1369 Commits (6cbf5983699bc7dba41f968e3df77cc2233fcb21)

Author	SHA1	Message	Date
Jeff Malnick	1f66685864	feat: set default connection limit to unlimited (-1) instead of 1 (#2234) ... This avoids the confusion behavior of a session terminating as soon as a single connection using that session is closed.	4 years ago
Haotian	83bf38f030	feat(worker): add/set/delete repo worker tags (#2236) ... implements repo changes for add/set/delete worker tag operations	4 years ago
Timothy Messier	fd5d15af27	feat(config): Add database config options for idle connection management (#2176) ... This adds two new config options for the `database` stanza: - `max_idle_connections` - `max_idle_time` These correspond to settings for the underlying `sql.DB` instance. They can be used to have finer control over the controller's database connection pool. For example this can be used to mitigate the high connection overhead when connecting to postgres by setting a high `max_idle_connections` and either setting `max_idle_time` to zero or to a high duration. Alternatively, if using a connection pool like pgpool-II or pgbouncer, `max_idle_connections` can be set to 0. See: https://pkg.go.dev/database/sql#DB.SetMaxIdleConns https://pkg.go.dev/database/sql#DB.SetConnMaxIdleTime https://www.pgpool.net/mediawiki/index.php/Main_Page https://www.pgbouncer.org/	4 years ago
Carlos Alcaide Corvo	d33c4f7f6d	Bump UI version (#2242)	4 years ago
Jeff Mitchell	79440c5d82	Add worker resource to perms table (#2241)	4 years ago
Damian Debkowski	3e9c99c217	refactor(user_password) rename all references of user_password to username_password (#2232)	4 years ago
Damian Debkowski	afd4437492	fix(error) validate credential store id when creating username/password credentials (#2231)	4 years ago
Todd	9af6c09c36	Move generated pb.go file in to the internal/gen directory (#2225)	4 years ago
Jeff Mitchell	396edfca80	Add an extra cleanup task for sessions stuck in canceling state (#2229) ... * Add an extra cleanup task for sessions stuck in canceling state See the comment on the migrations file for details.	4 years ago
Louis Ruch	4cacd0a605	bug(scheduler): Fix controller id length check (#2226) ... * bug(scheduler): Fix controller id length check The job_run table has a foreign key to the server_controller private_id. While this column is called a prviate_id it does not implement the wt_private_id postgres domain type, and therefore does not have a minimum length of 10 characters.	4 years ago
Timothy Messier	21c0509a82	chore(event): Reduce log noise for tests ... This silences error messages when: - There is no eventer in the context.Context - There is no SysEventer - And a new env var is set Previously when the first two conditions where met, the error was logged to a default hclog.Logger with the error being wrapped in a message to note the lack of an eventer. In production this is a very important message to help operators fix a likely misconfiguration. However, in tests it is common to not have an eventer setup, meaning this generates a lot of noise. This uses the CI environment variable which is an environment variable set by most common CI environments. Developers can set this variable locally to reduce the log noise: export CI=true See: https://docs.github.com/en/actions/learn-github-actions/environment-variables#default-environment-variables https://circleci.com/docs/2.0/env-vars/#built-in-environment-variables https://docs.travis-ci.com/user/environment-variables/#default-environment-variables	4 years ago
Timothy Messier	f3c90df300	chore(db): Silence db logs by default for tests ... This removes a lot of log clutter from normal test execution with `go test -v`. There are a number of test that expect no results from the database or other error cases from the database. The previous default log level of dbw.Error would cause these cases to generate logs in the success case, creating noise in the test output. The new default for tests is dbw.Silent. This can be overriden in two ways. A test can be updated to pass in the db.WithTestLogLevel option, which allows for targeting specific tests to include additional output. This may make sense for tests that normally should not cause errors, but would report an error if it fails. Alternatively a new environment variable can be set, DEFAULT_TEST_LOG_LEVEL. This allows for adjusting the log level without changing any test file. The environment variable should be set to the string value of the log level, and is treated as case insensitive, ie: export DEFAULT_TEST_LOG_LEVEL="error"	4 years ago
Todd	19b549c44a	Rename package servers to server (#2222)	4 years ago
Cameron Perera	bebe4f5c37	update ui version to latest commit on main (#2220)	4 years ago
Jim	aaf669a044	fix (API): check attributes missing appropriately. (#2219) ... * fix (API): check attributes missing appropriately.	4 years ago
Dharini Jeeva	f3e234cc16	bump up ui version which includes static cred updates (#2217)	4 years ago
Jeff Mitchell	f5bf3b2c0c	Add events on session activation and connection authz/close (#2215) ... * Add events on session activation and connection authz/close * Only send success event on actual success	4 years ago
Jeff Mitchell	c31b8a4383	Fix harmless but nasty-looking error (#2214) ... If a worker starts up and tries to connect to a controller before the controller has a chance for its rotate roots job to run, it'll spit out a nasty-looking error. It's harmless (things just retry and then work) but scary (`tls: internal error`). Rotating at creation time ensures that it's ready by the time a worker is able to perform any connection against the cluster port.	4 years ago
Johan Brandhorst-Satzkorn	77bc45ae62	chore: Split proto breaking change detection config (#2212) ... We generally care about preserving JSON compatibility for protobuf files, but for some files, where we only use pure gRPC, we only care about preserving wire compatibility. Split our buf breaking invocation into two invocations, one that checks for WIRE_JSON compatibility, and one that checks only for WIRE compatibility. The former check ignores protos in controller/servers, since they do not need to adhere to this stricter definition.	4 years ago
Jeff Mitchell	6ffef1e4b5	Update nodeenrollment dep	4 years ago
Cameron Perera	caf3896205	bump ui commit hash for 0.9.0 (#2213)	4 years ago
irenarindos	b7120bf88e	bug(workers): Do not update description for status update	4 years ago
Todd	eb37fc8d07	Quote tags before printing them out. (#2211)	4 years ago
Louis Ruch	9671daf6e0	Revert "refactor(user_passsword) change all references of user_password into username_password (#2189)" ... This reverts commit ab58b24142.	4 years ago
Damian Debkowski	ab58b24142	refactor(user_passsword) change all references of user_password into username_password (#2189) ... * (refactor) change all sql references of user_password to username_password * refactor(pkg) renamed pkg userpassword to usernamepassword * refactor(proto) updated protocol buffers to use UsernamePassword * refactor(code) updated references from UserPassword to UsernamePassword in golang files * refactor(test) updated unit tests to reference UsernamePassword changes * refactor(ddtest) updated references in dbtests to use UsernamePassword * chore(sql-test) fixed spelling issue * chore(sql) added and updated comments in migartion & tables. fixed indentations * chore(proto) updated comments to reflect username_password changes * refactor(tests) updated unit tests to replace user-password with username-password * refactor(cmd) updated cmd help text to use username * chore(tests) update test name & comments * fix(cmd) fixed cmd usage definition for credentials update * refactor(tests) removed out of scope changes * fix(sql) incremented sql migration id & updated migration comments	4 years ago
Jeff Mitchell	a589c32269	Minor capitalization change	4 years ago
Jim	bd167da7d1	fix (worker): send workerId when authorizing session (#2207) ... * fix (worker): send workerId when authorizing session Send the workerId returned from the last success worker status when authorizing a session. * fixup! fix (worker): send workerId when authorizing session * fixup! fix (worker): send workerId when authorizing session * refactor (worker): deprecate workerId in ActivateSessionRequest It wasn't being used anywho * fixup! fix (worker): send workerId when authorizing session * Update LookupSessionRequest Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	4 years ago
Jeff Mitchell	32d04b9ce7	Allow a worker to use KMS auth but accept PKI for proxy (#2206) ... This essentially worked for non-dev mode before but would create storage directories that weren't actually used or needed, and it didn't work in dev mode because it made assumptions about the presence of a worker auth kms or not. This fixes those behaviors.	4 years ago
Jeff Mitchell	9a4545e59e	Fix eventing and worker name setup (#2204) ... * Don't automatically create worker names, as this is now invalid for PKI workers * Fix a check in dev that clears out name/description in exactly the wrong cases * Change eventing setup to use a hostname-based ID instead of the name (which could change on every start anyways)	4 years ago
Todd	214ca9a668	Check that WorkerAuthKms is not nil before trying to decrypt with it (#2205)	4 years ago
Cameron Perera	60332b1847	bump ui version for 0.9.0 release (#2203)	4 years ago
irenarindos	be0f07cc65	Merge remote-tracking branch 'origin/llb-byow'	4 years ago
Jeff Mitchell	704d68848c	Merge remote-tracking branch 'origin/main' into llb-byow	4 years ago
Louis Ruch	618bcb451e	fix(target): fix type check (#2202)	4 years ago
Jeff Mitchell	bfd9565010	Merge remote-tracking branch 'origin/byow-attrib-consolidation' into llb-byow	4 years ago
Todd	2ed18da214	TestPkiWorker always tries to create valid globally scoped root certificates (#2201)	4 years ago
Jeff Mitchell	b0480eb7b3	Move migrations to 32	4 years ago
Jeff Mitchell	3d42737789	Don't display active connection count if it's not authorized (#2200)	4 years ago
Todd	72d122ef5c	TestUpdate for PKI and KMS workers fixed for worker service. (#2199)	4 years ago
Johan Brandhorst-Satzkorn	d06ac0d370	Propagate plugin execution dir to CreatePlugin (#2183) ... * fix: Propagate plugin options to CreatePlugin Plugin options were previously only applied to the BuildPluginMap call, resulting in the plugin execution_dir variable being ineffective. Also add a test to verify functionality * fix: Support plugin execution_dir for all plugins Previously, only external host plugins would respect the plugin execution dir. Now, all uses of the embedded plugins respect the configuration.	4 years ago
Jeff Mitchell	4efbce3112	Add description updating via worker status (#2197)	4 years ago
Jeff Mitchell	a83a4112ce	Fix hcpb URL suffix	4 years ago
Todd	b3efe0eb3a	Allow TestPkiWorker to be created in an authorized state. (#2198) ... * Allow TestPkiWorker to be created in an authorized state.	4 years ago
Todd	e379234259	Remove CanonicalAddress, GetApiTags(), and NewWorkerForStatus. (#2196) ... Minor testing tweaks are also included.	4 years ago
Jim	d7aaa9f7e2	fix (byow): minor updates to UpsertWorkerStatus(...) on conflict (#2194)	4 years ago
Jeff Mitchell	11b025c016	Start updates on worker service test (#2195)	4 years ago
Todd	90a999d3fe	Some testing fixes (#2193)	4 years ago
Louis Ruch	5ef9496e0a	feat(cli): Support credential brokering with sshpass (#2191)	4 years ago
Louis Ruch	68eb6e2bed	chore(targets): remove deprecated credential libraries on target resources (#1533)	4 years ago
Todd	beecbbb8a2	Upsert creates a new KMS and Updates PKI workers (#2187)	4 years ago