boundary

Commit Graph

Author	SHA1	Message	Date
Jeff Malnick	1f66685864	feat: set default connection limit to unlimited (-1) instead of 1 (#2234 ) This avoids the confusion behavior of a session terminating as soon as a single connection using that session is closed.	4 years ago
Timothy Messier	fd5d15af27	feat(config): Add database config options for idle connection management (#2176 ) This adds two new config options for the `database` stanza: - `max_idle_connections` - `max_idle_time` These correspond to settings for the underlying `sql.DB` instance. They can be used to have finer control over the controller's database connection pool. For example this can be used to mitigate the high connection overhead when connecting to postgres by setting a high `max_idle_connections` and either setting `max_idle_time` to zero or to a high duration. Alternatively, if using a connection pool like pgpool-II or pgbouncer, `max_idle_connections` can be set to 0. See: https://pkg.go.dev/database/sql#DB.SetMaxIdleConns https://pkg.go.dev/database/sql#DB.SetConnMaxIdleTime https://www.pgpool.net/mediawiki/index.php/Main_Page https://www.pgbouncer.org/	4 years ago
Jeff Mitchell	79440c5d82	Add worker resource to perms table (#2241 )	4 years ago
Robin Beck	0ff4be119e	updates learn links (#2230 )	4 years ago
Jeff Mitchell	86141ffb65	Add some OSS/HCP Boundary distinctions in docs (#2227 )	4 years ago
Robin Beck	c05fa66096	Hashiconf docs changes (#2178 ) Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com> Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> Co-authored-by: irenarindos <irena.rindos@gmail.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> Co-authored-by: Louis Ruch <louisruch@gmail.com> Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>	4 years ago
Jeff Mitchell	7c139d28b2	Have hclog payloads use `json` tags (#2171 ) * Have hclog payloads use `json` tags Previously a global setting for the `structs` lib was causing the `json` tag to be used, but this could have side effects from other packages, or could be affected by other packages' behavior. This behavior was removed earlier but it means this format call no longer uses `json` tags; this behavior reverts it. It also normalizes using mapstructure in a few other places. * Update some tests * Fix incorrect op const * Fix more tests * refactor (events): tell filter to use json tags (fix related tests) Explicitly tell the filter to use the "json" tags so we don't have to re-tag everything with a mapstructure tag via bexpr.WithTagName("json") Update docs Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Haotian	40ba275759	feat(worker): add 'initial_upstreams' field to worker config to prepare to replace 'controllers' field. Update worker config description on website.	4 years ago
Johan Brandhorst-Satzkorn	a2477420da	chore: Clarify event file sink doc (#2162 ) Updated examples to show the common use case of specifying a directory path and file name for a file sink. This should hopefully prevent users from making the mistake of putting a full path for the file_name field and seeing an error like: [ERROR] unable to send event: operation="event.(Eventer).retrySend" warning= \| 1 error occurred: \| * mkdir : no such file or directory \|	4 years ago
Jeff Mitchell	d6362f9e5e	Restrict anonymous user capabilities (#2156 )	4 years ago
Robin Beck	bc86b4e9e9	Docs Changes for v0.8.0 (#2024 ) * added new metrics doc * Minor format fixes * Use table to list metrics * Update website/content/docs/operations/index.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * fixed sentence * added worker proxy http * Update website/content/docs/operations/metrics.mdx Co-authored-by: Todd <github@quaddi.com> * Update based on the changes in draft * remove WIP note * Update website/content/docs/operations/metrics.mdx Co-authored-by: Todd <github@quaddi.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Todd <github@quaddi.com> * Update website/content/docs/operations/index.mdx Co-authored-by: Todd <github@quaddi.com> * Removed invalid metrics * Update header level * added code styling for "ops" listener and port 9203 description * added health endpoint document * resolved cherry-pick confict for `5edac3a741` * Incorporate review feedback * removed bad reference to metrics * added Other section for boundary_build_info * fixed typo * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Changed release notes structure Removed the empty "Releases" folder and now it goes straight to "Release Notes" * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Incorporate review feedback * Update website/content/docs/operations/index.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * added tutorial link * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * 0.8 Release Notes Added release notes page for 0.8 * corrected sensitive info redaction note * cleaned up visibility overview Co-authored-by: taoism4504 <loann@hashicorp.com> Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com> Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> Co-authored-by: Todd <github@quaddi.com> Co-authored-by: Timothy Messier <tim.messier@gmail.com> Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	4 years ago
PPacent	ce7292d9c8	Docs: Adding service discovery concept page (#1886 ) * Adding service discovery concept page	4 years ago
Joey Freeland	15a6ffeb6b	chore: clarification on default TCP ports (#1878 )	4 years ago
Lili Cosic	d2602584ab	docs: Add full example for using recovery KMS workflow (#1888 )	4 years ago
Hugo	244237cd2f	feat(controller): Add health endpoint (#1882 ) * feat(controller): New health service and server This change also implements a new listener purpose, `ops`. `ops` (short for operations) is a new listener purpose that is responsible for serving Boundary's operations endpoints, like health and possibly metrics. At Startup: `ops` listeners get configured as late as possible to catch any errors with the startup process; At Shutdown: If the health endpoint has been set-up, we introduce a configurable delay in the process. This is to enable the health endpoint to report unhealthy for that amount of time. `ops` listeners are also the last listeners to be shutdown.	4 years ago
Johan Brandhorst-Satzkorn	89273a2f3e	Update references to "make dev" (#1920 ) "make dev" has been replaced with "make install" since `b53e4d4c3e`.	4 years ago
irenarindos	32dd594029	docs(connections): Update domain model for session connections	4 years ago
Robin Beck	860a053ba8	Docs: Update connect-to-target page with target-name example (#1887 ) * added boundary connect -target-name example * removes some passive and ableist language * Apply suggestions from code review add rewrite suggestions from @hugoamvieira Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com> * update Using Connect Helpers copy Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>	4 years ago
Irena Rindos	bc6689fb16	docs(permissions): break permissions into sections (#1893 ) * docs(permissions): break permissions into sections * fixup! docs(permissions): break permissions into sections	4 years ago
Swati Saxena	be75a2cd3c	Update roadmap.mdx (#1885 )	4 years ago
xka5h	237f0c5704	updated CLI connection options, including addr (#1884 )	4 years ago
Irena Rindos	718e746480	docs(targets): remove default port option (#1883 )	4 years ago
Timothy Messier	0c3218ec3e	docs(website): Update cross-compiling notes This replaces references to XC_OSARCH with GOOS and GOARCH. See: `1c8e0ed1e1`	4 years ago
Hugo Vieira	5f36057f65	feat(config): Env/file support for Worker description	4 years ago
Irena Rindos	7bf787ec40	feat(config): Add env and file support for database max connections	4 years ago
Hugo Vieira	8462a65637	feat(config): Add env/file support to Worker.Controllers field This feature allows the user to set the `controllers` field to a string that points to either an environment variable or file. We then dynamically pull out the value and parse it into the config.	4 years ago
Irena Rindos	5601f2bc5f	feat(config) Add env and file support to Plugins execution dir	4 years ago
Irena Rindos	1f43ec174f	Merge branch 'main' into irenarindos-env-file-controllerconfig	4 years ago
Irena Rindos	161916f6d3	feat(config): Add env and file support to Controller description	4 years ago
Hugo Vieira	1576af70cc	feat(config): Add env and file support to Worker Tags This feature allows the user to set the `tags` field to a string that points to either an environment variable or file. We then dynamically pull out the value and parse it into the config. This can also be done at the keys level, where you set your keys directly in Boundary's config file, but point the values to env/file.	4 years ago
Hugo Vieira	f1063a62a0	feature(config): add sockaddr template support	4 years ago
Pete Pacent	e360e162b9	Adding release notes for 0.7 (#1739 )	4 years ago
Jeff Mitchell	04a52a5864	Add plugins configuration section to docs (#1727 ) Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	4 years ago
Todd	1c36b1e4d7	Add plugin details to host catalog, host set, and host domain model pages (#1715 ) * Add plugin information to host catalogs, host sets, and hosts.	4 years ago
Jeff Mitchell	7174a91f32	Update data-encryption documentation to clarify what is encrypted (#1722 )	4 years ago
George Christou	3a7f12f0c3	doc: [ssh] Use `%n` for ProxyCommand (#1696 )	4 years ago
DevOps Rob	55ab75f364	updating db init without generated resources example (#1493 )	4 years ago
Jeff Mitchell	1782f6a4e4	Enhance worker connection security (#1641 ) This stores worker connection nonces within the database to ensure uniqueness of connections. Prior the connection required any attacker to be able to decrypt the incoming encrypted authentication message in order to replay (and if the attacker has access to the KMS you have bigger problems), but with this change even if an attacker does have access to the KMS key, they cannot reuse the same message. (If they're able to encrypt against the KMS key, they can still act as a worker with a new message, so this only really helps if they only have decryption capabilities.)	4 years ago
Pete Pacent	324a00c07e	Adding reference architecture docs (#1625 )	4 years ago
Loann Le	5d527c5e99	Boundary documentation: created a boundary intro page (#1601 ) * added an boundary intro page * Update what-is-boundary.mdx deleted an extra space * added an image * Apply suggestions from Robin's code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Pete Pacent <ppacent@hashicorp.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	4 years ago
Jeff Mitchell	c05324282f	Rename the UI passthrough dir flag/env var (#1600 ) This puts it more in line with other upcoming options that use "dir" instead of "directory" (plus it's easier to type), and makes it clear that this directory and the passthrough behavior is related to the UI as opposed to other upcoming items.	5 years ago
Robin Beck	204ff254ca	fixed hcl config examples for sink (#1590 ) * fixed hcl config examples for sink * fixed observations_enabled parameter typo	5 years ago
Robin Beck	aab46370aa	Docs: redirect Desktop install links to Learn (#1556 ) * point install Desktop redirect to Learn * hide /api-concepts/desktop and redirect to Learn * add permanent redirect for /api-clients/desktop to Learn	5 years ago
Pete Pacent	08c6095aac	Adding release notes for 0.6 and 0.5 (#1523 )	5 years ago
Jeff Mitchell	e9a8ede0d6	Move wrapper package back to SDK (#1511 ) TF uses this, so SDK is a decent place for it. It doesn't create dependencies between it and API.	5 years ago
Jeff Mitchell	081de3cf79	Migrate sdk/recovery to api/ and sdk/wrapper to internal (#1507 ) * `recovery` is only used by the API (and the main module, for decryption) * `wrapper` is only used by the CLI right now Moving these brings them closer to the code that uses them, and makes the SDK package a bit more clear in terms of functionality.	5 years ago
Rolf Sommerhalder	b599bb5eb2	Adjust syntax in example (#1476 )	5 years ago
Jeff Mitchell	b0dbd0182e	Add support for additional awskms parameters (#1468 ) This updates to the latest go-kms-wrapping tag to support these parameters and documents them.	5 years ago
Taylor Dolezal	248e1f36b5	Update next steps in connect to target documentation (#1439 )	5 years ago
Jim	b3d8b50307	Sink documentation (#1449 )	5 years ago

1 2 3 4 5 ...

263 Commits (6cbf5983699bc7dba41f968e3df77cc2233fcb21)