1534 Commits (6bd168b2a332d4cd8a769900a1cd6c298d9e8f1f)

Author	SHA1	Message	Date
Irena Rindos	2ab6ca6a84	Remove unrelated error from error message (#2558)	4 years ago
Todd	73f7004c74	Add RLocks for all read access to s.connInfoMaps in a session (#2553) ... * Add RLocks for all read access to s.connInfoMaps in a session	4 years ago
Michael Li	5b0ff4f058	test(e2e): Port "credential stores deletion check" from bats test to e2e test suite ... The "can not read deleted $NEW_STORE static store" bats test was demonstrating flaky behavior where it would fail due to the credential store read still returning something valid. This check has been moved to an e2e test in order to add some retry logic to the check.	4 years ago
Todd	c2d02966c6	When checking authorized actions, read the worker we created for the test. (#2548)	4 years ago
Jeff Mitchell	37273d7a9c	Fix two items: (#2544) ... * Randomize order of worker output. This uses the standard rand.Shuffle() call; cribbed from https://pkg.go.dev/math/rand#example-Shuffle * Have some error/eventing in the worker status path use the base context instead of the status-call-specific context to allow eventing after a timeout event	4 years ago
Michael Li	16e90ddd35	fix(bats): Fix flakiness in sessions.bats tests (#2537) ... The sessions.bats tests were seeing some flaky behavior when listing sessions but not getting the expected amount back. This is due to the connect_nc command that is currently used, which will immediately set the session to be "canceled" once it returns. This can cause subsequent operations to get unexpected results (sometimes, listing sessions would return an empty list if the created sessions go to a "terminated" state).	4 years ago
Haotian	3be8b6efed	refactor(metric): move common metrics functions out of 'internal' directory (#2536)	4 years ago
Todd	fa39fe5b0f	Delete the base auth account when a concrete auth account is deleted (#2528)	4 years ago
Todd	1437d5452d	Filter out null named workers when looking up the worker id in bats (#2531)	4 years ago
Todd	c9d902ebd0	Add worker create, list, read, update, and delete cli ui tests. (#2384)	4 years ago
Irena Rindos	da885a89c3	refactor(workerauth): consolidate workerAuth retrieval (#2512) ... * refactor worker auth	4 years ago
Todd	412e7a2418	Add interfaces and error codes for processing downstream router connections (#2511) ... * Add interfaces and error codes for processing downstream router connections	4 years ago
Louis Ruch	f23a28cf01	chore: Add white space (#2516)	4 years ago
Todd	2f68c604c5	Add test helper for creating a multihop worker setup (#2513) ... * Add test helper for creating a multihop worker setup.	4 years ago
Timothy Messier	d896f37493	Support reading multiple configuration files(#2504) ... feat(config): Support multiple files This updates the three subcommands that take a `-config` flag to to support multiple config files via a repeated `-config` flag. It updates the following subcommands: - `server` - `database init` - `database migrate` Note that the multiple file support only works if all config files are HCL, not JSON. Also note that the config files are concatenated together. There is no attempt to merge config files, so having the same stanza in multiple files can yield unexpected results, with only one of the stanzas being used. When used with these limitations understood, this provides a way to take different actions for different kinds of dynamic configuration changes. An example would be when using consul-template to render the configuration files for boundary. With the multi file support consul-template can render one config file for the controller stanza, and provide boundary with a dynamic database credential via vault. Then when the credential is rotated, consul-template can send boundary a SIGHUP to switch to the new credential without a restart. A separate template could be used to render a config for a stanza that does not support SIGHUP, such as the events stanza that gets its values via consul's KV. If these values change, consul-template can restart boundary so the new configuration is used. Co-authored-by: Timothy Messier <tim.messier@gmail.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	4 years ago
Carlos Alcaide Corvo	6e53747b97	Bump UI version (#2499) ... * Bump UI version	4 years ago
Louis Ruch	b31e6a8abc	cli(ssh): Use type instead of SubtypeFromId (#2497)	4 years ago
Irena Rindos	4493dfd527	use prior and current worker auth keys (#2495) ... * use prior and current worker auth keys	4 years ago
Hugo	902ca3cccb	fix(genapi): uint64 fields failing to be unmarshalled (#2492) ... uint64 fields get marshalled into json by protobuf as strings, so we have to tell the json parser to look for strings when unmarshalling.	4 years ago
Jeff Mitchell	6116dad2bc	Fix incorrect flag name (#2494)	4 years ago
Jeff Mitchell	74a007bfdd	Adapt to new nodeenrollment X25519KeyProducer interface (#2491)	4 years ago
Louis Ruch	b7684a857a	feat(ssh): Use HostId as HostKeyAlias for connect ssh helper (#2490)	4 years ago
Zhihe Li	fd0cbbc776	Bump UI commitish (#2489)	4 years ago
Todd	d270513b5a	Add error printing when cluster listeners and their consumers error. (#2488)	4 years ago
Zhihe Li	8ab3c4c1f4	Bump UI commitish (#2487)	4 years ago
Irena Rindos	bd4f5f3801	update worker auth rotate (#2484)	4 years ago
Louis Ruch	b78d83e242	log(vault): Log formatted duration instead of nanoseconds (#2481)	4 years ago
Zhihe Li	423f3be251	Bump UI commitish (#2480)	4 years ago
Johan Brandhorst-Satzkorn	5dbcda512a	Fix enos bats test errors (#2468) ... * test(cli): Remove skips in CI for cli tests * fix(enos): Fix enos bats tests The tests still sometimes suffer from timing issues, but I was able to run a successful run (setup, run, destroy) of the tests from my machine at least once. There were 2 issues: - Some tests in groups.bats were hardcoding the default user id - The default grants for a user in a project were missing the permission to connect to a target. We now add this explicitly. Co-authored-by: Timothy Messier <tim.messier@gmail.com>	4 years ago
Todd	06fd086004	Add health endpoint for worker (#2442) ... * Return worker process information in the health endpoint. Experimental: The worker_info and returned worker_process_info fields are experimental and can change or be removed without notice. When a user passes in "worker_info=1" or "worker_info=true" and a worker is running the returned json will be returned with a key named "worker_process_info" which value is a json object with information about the worker process.	4 years ago
Zhihe Li	309574b694	bump UI commitish (#2470)	4 years ago
Irena Rindos	d951e1ebc1	Worker graceful shutdown (#2455) ... * add graceful shutdown to worker	4 years ago
Timothy Messier	a2ef14283b	fix(org): Address bug that prevented deleting an org (#2465) ... The schema changes introduced in 0.10.2 introduced a bug where an org could not be deleted if there was a session for an org scoped user. It would result in an error like: scope.(Service).deleteFromRepo: unable to delete scope: \ iam.(Repository).DeleteScope: failed for o_VkNy46KwfS: \ iam.(Repository).delete: db.DoTx: iam.(Repository).delete: \ db.Delete: insert or update on table "session" violates foreign key constraint "target_fkey": integrity violation: error #1003 A worker around would be to first delete all projects in the org, then finally delete the org. This fix adds a regression test to the sqltests and updates several constraints on the session table to be deferrable. Since the org delete is a single transaction, this allows all of the necessary resources to be deleted before attempting to enforce these constrains. See: https://www.postgresql.org/docs/current/sql-set-constraints.html Blame: 3a28ab614	4 years ago
Damian Debkowski	546c5dc5be	feat: static json credentials (#2423)	4 years ago
Timothy Messier	f28bcd4aa7	chore(cli): Run bats tests against boundary dev in CI ... Several of these tests are being skipped in the enos run. This seems to be due to differences in the setup that is performed. When these tests were run manually, `boundary dev` was used which performs some setup of resources automatically. However since enos uses a non-dev controller, a similar setup is performed via the enos modules. Until the discrepancies between the setup can be investigated, this adds a separate CI job to run the tests against `boundary dev`. These tests are all passing, without any being skipped. This test suite can still be useful even if the enos version is fixed, since this test suite will run much faster, and therefore identify failures sooner.	4 years ago
Timothy Messier	c41e31381d	test(cli): Fix session read and cancellation test	4 years ago
Irena Rindos	821d8317dc	address op state review feedback (#2453) ... * address op state review feedback	4 years ago
Louis Ruch	c73a13aa3e	scheduler: log details when starting scheduler (#2459)	4 years ago
Jeff Mitchell	53b5e532d5	Remove deprecated methods/fields on targets (#2393)	4 years ago
Louis Ruch	506fdfa5c3	cli(ssh): Do not print private key if consumed (#2451)	4 years ago
Damian Debkowski	5dfabe5f90	fix: show warning log when token will expire before it can be renewed (#2446)	4 years ago
Jeff Mitchell	37fb9815ce	Add session endpoint test for #2448 (#2450)	4 years ago
Timothy Messier	2b994f3005	fix(perms): Properly resolve "only self" for permissions (#2448) ... When generating permissions from the grants, if a single grant was limited to the set of "self" actions, the permission would be marked as only self, even if additional grants were given for non-self actions. This would result in the generated permissions being more limiting then they should be based on the grants. This only impacts the sessions list endpoint. It would result in users that have been granted access to list other user's sessions to be unable to see these results in the list results.	4 years ago
Louis Ruch	50490d71ae	chore(targets): Improve help and errors around ssh targets (#2445)	4 years ago
Damian Debkowski	2db6bee3e2	fix: return an error for vault tokens that will expire before the scheduler can run (#2444)	4 years ago
Louis Ruch	5812a42ba3	feat(scheduler): set intervals from config (#2443)	4 years ago
Irena Rindos	fc0ead73e6	feat(workers): worker operational state (#2427) ... * feat(workers): worker operational state	4 years ago
Jeff Mitchell	9002930d65	Adapt shared lock skip logic to dbswap branch (#2437)	4 years ago
Hugo Vieira	bed6e1a0ff	feat(server): Reload database on SIGHUP ... If the database url is updated on Boundary's config and then a SIGHUP triggered, we now connect to the new database, ensure it's OK to use and use that one going forwards instead. This allows a controller to be deployed in a more dynamic infrastructure where, for example, database credentials could change, without having to restart the controller. In this case only a database url config change and a SIGHUP signal to all controllers would be required. This uses an atomic.Pointer to store wrapped DB objects. This allows atomically swapping to the new object. A timeout is introduced so that if the object is swapped after the existing one has been looked up it isn't immediately invalidated. The timeout is a maximum; a ticker once a second that looks at stats to determine how many database connections are still in use and then closes the driver as soon as none are in use. This could be done with mutexes to avoid checking stats in a loop, but that carries its own risk: if a write lock is attempted to be acquired while a query is holding a read lock, the write lock will block, and any subsequent read locks will also block since write locks take priority. As a result, if a query is long-running or timing out, all other queries in the system will become blocked. Our default user request timeout is 90 seconds and some jobs have no timeout at all, so this is not a purely theoretical concern, even if it's unlikely. Refs: #2435 Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	4 years ago
Hugo Vieira	8ab9ffbcac	refact(cmd): Encapsulate some functionality on Command and Server ... This commit extracts 3 separate pieces of functionality into their own function/method: - Extracts the database opening with the intention to have a function that performs all that functionality but returns the created database object rather than setting it to the Server structure. - Extracts database validation logic, to provide a common code path for upcoming functionality. - Expose schema manager on the Command struct as well as providing common functions to acquire shared lock/close.	4 years ago