75 Commits (6bd168b2a332d4cd8a769900a1cd6c298d9e8f1f)

Author	SHA1	Message	Date
Michael Li	6bd168b2a3	test(e2e): Add test that creates a user with the right permissions to start a session	3 years ago
Michael Li	07b16e877c	refact(e2e): Rename original session cancelling test	3 years ago
Michael Li	5d795e6104	refact(e2e): Add support for authenticating as any user	3 years ago
Michael Li	5b0ff4f058	test(e2e): Port "credential stores deletion check" from bats test to e2e test suite ... The "can not read deleted $NEW_STORE static store" bats test was demonstrating flaky behavior where it would fail due to the credential store read still returning something valid. This check has been moved to an e2e test in order to add some retry logic to the check.	3 years ago
Michael Li	79bc3d4878	refact(e2e): Create credential store function	3 years ago
Michael Li	ab223493a3	fix(e2e): Remove unused code	3 years ago
Michael Li	56ed25a88c	test(e2e): Rename file for clarity	3 years ago
Michael Li	a4e27d877d	refact(e2e): Update RunCommand to have context argument	3 years ago
Michael Li	84aa65ccc5	test(e2e): Add test that cancels a session	3 years ago
Michael Li	cb3f057878	test(e2e): Add test that uses connect authz-token option	3 years ago
Michael Li	ff960e1fb1	refact(e2e): Rename files for consistency	3 years ago
Michael Li	618eca19f5	refact(e2e): Create functions for commonly used operations ... Many tests had duplicate code to create the base level domain objects in a boundary environment. This commit refactors that code to use functions for these commonly used operations.	3 years ago
Michael Li	051d337b21	refact(e2e): Move logging to helper function	3 years ago
Michael Li	1f87da9fd4	fix(e2e): Fix comment typo	3 years ago
Michael Li	01301cd32a	fix(e2e): Add missing requires	3 years ago
Michael Li	d8448d2184	doc(e2e): Fix typo	3 years ago
Michael Li	f9dfd024ed	doc(e2e): Add info for adding tests	3 years ago
Michael Li	719200612d	refact(e2e): Remove use of AwsHostSetCount env ... Instead of passing in the number of hosts created for a host set, we can just use the length of the IP addresses to determine that value.	3 years ago
Michael Li	5365b29007	refact(e2e): Port enos smoke test into e2e test suite ... This adds a test case to the e2e test suite and unifies where testing is located.	3 years ago
Michael Li	1361c3cc6d	refact(e2e): Move environment variables into its own file	3 years ago
Michael Li	86dafced1a	fix(e2e): Add missing require	3 years ago
Michael Li	0afef63dca	refact(e2e): Use envconfig's required property	3 years ago
Michael Li	da0fb9d38a	test(e2e): Add dynamic host catalog test (AWS) ... This adds the initial set of tests that validate setting up a dynamic host catalog on AWS Co-authored-by: Josh Brand <jbrand@hashicorp.com>	3 years ago
Timothy Messier	d896f37493	Support reading multiple configuration files(#2504) ... feat(config): Support multiple files This updates the three subcommands that take a `-config` flag to to support multiple config files via a repeated `-config` flag. It updates the following subcommands: - `server` - `database init` - `database migrate` Note that the multiple file support only works if all config files are HCL, not JSON. Also note that the config files are concatenated together. There is no attempt to merge config files, so having the same stanza in multiple files can yield unexpected results, with only one of the stanzas being used. When used with these limitations understood, this provides a way to take different actions for different kinds of dynamic configuration changes. An example would be when using consul-template to render the configuration files for boundary. With the multi file support consul-template can render one config file for the controller stanza, and provide boundary with a dynamic database credential via vault. Then when the credential is rotated, consul-template can send boundary a SIGHUP to switch to the new credential without a restart. A separate template could be used to render a config for a stanza that does not support SIGHUP, such as the events stanza that gets its values via consul's KV. If these values change, consul-template can restart boundary so the new configuration is used. Co-authored-by: Timothy Messier <tim.messier@gmail.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	3 years ago
Michael Li	8fe0d13caa	test(e2e): Add vault tests ... Adds the first set of vault tests. This test sets up vault as a credential store and creates a set of credentials for a target.	4 years ago
Johan Brandhorst-Satzkorn	da9adb0c02	feat: Build docker dev images for specified platform (#2493) ... Previously, building this target on an ARM machine would produce an image with a amd64 binary inside an arm OS.	4 years ago
Michael Li	21e4b70e27	test(e2e): Add end-to-end tests (connect to first target) ... This adds the initial end-to-end tests. These tests validate the admin workflow of setting up their first target	4 years ago
Timothy Messier	eb61ac6304	refact(session): Add context to session factory ... This adds a context to the session.RepositoryFactory, allowing errors.NewDeprecated to be replaced with errors.New. It also removes the common.SessionRepoFactory, instead packages just directly import from the session package.	4 years ago
Johan Brandhorst-Satzkorn	de2c40fa77	Fork pgtap-docker to support arm64 (#2411) ... * feat(sql): Fork pgtap to support arm64 This forks pgtap-docker and builds the image locally, and updates our references to use our forked image. * fixup! feat(sql): Fork pgtap to support arm64	4 years ago
Johan Brandhorst-Satzkorn	aef9073fa6	Upgrade to Go 1.19 (#2347)	4 years ago
Damian Debkowski	27e9f775be	feat: add initial migration hook	4 years ago
Todd	19b549c44a	Rename package servers to server (#2222)	4 years ago
Todd	e379234259	Remove CanonicalAddress, GetApiTags(), and NewWorkerForStatus. (#2196) ... Minor testing tweaks are also included.	4 years ago
Todd	731a45eba6	Merge the worker_status table with the worker table (#2111)	4 years ago
Todd	a281d10206	Add worker config table and view (#2090) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id constraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller.	4 years ago
Todd	2ecd550e27	Add fields to server_worker to be a boundary resource (#2083) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id contraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller. * Updating server_id references to controller_id. * Adding worker tag db writing test. * Move the server table back to the top. * Update comment for the worker object. * Update comment for the worker table. * Update the newWorkerId call to take a context and fix its error. * Correct comment for the wt_network_address domain.	4 years ago
Todd	472d7d520a	Remove the server_id from session table, change it to worker_id on session_connection (#2070) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id constraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller.	4 years ago
Todd	d8a443e238	Merge branch 'main' into llb-byow ... # Conflicts: # internal/daemon/controller/handlers/targets/target_service.go # internal/daemon/controller/handlers/workers/multihop_service.go # internal/daemon/controller/handlers/workers/worker_proxy_service.go # internal/daemon/controller/handlers/workers/worker_service.go # internal/daemon/worker/status.go # internal/daemon/worker/worker.go	4 years ago
Todd	b58dada40d	Move the server daemons into their own package (#2061) ... * Move the server daemons into their own package With this change the internal/server package now is dedicated to the server domain (workers and controllers) and not to the server daemons. The hope is that this will make it easier to keep the daemons decoupled from the representation of the servers in the database.	4 years ago
irenarindos	9e27605213	refact(servers): Split server table into worker and controller	4 years ago
Johan Brandhorst-Satzkorn	21b0d584ad	feat(dbtest): Add benchmark dump generator ... Generate dumps ahead of time so that they can be used for benchmarks without prohibitive startup costs. Fixes https://hashicorp.atlassian.net/browse/ICU-4039	4 years ago
Johan Brandhorst-Satzkorn	e864652b33	feat(sessions): Add list benchmarks ... The list benchmark tests uses pre-created database dumps to run its benchmarks. This benchmark will be used to guide optimizations around listing of sessions. Fixes https://hashicorp.atlassian.net/browse/ICU-4042	4 years ago
Johan Brandhorst-Satzkorn	5d042c7ec7	feat(dbtest): Mount DB dumps and create templates ... Mount the benchmark dump directory when running the test database and create a new script for creating templates from the dumps. This makes it easy to create pre-populated databases for benchmark tests. Fixes https://hashicorp.atlassian.net/browse/ICU-4040	4 years ago
Johan Brandhorst-Satzkorn	a7a2c82931	feat(dbtest): Add docker-load Makefile target ... The new docker-load target uses docker buildx to build a local image of each of the Dockerfiles, and load them into the local docker socket image store.	4 years ago
Johan Brandhorst-Satzkorn	89196f2ce7	Remove old migration code & Avoid db test image confusion (#2038) ... * refact(dbtest): Remove old migration code This is no longer needed, so we can clean up this script a bit. * refact(dbtest): Change test image env var The existing environment variable clashes with the one used in the top level Makefile. The new name prevents confusing behavior when setting the env var and creating the test database from the root of the repository.	4 years ago
Jeff Mitchell	7eb29261b2	Update to go-kms-wrapping version 2, and plugin-based KMS (#1901)	4 years ago
Timothy Messier	839f9efcfb	chore(dbtest): Build test database docker image for arm64 ... This adds a new makefile target to build and publish the test database docker image for multiple architectures. It will create images for: - linux/amd64 - linux/arm64 The target uses docker buildx to build the images. To build the images: docker buildx create --driver docker-container --use make docker-buildx docker buildx rm See: https://docs.docker.com/buildx/working-with-buildx/	4 years ago
Jeff Mitchell	75a38e2505	Import TCP subtypes in test controller	4 years ago
Timothy Messier	34d9842f85	fix(testing/docker): Correctly reset IFS (#1754)	4 years ago
Jeff Mitchell	5417cc5cb0	Fix setting nil attributes on host sets (#1746) ... This is the analogue of #1743 but for host sets	4 years ago