378 Commits (69fc3a47d07969c3e29e1fcd6a9b6d818052d47a)

Author	SHA1	Message	Date
Jeff Mitchell	62d4f8453b	Don't explode grants from the DB (#5104) ... This removes the Cartesian product in the DB for GrantsForUser in favor of returning the actual grant scope information and dealing with it in application code. (cherry picked from commit 913cd53682)	1 year ago
Jim	85afd56266	fix (cache): support for DB debug logging (#5087) ... (cherry picked from commit a7fe48b8d8)	1 year ago
Jim	4d8a7dd39a	feat (clientcache): use a persistent cache (#5051) ... By default, we will use a persistent cache for the client cache. This will allow us to keep the cache across restarts of the server and it will also reduce the amount of time it takes to start the server while reducing the amount of memory used. This change also includes a validation of the cache schema version. If the schema version is different from the one expected, the cache will be reset/recreated. (cherry picked from commit cf8a51f383)	1 year ago
Michael Gaffney	68c83eb419	chore: Bump to Go version 1.23.1 ... Go 1.23.1 includes security fixes to the encoding/gob, go/build/constraint, and go/parser packages, as well as bug fixes to the compiler, the go command, the runtime, and the database/sql, go/types, os, runtime/trace, and unique packages. See: https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc	1 year ago
dependabot[bot]	d45aa402d8	chore(deps): bump github.com/opencontainers/runc (#5075) ... Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.2.0-rc.1 to 1.2.0-rc.3. - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/main/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.2.0-rc.1...v1.2.0-rc.3) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	1 year ago
Johan Brandhorst-Satzkorn	6c4db8b6c0	all: upgrade Go to 1.23.0	2 years ago
Jim	28b465e4b8	refact: to use go-dbw CreateItems, DeleteItems (#4974) ... * refact: to use go-dbw CreateItems, DeleteItems Latest version of go-dbw updated the signature of CreateItems(...) and DeleteItems(...) on a happy note this latest version of go-dbw actually does batch inserts and updates for this functions. * all: regenerate protos with new protoc-gen-go version	2 years ago
dani	af0e89c328	update github.com/docker/docker to v27.1.1+incompatible (#4984)	2 years ago
Irena Rindos	48038c3c33	chore: update grpc to 1.61.1 (#4983)	2 years ago
Michael Li	9c56eb5e16	chore: Update go-retryablehttp to 0.7.7 (#4930)	2 years ago
Johan Brandhorst-Satzkorn	96052c6a06	Upgrade Go version (#4923) ... This fixes a security vulnerability in net/http, CVE-2024-24791.	2 years ago
Irena Rindos	b54608b9f2	worker auth: use new previous pkix field (#4894) ... * worker auth: use new previous pkix field	2 years ago
Irena Rindos	08f391c5d6	workerauth: satisfy NodeIdLoader interface (#4870) ... * workerauth: satisfy NodeIdLoader interface	2 years ago
Todd	6cb7c74336	point to new api taged version (#4836)	2 years ago
Damian Debkowski	7256957127	chore: update boundary api & sdk versions (#4756)	2 years ago
Damian Debkowski	facd7d33a2	chore: dependency upgrade to resolve GHSA-c5pj-mqfh-rvc3 vulnerability (#4742)	2 years ago
Michael Li	d72556fb97	chore: Update docker dependency (#4686) ... GHSA-x84c-p2g9-rqv9	2 years ago
Michael Li	e8e19df872	chore: Update net dependency (#4595) ... Addresses GO-2024-2687/CVE-2023-45288	2 years ago
Michael Li	1778ab93bc	chore: Update docker dep (#4583) ... Vulnerabilities - GHSA-mq39-4gv4-mvpx - GO-2024-2659	2 years ago
Todd	c42a940332	Updating deps (#4537)	2 years ago
Johan Brandhorst-Satzkorn	dd206bb419	deps: update go-jose (#4568) ... Apparently 3.0.1 has a vulnerability	2 years ago
Michael Li	9eb608feeb	chore: Update protobuf to 1.33 (#4485) ... Release: https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0 CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-24786	2 years ago
Jeff Mitchell	014a5a7aae	Vet/race fixes (#4421) ... This addresses all found vet/race fixes in community edition. --------- Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>	2 years ago
Jim	3af259ff69	chore: update deps (#4394) ... * chore: update deps * tests: update sqlmock tests for breaking chg * tests (handlers): sort grants in checkEqualGrants(...) sort the expected and got grants in checkEqualGrants(...) to make the test more deterministic. * tests (asciicast): update backspace enc in TestEventMarshal(...)	2 years ago
Michael Li	61fb079371	test(e2e): Add test for authentication when no keyring is available (#4378)	2 years ago
Johan Brandhorst-Satzkorn	d9c6de4e8b	deps: update runc dependency (#4349) ... Fixes GHSA-xr7r-f8xq-vfvv	2 years ago
Jeff Mitchell	8e71caa2e3	Address some review feedback	2 years ago
Jeff Mitchell	fff5f9506f	Migrate proxy logic to the API package (#4216) ... This allows arbitrary programs to have an easy mechanism to make connections through Boundary using Go. Internal cluster tests and test helpers have been migrated to use this package, as well as the `connect` command. --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Johan Brandhorst-Satzkorn	edc616ea9d	dep: upgrade vulnerable deps (#4235) ... These dependencies triggered warnings in our release workflow.	2 years ago
Jeff Mitchell	9332179a01	Remove the deprecated old KMS worker auth mechanism (#3935) ... This has been superceded by the nodeenrollment-based KMS worker auth mechanism. This commit only removes the ability to connect with this mechanism; some upgrade logic will remain intact for a bit and can be removed later.	2 years ago
Johan Brandhorst-Satzkorn	1303f7c363	Fix linter warnings (#4219)	2 years ago
Todd	a8c360ebf4	update mql dependency (#4191)	2 years ago
Todd	9025e126fb	Fix dependency that got reverted to older version	2 years ago
Todd	8af20349e7	update mql and clean search flags (#4030)	2 years ago
Todd	ab4ab0e8f9	Handle log rotation (#3948) ... * Handle log rotation	2 years ago
Jim	fba9d1cdf1	Add client daemon repo, server, and cmd ... The commands added are: boundary daemon start boundary daemon stop boundary daemon add-token boundary daemon status boundary search If these actions are performed on a platform that doesn't support sqlite natively in go an error is returned. Besides some hooks into the cmd package all the significant logic resides in internal/clientcache feat (cmds/authenticate): output the token name when storing token feat: update go-dbw which now uses pure go sqlite driver refact (base.Command): export FlagOutputCurlString Exporting FlagOutputCurlString allows other commands that embed the base.Command to access the flag as needed feat: add a cache Repository to manage cache storage feat: add a "cache" CLI command This new command will support both managing and searching the local CLI cache daemon. feat: start cache daemon as needed when issue CLI commands Move files to new directories and add persona table (#3526) * Add persona table and move files to new directories Client daemon now uses unix sockets and update pathing (#3535) * Add unix socket listen and dialers with file permissions applied * Update the pathing to match RFC Cache refreshing now uses all stored personas. (#3545) Updating headers for LLB files Decouple daemon and cache server (#3566) * Separate daemon from server * Add persona handler to daemon server (#3579) Moved search to use mql and added tests for the search command (#3589) * search uses hashicorp/mql Windows support for client side daemon (#3618) * exec.Command for background process * Log to stderr when in foreground and file always * Use pid files across platform for start and stop Requests with version info must match the daemon's version (#3640) * requests with version info must match daemons Update dependencies and breakout cgo/pure go sqlite drivers (#3657) upgrade go-dbw deps and add cgo build tags Enable graceful shutdown in windows (#3695) * Enable graceful shutdown in windows Co-authored-by: Jim <jlambert@hashicorp.com> Targets delete when a persona changes address or user id (#3673) * Handle cache refresh in repo Add sessions to the client side cache (#3682) * Add sessions to repository * Search command supports sessions * adding session related tests to db and refresh Change cache schema from personas to tokens+users (#3737) * Change from personas to tokens+users * Separate keyring tokens from auth tokens Add support for keyringless auth tokens (#3765) * Add support for keyringless auth tokens Remove expired auth tokens from cache (#3768) * Remove expired auth tokens from cache Complete the TODO of checking for inflight tx (#3779) Delete tokens that the controller says are invalid (#3782) fix search test with boundary token check (#3799) Collect resource info in repository_<resource>s.go (#3769) * Collect resource info in repository_<resource>s.go * Move search logic into the domain (#3794) Daemon and search restricted to supported platforms (#3801) * Daemon and search restricted to supported platforms Reorganize the clientcache packages (#3814) * Refactor for self contained domain logic * Put clientcache stuff under internal	2 years ago
Timothy Messier	6e233c879f	fix(ratelimit): Round up when setting Retry-After header ... Previously this would truncate to the nearest integer, which could result in clients retrying before the quota has reset, and getting rate limited again. This also includes an update from go-rate that will round up when reporting the reset time for the RateLimit header. Note that in the case of a 503, the Retry-After header was already being set correctly. See: https://github.com/hashicorp/go-rate/pull/8	2 years ago
Timothy Messier	d0c3da5f1d	refact(ratelimiter): Updates due to refactor in go-rate	2 years ago
Timothy Messier	059d4992de	feat(ratelimit): Add support for limits per ip address and auth token	2 years ago
Timothy Messier	bc48e58035	chore: Add go-rate dependency	2 years ago
Damian Debkowski	3394d3e13a	chore: update go mod and dependencies (#4073)	2 years ago
Jim	18729721a1	fix (plugins/gcpkms): update dep to fix issue with using gcp kms (#4058)	2 years ago
Jeff Mitchell	cb1386932d	Use sdk wspb library and remove internal (#4025)	2 years ago
Jeff Mitchell	71e685b276	Copy wspb into sdk in preparation for moving it out of main (#4023)	2 years ago
Timothy Messier	dd23f6fdbf	Update websocket library (#3908) ... The nhooyr/websocket library now has a release with the new default behavior that removes the message size limit. This allows us to switch off of the fork and back to the upstream. In the same release that includes the fix we need for the boundary client, the wspb helper package was removed from websocket. This package contained some functions to read and write protobuf messages. However, it was using the deprecated github.com/golang/protobuf/proto library. To avoid this dependancy in the library they opted to just remove wspb. Thus this provides a replacement implementation that uses google.golang.org/protobuf/proto. Notably the newer proto library seems to lack an equivalent of proto.NewBuffer so writes to the websocket and not able to leverage a sync.Pool of byte.Buffers to reduce allocations. Refs: 88bb253554 See: ac385120c6	2 years ago
Jim	61ef033fb6	chore (deps): update gldap dependency (#3989)	2 years ago
Jeff Mitchell	a9e372930d	Revert 0bf60996c5 (#3990) ... Post-merge some issues were discovered with the ways typing is used for proto reflection. This will be reworked without moving the subtypes around.	2 years ago
Jeff Mitchell	de4ce93931	Update main module deps (#3971)	2 years ago
dependabot[bot]	b528696325	chore(deps): bump github.com/docker/docker (#3949) ... Bumps [github.com/docker/docker](https://github.com/docker/docker) from 23.0.3+incompatible to 24.0.7+incompatible. - [Release notes](https://github.com/docker/docker/releases) - [Commits](https://github.com/docker/docker/compare/v23.0.3...v24.0.7) --- updated-dependencies: - dependency-name: github.com/docker/docker dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Jeff Mitchell	fb4a5a98dc	Add some target fields and move some things around (#3879) ... In preparation for putting proxy code in the api package this creates some necessary fields in the target output and it pre-moves credential parsing and proxy handshake code to their new places. This will make the diff for the actual proxy code move quite a bit smaller. Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago