boundary

Commit Graph

Author	SHA1	Message	Date
hashicorp-tsccr[bot]	69b60c82df	Result of tsccr-helper -log-level=info gha update -latest .github/ (#5226 ) Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>	1 year ago
Michael Li	66e8ec0f41	test(e2e): Fix failure in migration test (#5277 ) * test(e2e): Fix log path to avoid error * test(e2e): Be explicit about port definition to avoid dockertest issue * test(e2e): Add check for health	1 year ago
Johan Brandhorst-Satzkorn	10370edf59	internal/commands/server: prevent test panic on timeout (#5249 ) Previously, if one of these tests failed to start their servers before the timeout, there was a risk that the goroutine started to run the server would invoke t.Errorf after the test itself had concluded. Replace t.Errorf with fmt.Printf to avoid the panic, and include the test name for debugging.	1 year ago
Dan Heath	4f9f281398	docs: Add resolved issue to release notes (#5260 ) * docs: Add resolved issue to release notes * Update website/content/docs/release-notes/v0_18_0.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: Revise gerund for standards --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	1 year ago
Damian Debkowski	bc10cbb35b	chore: update dependencies (#5269 ) * chore: update go-retryablehttp * chore: update x/net * chore: update protobuf * fix: missing dependency * chore: update jwt dependency	1 year ago
Michael Li	504050acb9	test(e2e): Add debug to search test (#5274 ) * test(e2e): Fix typo * test(e2e): Add cache log to output on failure	1 year ago
Robin Beck	1a19f70edf	Install boundary docs enhancements (#5261 ) * adds install-boundary/install-clients page * renames install-boundary/install to deploy, adds workflow notes * renames install-boundary/deploy, adds redirect for install-boundary/install * adds TOC for install-boundary section * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * style fixes * add next steps * fixes TF configuration note * use lowercase for Boundary installer * removes beta warning and adds a note instead * Apply suggestions from code review Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	1 year ago
Elim Tsiagbey	194629488d	chore: bump gcp plugin dependency (#5266 ) This picks up latest GCP Plugin bug fixes	1 year ago
Robin Beck	a92c0c7ed2	adds target aliases and transparent sessions usage docs (#5243 ) * adds target aliases and transparent sessions usage docs * fixes relative link * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/configuration/target-aliases/create-target-alias.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * fixes paragraph formatting * add authenticaton requirement * adds example link * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * clarifies host selection for session * use DNS-like aliases in example * fixes indentation * Update website/content/docs/concepts/aliases.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * adds callout box for 0.16 clusters --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	1 year ago
amitsk6	69fc3a47d0	docs: add ssh host key error to known issues (#5250 ) * docs: ssh error due to change in host key * style: remove trailing whitespace * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: rephrase message * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago
Johan Brandhorst-Satzkorn	0c8ea69851	Update CODEOWNERS (#5259 )	1 year ago
Michael Gaffney	e086fd3007	test(batch): Fix data races in tests Fixes: `9b984b0ab6`	1 year ago
Johan Brandhorst-Satzkorn	963e276721	Update CHANGELOG.md (#5253 )	1 year ago
Michael Li	820eb395a3	chore(e2e): Increase worker instance size (#5251 ) * chore(e2e): Update to use t2.small instances Using the updated AWS SDK required more memory and was causing workers to crash. * chore(e2e): Add identifier to aws instance	1 year ago
Deniz Onur Duzgun	91128ba37a	ci: update the security-scanner gha token (#5112 ) * ci: update the security-scanner gha token * security-scan : fix codeql download --------- Co-authored-by: mickael e <mickael@hashicorp.com>	1 year ago
Johan Brandhorst-Satzkorn	a2be306eb4	More managed groups limit fixes (#5245 ) * internal/handlers/managed_groups: ensure membership lookup is unlimited Previously, we would only show the first 10,000 members in the group, giving the impression that a complete list was performed. Now we list all members. * internal/handlers/accounts: ensure group lookup is unlimited Previously, we would only show the first 10,000 managed group memberships. Now we list all group memberships of an account.	1 year ago
Johan Brandhorst-Satzkorn	d830bdd416	internal/auth/oidc: ensure all managed groups are tested on auth (#5242 ) Previously, we would list the managed groups with an implied filter of db.DefaultLimit (10,000), which would incorrectly remove a user from managed group memberships if there were more than 10,000 managed groups in an auth method. Explicitly set the list limit to unlimited to ensure all managed groups are updated appropriately.	1 year ago
Dan Heath	53e77e313a	docs: Update meta content - Getting started (#5214 ) * docs: Update meta content - Getting started * Update website/content/docs/getting-started/dev-mode/connect-to-dev-target.mdx Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com> * Update website/content/docs/getting-started/index.mdx Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com> --------- Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>	1 year ago
Dan Heath	3d6a629c97	docs: Update meta content - Install (#5218 )	1 year ago
Dan Heath	9ac1129289	docs: Update meta content - Overview (#5203 ) * docs: Update meta content - Overview * docs: Delete extra line * docs: Remove newlines	1 year ago
Michael Li	45542b3fab	chore(e2e): Add required permission to service user (#5231 )	1 year ago
Elim Tsiagbey	514bcc19f6	feat(gcp): add GCP plugin (#5229 ) Add GCP as a supported plugin for dynamic host catalogs	1 year ago
Hugo	f227020b67	feat(scheduler): Use job table to select jobs to run This commit changes the logic around selecting jobs to run. Before this, Boundary used a view "job_jobs_to_run" which was a collation of all jobs that were not running and scheduled to run. When jobs were requested to run, Boundary would look at this view, grab a certain amount of jobs and insert them into the "job_run" table. Importantly, while the amount of jobs to be scheduled at once defaulted to 1 in the scheduler package, this was entirely overriden in the controller package to -1 (no limit, run all jobs that the query would return). With this commit, Boundary now looks at the "job" table directly for jobs to run, regardless of job run status. This was done to improve DB performance as the view (which queried all "job_run" rows) was causing significant DB contention. Additionally, the option to limit job runs is now removed since it was already hardcoded to -1 and not user-configurable anyways. Should the need arise to implement this limit again, this will have to be done in a different way since the new query does not account for running jobs and limiting the rows returned after jobs are already running would yield a no-op (the new query inserts nothing into "job_run" if any given job is already running).	1 year ago
Hugo	27c432a748	feat(scheduler): Drop completed job runs as they complete Before this change, upon the completion of a job run, the scheduler would update a job_run entry with the completed status as well as the number of objects affected by the run. Additionally, we then had a cleaner job whose scope was deleting these completed entries from job_run. This commit changes this design to drop the cleaner job the and rolls its functionality directly into the scheduler. Now, when any given job run is complete, the scheduler will automatically delete it from the job_run table itself. In addition, the completed status has been removed as a valid status as it is not set anymore. This change follows a decision that given the data in these job_run entries is already being deleted by the cleaner job, updating its state when a job completes just to have it deleted is not efficient. Additionally, no use-case for this data was surfaced.	1 year ago
dani	62c41191ff	[fix] allow IPv6 controllers, workers, and targets (#5221 ) Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>	1 year ago
Johan Brandhorst-Satzkorn	680bb02af9	docs/client-agent: clarify use of override_upstream_dns_servers (#5220 ) * docs/client-agent: clarify use of override_upstream_dns_servers The override_upstream_dns_servers option is recommended whenever a user needs to override the DNS servers discovered from the system. However, if a user supplies a DNS server that is only useable while connected to a specific network, it will break the internet in cases where it is not able to resolve these DNS servers. Encourage users to supply both the VPN servers and the default DNS servers. * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago
Johan Brandhorst-Satzkorn	5a071442b5	Clarify client agent config reload docs (#5213 ) * docs/client-agent: clarify configuration reload on MacOS The previous configuration was known to confuse at least one reader. It's easy to just copy the first command you see and run it, so make that the non-destructive reload command. * docs/client-agent: correct log level config example * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago
Michael Gaffney	9529491fa6	feat(session): Delete terminated sessions in batches This changes the periodic job that deletes terminated sessions to delete the those sessions in batches. Prior to this, a single SQL DELETE command was used to delete all qualifying terminated sessions. In systems under heavy load, the statement could timeout leading to a situation where no qualifying terminated sessions were ever being deleted.	1 year ago
Michael Gaffney	9b984b0ab6	feat(batch): Add batching for SQL jobs This adds a new `batch` package under the `scheduler` package.	1 year ago
Michael Gaffney	8c291a2934	feat(scheduler): Add retries to job status This adds retries as an attribute to JobStatus allowing a job to indicate liveness to the scheduler when work has not progressed. A job could use this and the statusThreshold passed into the Run method to break work up into batches that would otherwise timeout if all the work was attempted at once, for example a long running SQL delete command.	1 year ago
Michael Gaffney	9354a4ebcf	refactor(scheduler): Add statusThreshold parameter to job.Run The scheduler monitors running jobs to make sure they are not hung. If the status of a running job does not change after a duration (the interruptThreshold in the scheduler), the scheduler kills the job. This change passes the scheduler's interruptThreshold to the job when it calls Run() on the job.	1 year ago
Michael Gaffney	50ab600519	docs(scheduler): Clarify Job and JobStatus This adds more details to the Job interface and the JobStatus struct to clarify how the scheduler uses them.	1 year ago
Dan Heath	1f0bad4d48	docs: Session recording updates (#5195 )	1 year ago
Irena Rindos	70079bac7b	chore: update security scanner (#5197 )	1 year ago
Irena Rindos	36158056d9	feat(workers): add VerifyKnownWorkers repo function (#5189 )	1 year ago
Irena Rindos	dfde64e648	chore(server): fix const ops (#5190 )	1 year ago
Irena Rindos	a862dc1691	chore(docs): clarify that storage policies must be attached in order to take effect (#5191 )	1 year ago
Michael Li	50db63be95	test(e2e): Add retry to search test (#5187 )	1 year ago
Jim	7c89b052b3	chore (changelog): client cache user soft delete. (#5186 )	1 year ago
Jim	ffd0d2a7d3	feat (cache): impl. soft-delete of users in cache (#5173 )	1 year ago
Dan Heath	72e6ea8da0	docs: Clarify need to reload or restart Client Agent on Mac (#5183 ) * docs: Clarify need to reload or restart Client Agent on Mac * docs: Wake up Vercel * docs: Use full name of client	1 year ago
Johan Brandhorst-Satzkorn	2d72d2488e	Client agent docs updates (#5180 ) * docs/client-agent: indent PAN docs correctly Identifying the primary network interface is a sub-heading under the PAN troubleshooting section. * docs/transparent-sessions: add known issue around containers/VMs VMs/containers that do not have access to the local network cannot use aliases through transparent sessions.	1 year ago
Michael Li	61f5986f0d	chore(enos): Add ipv6 cleanup permission (#5174 )	1 year ago
Irena Rindos	7798906e4e	chore: update version and add Next to changelog post-release (#5179 ) * chore: update version and add Next to changelog post-release	1 year ago
Dan Heath	456f447167	docs: Update installer download link (#5176 ) * docs: Update installer download link * docs: Add absolute path	1 year ago
Dan Heath	0bd699c999	Dheath 0.18.0 assembly (#5175 ) * docs: TS public beta docs * docs: Updates * docs: Move Client Agent sections * docs: Updates * docs: Fix typo * docs: Remove x86 * docs: Add lead in sentence for links * docs: FAQ updates * docs: Edits and file name fixes * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> * docs: Add alias refresh interval * docs: Remove recurse only option * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/concepts/transparent-sessions.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: Updates from code review * docs: Update support request * docs: Fix a typo * Update website/content/docs/api-clients/client-agent.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * docs: Delete log example, create tabs * client-agent: rework configuration docs The section in the configuration talking about reloading the config was repetitive and verbose. Combine the different sections into two separate sections, one for updating general values and one for reloading values, on MacOS only. This also removes the specific Log section. * docs: Minor rewrites * client-agent: consistently use $ for shell sessions * aliases: discourage single-word aliases The use of single-word aliases breaks Transparent Sessions on Windows, so we should discourage it. See ICU-15255 for more information. * transparent-sessions: add known issues Add two new known issues. * client-agent: add troubleshooting section * transparent-sessions: emphasize troubleshooting guide * correct links I haven't actually validated these links, but they are now consistent with the rest of the links. * Review comments * client-agent: clarify that not all sessions are listed by command * transparent-session: add known issue regarding Windows installer * docs: Minor rewrites * docs: Fix a typo * docs: Add AssumeRole support * docs: Add Backblaze support * docs: Minor revision * docs: Update MinIO reqs * docs: Add supported Hitachi version * docs: Trigger a new build * docs: Clarify Desktop compatibility with control plane * Update website/content/docs/enterprise/supported-versions.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: Release notes 0.18.0 * docs: Add link to Client Agent docs * docs: Update ts definition * docs: Remove stray line * docs: Fix minor issues with the assembly branch * docs: Move section * docs: Add section * docs: Remove duplicate section --------- Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	1 year ago
hashicorp-tsccr[bot]	152d2e83a1	Result of tsccr-helper -log-level=info gha update -latest . (#5141 ) Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>	1 year ago
Cameron Perera	2e3fdb718c	bump ui commit to 0ff91f9 (#5172 )	1 year ago
Lisbet Alvarez	987cdb3b64	bump ui commit to 857bf01 (#5170 )	1 year ago
Danny Knights	d580fbb84a	Added new remove the requirement for inbound network rules section (#5010 ) * Added new remove the requirement for inbound network rules section * docs: Fix typo * Update website/content/docs/concepts/connection-workflows/multi-hop.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/concepts/connection-workflows/multi-hop.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/concepts/connection-workflows/multi-hop.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/concepts/connection-workflows/multi-hop.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	1 year ago

1 2 3 4 5 ...

4440 Commits (69b60c82dfd3e7c86a77e409d73273ba9c82331f) All Branches Search

4440 Commits (69b60c82dfd3e7c86a77e409d73273ba9c82331f)

All Branches