111 ) * docs: Document API rate limiting * docs: Fix default setting * addss rate limiting examples to complete configuration example * use # for comments for consistency * Update website/content/docs/api-clients/api.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Apply batch suggestions from code review Co-authored-by: Michael Li <michael.li@hashicorp.com> * docs: Updates from review feedback * docs: Updates from review feedback * docs: Add new defaults and sub-headings * Update website/content/docs/api-clients/go-sdk.mdx Co-authored-by: Timothy Messier <tim.messier@gmail.com> * docs: Remove remaining comments from code blocks * docs: Update code blocks * fixes tabs * Update website/content/docs/api-clients/api.mdx Co-authored-by: Michael Li <michael.li@hashicorp.com> --------- Co-authored-by: stellarsquall <stellarsquall@protonmail.ch> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Michael Li <michael.li@hashicorp.com> Co-authored-by: Timothy Messier <tim.messier@gmail.com>	2 years ago
Yoko Hyakuna	ad5ad69d54	[Assembly] Boundary Commands (CLI) docs (#3411 ) * Add 'Commands (CLI)' docs * Update index.mdx Added Environment variables section * Add 'connect' sub-folder structure * Adding listen address and port environment variables * add connect to the docs navigation * docs: Add Florin's update to index * docs: Fix links and typo * Add front-matter to resolve the PR check issue * Update postgres.mdx Boundary helper for POSTGRES * Completed 'boundary accounts' command docs * Draft connection option documentatino for kube, http, and rdp (#3455) * Style updates for consistency * Clean up using partials * Add 'ssh' doc & updated style for consistency * Fix paste error * Fix the format issue on 'connect ssh' doc * Add 'auth-methods' command doc (#3520) * Add the docs for 'logout', 'server', and 'dev' commands (#3524) * Add the docs for 'logout', 'server', and 'dev' commands * Update the front matter * Add auth-tokens and authenticate command docs (#3575) * Add config command docs (#3576) * updates to the ssh helper command docs (#3523) * updates to the ssh helper command docs * docs: Fix code block * docs: Add minor copy edits --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * docs: Add worker commands * docs: Update workers subcommands (#3598) * docs: Update worker subcommands * docs: Update certificate-authority subcommand * doc: Fix syntax for code refererences * docs: Add `users` commands (#3599) * docs: Add `users` commands * docs: Add more subcommands * docs: Add `target` commands (#3608) * Add command docs for 'credential-libraries' (#3610) * Add 'credential-stores' command docs (#3611) * Add 'credential-stores' command docs * Add the output message * Fix a typo * Fix a typo * Update the dummy token value * docs: Add `storage-bucket` commands - update (#3615) * docs: Add `sessions` commands (#3616) * docs: Add `session-recordings` commands (#3617) * Add 'credentials' command docs (#3619) * Add 'credentials' command docs * Fix typos * docs: Add `scopes` commands (#3620) * docs: Add `scopes` commands * docs: Fix typos * docs: Add `roles` commands (#3621) * docs: Add `roles` commands * docs: Add remaining subcommands * Add 'database' command docs (#3628) * Add 'database' command docs * Update the format inconsistency * docs: Add `managed-groups` commands (#3626) * docs: Add `managed-groups` commands * docs: Clarify description * docs: Add `hosts` commands (#3629) * docs: Add `host-sets` commands (#3630) * docs: Add `host-sets` commands * docs: Copy edits * docs: Add `host-catalogs` commands (#3632) * Add 'boundary groups' command docs (#3636) --------- Co-authored-by: kevin-loehfelm <37027455+kevin-loehfelm@users.noreply.github.com> Co-authored-by: kevin-loehfelm <kevin.loehfelm@hashicorp.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Florin Cătălin Țiucra-Popa <106736683+FlorinTP@users.noreply.github.com> Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>	3 years ago
Dan Heath	3f4cd53d16	docs: Update headings for new style rule (#3396 ) * docs: Update headings for new style rule * docs: Fix headings - Get started * docs: Fix headings - Install * docs: Fix headings - Concepts * docs: Fix typos * docs: Fix headings - Configuration * docs: Fix headings - Operations * docs: Fix headings - Troubleshoot * docs: Fix headings - Clients and Develop * docs: Fix headings - HCP and ENT * docs: Fix headings - Release notes * docs: Fix typos * docs: Fix capitalization in TOC	3 years ago
Hugo	22ecf95449	docs: Explain -format json behaviour on boundary authenticate cmd (#3202 )	3 years ago
Jeff Malnick	eea5e80fa2	Update documentation with new authenticate usage on the CLI (#2865 ) * docs: update deploy-and-login getting started guide with new authenticate usage * docs: update api-clients/cli.mdx to remove login-name flag when using authenticate * docs: update common-workflows/manage-users-groups.mdx to remove login-name flag when using authenticate * docs: update common-workflows/workflow-ssh-proxycommand.mdx with new short form usage of authenticate command when using the primary auth method in the global scope * docs: update oss/installing/no-gen-resources.mdx to remove login-name usage in authenticate command * docs: update oss/installing/run-and-login.mdx with short form usage of boundary authenticate * docs: fix tabs * docs: fix numbering * Apply batch of suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: fix code blocks * fixes code blocks --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>	3 years ago
Ashlee M Boyer	e6be6431b2	docs: Migrate link formats (#2777 ) * Adding docs-content-check-legacy-links-format workflow * Adding test-link-rewrites workflow * Migrating links to new format	3 years ago
Hugo Vieira	1f9063e042	docs(target): Introduce direct address targets and explain tradeoffs	3 years ago
Johan Brandhorst-Satzkorn	5dc7e7f55c	doc: Add link to generated API docs on API page (#2460 ) * doc: Add link to generated API docs on API page This makes it easier to find the generated API docs from the API description page. * Update website/content/docs/api-clients/api.mdx Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com> Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>	4 years ago
Jeff Mitchell	f494a9b80a	Update website with new password rules taken into account (#2330 ) * Update website with new password rules taken into account * Remove the prompt examples as it messes up copying	4 years ago
Loann Le	d5633952db	Boundary documentation: content cleanup in prep for devdot migration (#2249 ) * cleaning up docs * Update website/content/docs/concepts/domain-model/groups.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/managed-groups.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/roles.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/scopes.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/concepts/domain-model/sessions.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/configuration/worker/pki-worker.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/getting-started/deploy-and-login.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	4 years ago
Lili Cosic	d2602584ab	docs: Add full example for using recovery KMS workflow (#1888 )	4 years ago
xka5h	237f0c5704	updated CLI connection options, including addr (#1884 )	4 years ago
Jeff Mitchell	e9a8ede0d6	Move wrapper package back to SDK (#1511 ) TF uses this, so SDK is a decent place for it. It doesn't create dependencies between it and API.	5 years ago
Jeff Mitchell	081de3cf79	Migrate sdk/recovery to api/ and sdk/wrapper to internal (#1507 ) * `recovery` is only used by the API (and the main module, for decryption) * `wrapper` is only used by the CLI right now Moving these brings them closer to the code that uses them, and makes the SDK package a bit more clear in terms of functionality.	5 years ago
Michael Gaffney	df35699c4e	Integrate with Vault to retrieve and manage per session credentials (#1308 ) * Fix down migrations * Udpates due to merge * Sentinel values only have to be greater than 0 * Create credential related sdk structs and methods. * Post merge interface updating. * Removing scratch code that was not cleaned up. * updates * Convert client certificate and client certificate keys into pem blocks and validate. * Add newline at end of file. * Faster check for "s" at the end of a resource name when generating from templates. * make fmt * updates * Add dynamic credentials to a session * Refactor: move contents of file * updates * Updates * Add InvalidDynamicCredential error * Assign credentials * Allow updating client certificates seperate from the client certificate key. * Replace application purpose string with enum value * PR feedback / fix go test . * Delete dead code * Use common view * Refactor: extract interface and rename method * Refactor: move code to eliminate privPurpLibrary * Add comment to requestMap * Refactor: do not export methods on an unexported struct * Update internal/db/schema/migrations/postgres/10/03_vault_credential.up.sql Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com> * Add comments to credential Purpose constants * Reorder switch statements to handle errors first * PR feedback * update * fix merge * Organizing the scheduler code and extract the individual store creation test helper function. * Run 'make fmt' * Create certificate when creating store. Allow vault address to be passed in as option * Refactor: rename database views and associated structs This change renames two database views and associated go structs to use a consistent naming pattern. Views ending in 'private' contain encrypted credentials needed for connecting to Vault. Views ending in 'public' mirror the 'private' views but do not include any encrypted values. This change does not include any changes to functionality or behavior. * Adding SAD target operations for credential libraries to the SDK. * Add status field and enumeration table for credential status * Refactor: rename Status to TokenStatus * Add status to vault credentials * Creating the template for the CLI and helper functions. * Add private database view for vault credentials * Add scope_id to view and cleanup TODO comment * Reformat embedded sql queries * Add vault client helpers * updates * white space * Add LookupLease test * CLI commands for Store work. Renamed fields in proto w/ vault prefix. * Test issue credentials with client TLS * Add additional checks to vault ping * Add an error for vault token capabilities and create a VaultToken error kind * Add support for working with Vault policies * Use Vault 1.7.2 for testing * Add testing helper for creating a vault client with a non-root token * Fix Vault renew lease test The Vault renew lease endpoint accepts an optional duration parameter for requesting the number of seconds to extend the lease by. However, Vault is not required to honor this request. * Add a var for the required capabilities of a boundary Vault token * Enhance the test helper for adding a policy to Vault * Allow the test role in postgresql to revoke credentials * Remove out of date comments * Enhance Vault test helpers for the database secrets engine * Reformat comments * Add a method for getting the capabilities of the current Vault token * Add revoke lease to internal Vault client * Reformat: combine err return line with check for nil line * Remove redundant checks in test code Remove checks in test code that are redundant with checks in the test harness. * Refactor CreateToken test helper to return the secret and the token * Fix build failures caused by signature change in vault.CreateToken * Fix Vault version and Vault API link in comments * ran `make gen` after merging from mgaffney-vault. * Remove Vault prefix from attribute fields in API, create a base CLI option for adding field prefixes. format now uses that prefix for error reporting. * Template now allows attaching attribute field prefixes. * Credential store uses PrefixAttributeFieldErrorsWithSubactionPrefix. * Fixing naming of vault flags and helper flags. * Updating more references to generated api methods. * Make the capabilities String method more readable * Add comment outlining PrintApiError usage of Options. * Refactor test to move declarations closer to first use * Fix comment * Implement revoke method on vault repository * Tests now verify certs, CA, and tokens, addresses can be updated in a store. * Added test for creating store with pk/cert in same field. * Allo updating certificates seperate from private key. Only contact backing vault service when updating token. * Fixing bad tests and removing unused code. * Adding tests for various ways of updating tokens. * Add private credential * Add token revocation job and cred renewal/revocation job * Regen after merge. * Fixing field mask related merge error. * Create Library CLI. Removes vault prefix from path. Adds a WithoutCleanup testOption for vault. * Set all credentials to revoked when a token is revoked * Fixing missed renaming update. * fix copy/paste error. * Fixing code generation errors after merge. * make gen after merge. * Update internal/cmd/commands/credentialstorescmd/vault_funcs.go Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com> * Update internal/cmd/commands/credentialstorescmd/vault_funcs.go Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com> * Update internal/cmd/commands/credentialstorescmd/vault_funcs.go Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com> * Refactor: move migrations from 10 to 12 * Removing logic from transaction. * wrapping client errors in the calling op for CredentialStore's client() method. * Redact token * redact client key * updates * Add trigger to revoke credentials when session is canceled or terminated * Fixing some help text for some flags. * Add ability to load values from files (file://) or environment variables (env://). * Updating comments * fix bad merge * feedback * Adding issued credentials to sessions. * Error on capabilities * updates * Expose NewVaulTestServer * Add godoc * Adding generated SessionCredential struct for API. * Progress on building handler test for Authorize Session. * feedback * Update policies * Add 'revoke' as a status for Vault Tokens * Add delete_time to vault credential store * Create dynamic credentials at session creation time. * Tests pass with credentials attached to AuthorizedSession result. * Only call issue if there are credentials to issue. * Fixing output only issues. Adding type to credential library. * Fix test to clear un/pw generated. confirm generated un/pw changes from 1 authorize session call to another. * Update lookupTokenError * Add delete_time to private credential store * Refactor: move private store to separate file * Fixing tests for AuthorizeSession and verifying error cases. * Only create the credential repo if there are credentials to issue. * Rename Library field to CredentialLibrary. * Fixing missing change of Library to CredentialLibrary. * Removing Default SDK functions for fields which are required and update CLI to match. * Replace resource specific id variables with "id" and the input parmater for paths to be just a single string and the resource name as it should show up in the path. * Soft delete vault credential stores * Prevent new SQL functions from silently overwriting existing functions * Rename "Hmac" to "HMAC" in the human readable cli response table. * Fix tests * Add vault database cleanup jobs * Add ability to set the token period in the vault test harness * updates * Add not_null_columns func test * remove unused struct * Up no output timeout * Validate current vault token on addr update * Fix client cert change test * add cert test * Update revocation job where * Fix comment * Use Vault's default port in CLI help strings * Remove down migrations * Increase migration file numbers by 1 * Run make migrations * Move migrations from 12 to 10 * Increase Circle CI timeout for acceptance tests * Fix spelling mistake in error messages * ASD cmds for Target and returning credentials to AuthSession request (#1338) * Add Add/Set/Remove commands for libraries on Targets. Return credentials on AuthorizeSession request. Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com> Co-authored-by: Louis Ruch <louisruch@gmail.com> Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Susmitha Girumala	0b819d248e	Update desktop guide for Windows (#1292 ) * Add Windows screenshots to desktop guide	5 years ago
Jeff Mitchell	7ee8ddba6a	True up some spelling	5 years ago
Jeff Mitchell	4690225c1e	Update delete action behavior and JSON format output (#1155 ) This PR changes delete behavior: * On success, a 204 is returned rather than a 200 with an empty JSON object * The CLI now passes through the 404 error if encountered instead of swallowing it It also updates formatting for JSON to use the response body, which means that the item (or items) in the JSON format are actually the format across the wire, instead of being reinterpreted by unmarshaling into the Go SDK and then remarshaling.	5 years ago
NoahMundahl	2455445d16	website: minor edits to "Installing" pages and "Go SDK" page (#1139 )	5 years ago

1 2

67 Commits (4e8fe7efae63992680b80e10fa0b780e2a994e96)