boundary

Commit Graph

Author	SHA1	Message	Date
Jim	6ceda0e595	feature (errors): add support fmt specifier with operands to WithMsg(...) (#2126 )	4 years ago
Timothy Messier	2a5aaea8b2	chore(changelog): Add note about audit logs (#2066 )	4 years ago
modrake	463fdd2172	add codeowners to protect release dirs (#2108 )	4 years ago
Johan Brandhorst-Satzkorn	b20939ecb4	fix(cmd): Fix build error (#2107 ) This seems to have been missed when #2094 was reviewed and merged. Blame: `ec608b79da`	4 years ago
Timothy Messier	1ce4ea9af5	chore(docker): Add dockerignore file to reduce context size (#2022 ) Since the Dockerfile is now at the repository root, when running building a docker image, the entire repository was being added to the context sent to the docker daemon. However, only the compiled binary and a few configs in `.release/docker` are needed to build the docker images. This ignore file will only send necessary fields into the context. This helps speed up the docker image building. For example, when building the dev image, without the ignore file: Sending build context to Docker daemon 2.043GB And with this ignore file: Sending build context to Docker daemon 130.7MB See: https://docs.docker.com/engine/reference/builder/#dockerignore-file	4 years ago
Johan Brandhorst-Satzkorn	ec608b79da	fix(cmd): Respect DB max open connections (#2094 ) Both the init and migrate commands were ignoring the configured max_open_connections database setting. This fix ensures that both commands respect the limits.	4 years ago
Timothy Messier	c2d632f1a2	test(targets): Prevent panic due to non-deterministic order (#2086 ) This test was using the third element in the result from a list request to craft the input for the next assertion. However, one of the test targets that is created does not have a default port set. Since the target list call is not ordered, sometimes this element could be the third element and a panic would result when default port interface was converted to a float64. This fixes the panic like: --- FAIL: TestList (1.31s) panic: interface conversion: interface {} is nil, not float64 [recovered] panic: interface conversion: interface {} is nil, not float64 goroutine 1694 [running]: testing.tRunner.func1.2({0x14b2320, 0xc002f486f0}) /prefix/usr/lib/go/src/testing/testing.go:1389 +0x24e testing.tRunner.func1() /prefix/usr/lib/go/src/testing/testing.go:1392 +0x39f panic({0x14b2320, 0xc002f486f0}) /prefix/usr/lib/go/src/runtime/panic.go:838 +0x207 github.com/hashicorp/boundary/internal/tests/api/targets_test.TestList(0xc000f81380) /go/src/github.com/hashicorp/boundary/internal/tests/api/targets/target_test.go:193 +0x174b testing.tRunner(0xc000f81380, 0x2b933a8) /prefix/usr/lib/go/src/testing/testing.go:1439 +0x102 created by testing.(*T).Run /prefix/usr/lib/go/src/testing/testing.go:1486 +0x35f FAIL github.com/hashicorp/boundary/internal/tests/api/targets 5.742s FAIL Refs: #2003	4 years ago
Carlos Alcaide Corvo	d7adc2cb5e	Update UI version to consume the new renamed UI artifacts (#2080 )	4 years ago
Louis Ruch	6f4cee88bf	fix(vault_store): Correctly return expected errors (#2081 ) * fix(vault_store): Correctly return errors	4 years ago
Carlos Alcaide Corvo	ce0507ee99	Update UI artifacts consumption (#2074 ) Update UI artifacts consumption to allow UI editions	4 years ago
irenarindos	ff9470d7df	Update changelog for 0.8.1	4 years ago
Jim	6635778765	chore (kms): upgrade extras/kms dep which no longer directly deps on sqlite (#2078 )	4 years ago
Jeff Mitchell	e84a2e639f	Revert downgrade of go-kms-wrapping	4 years ago
Jim	785241237e	refactor (kms): adopt the go-kms-wrapping/extras/kms package (#2027 ) * feature (db): add Db.UnderlyingDB() This is needed to allow for integration with bits that need a dbw.DB feature (kms): add new go-kms-wrapping/extras/kms dependency * refactor (kms): schema changes required to adopt extras/kms pkg * refactor (kms/iam): rename to DeprecateCreateKeysTx(...) * refactor (kms): remove deprecated test * refactor (kms): refactor Kms type This refactor includes renaming the existing type to DeprecatedKms and then refactoring the Kms type to become a wrapper of go-kms-wrapping/extras/kms * refactor (kms): delete all the unneeded bits All this stuff is not needed now that we're using go-kms-wrapping/extras/kms * refactor (db): fixup tests after kms refactor * refactor (kms/tests): use testing.TB for test helpers Our test helper packages were not possible to use with benchmarks. This refactor switches to testing.TB to allow both tests and benchmarks to use the helpers. * tests (session benchmarks): refactor to use new Kms type * refactor (schema): rm test which relies on deprecated Kms code * refactor (kms): post rebase on main changes required * chore (kms refactor): re-add unit test from main * refactor (kms): uses migrations that don't include KMS schema changes	4 years ago
Johan Brandhorst-Satzkorn	8cef1017e9	fix(session): Fix typo in connection documentation (#2075 )	4 years ago
Irena Rindos	a11b0e81a8	Merge pull request #2065 from hashicorp/irindos-session-nullfkey bug(session): null fkey trigger also checks for session terminated state	4 years ago
irenarindos	54c30d2cad	bug(session): null fkey trigger also checks for session terminated state	4 years ago
Cameron Perera	20f5185a8c	chore: Change how update-ui-version gets the latest commit sha (#2069 ) * chore: Change how update-ui-version gets the latest commit sha on main * remove changelog edits * chore: refactor uiupdate.sh to use UI_COMMITISH instead of main	4 years ago
Jeff Mitchell	99a16dafc2	Leave cluster listener up when bad data is sent (#2073 ) Leave cluster listener up when bad data is sent Removing the ALPN muxer exposed the underlying listener directly to the gRPC server, which means that a quirk of the ALPN muxer (not surfacing errors on accept) turned into the gRPC server receiving errors on accept, and it turns out if the error does not satisfy a special temporary interface the listener will be closed. The obviously better thing to do would be to let the listener close itself if there was truly a fatal error rather than relying on undocumented interfaces, but here we are.	4 years ago
Todd	b58dada40d	Move the server daemons into their own package (#2061 ) * Move the server daemons into their own package With this change the internal/server package now is dedicated to the server domain (workers and controllers) and not to the server daemons. The hope is that this will make it easier to keep the daemons decoupled from the representation of the servers in the database.	4 years ago
Johan Brandhorst-Satzkorn	8ed560fc3e	Add memory profile build target (#1960 ) * fix(cmd): Add profiling build imports It seems like this file has been bitrotted since last used, and it was missing some imports. This was discovered by running goimports on the code. * Add build-memprof Makefile target	4 years ago
Todd	687dd1bda6	Move the session cleanup job logic into the session package. (#2060 ) * Move the session cleanup job logic into the session package. This is part of a broader effort to more narrowly define the purpose of the internal/server directory to be for interacting with servers themselves. Future changes will continue to remove things from this directory until the purpose of the directory is clearly working primarily with the boundary servers resource.	4 years ago
Johan Brandhorst-Satzkorn	780d913596	chore: Add .git-blame-ignore-revs (#2059 ) This lets us ignore large changes in blame. Use it to ignore the Protobuf file formatter commit. See https://docs.github.com/en/repositories/working-with-files/using-files/viewing-a-file#ignore-commits-in-the-blame-view for more information.	4 years ago
Jeff Mitchell	957fe19846	Bump to Go 1.18 (#2036 )	4 years ago
Johan Brandhorst-Satzkorn	f69fbf2255	feat(proto): Format protobuf files with buf (#2033 ) Formats all protobuf files with buf format. This ensures a consistent style across all our protobuf files, similar to gofumpt.	4 years ago
claire labry	0fb9b35498	Add config key to the promote-staging event (#2054 )	4 years ago
Johan Brandhorst-Satzkorn	95c5063500	chore: Prepare for next release	4 years ago
Robin Beck	bc86b4e9e9	Docs Changes for v0.8.0 (#2024 ) * added new metrics doc * Minor format fixes * Use table to list metrics * Update website/content/docs/operations/index.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * fixed sentence * added worker proxy http * Update website/content/docs/operations/metrics.mdx Co-authored-by: Todd <github@quaddi.com> * Update based on the changes in draft * remove WIP note * Update website/content/docs/operations/metrics.mdx Co-authored-by: Todd <github@quaddi.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Todd <github@quaddi.com> * Update website/content/docs/operations/index.mdx Co-authored-by: Todd <github@quaddi.com> * Removed invalid metrics * Update header level * added code styling for "ops" listener and port 9203 description * added health endpoint document * resolved cherry-pick confict for `5edac3a741` * Incorporate review feedback * removed bad reference to metrics * added Other section for boundary_build_info * fixed typo * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Changed release notes structure Removed the empty "Releases" folder and now it goes straight to "Release Notes" * Update website/content/docs/operations/health.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * Incorporate review feedback * Update website/content/docs/operations/index.mdx Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> * added tutorial link * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update website/content/docs/operations/metrics.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * 0.8 Release Notes Added release notes page for 0.8 * corrected sensitive info redaction note * cleaned up visibility overview Co-authored-by: taoism4504 <loann@hashicorp.com> Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com> Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com> Co-authored-by: Todd <github@quaddi.com> Co-authored-by: Timothy Messier <tim.messier@gmail.com> Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	4 years ago
Johan Brandhorst-Satzkorn	f39553abb3	chore: Release prep for v0.8.0	4 years ago
Zed	93ed076fdb	Bump version and update changelog for 0.8.0 release (#2053 )	4 years ago
Haotian	636901145e	chore(metrics): update changelog for metrics (#2051 )	4 years ago
Zed	9292fffa86	Bump version in preparation for 0.8.0 release (#2050 )	4 years ago
Irena Rindos	ca2599ead4	Merge pull request #2046 from hashicorp/irindos-session-transition-trigger fix(session): Update session state transition trigger	4 years ago
irenarindos	c6764e85d9	fix(session): Update session state transition trigger	4 years ago
Timothy Messier	b74fb95a78	Merge pull request #2049 from hashicorp/llb-listing-speedups Listing Session and Targets Performance Improvements Improve response time for `GET` requests to: - `/v1/targets` - `/v1/sessions` These endpoints now perform authorization checks prior to retrieving the full resources from the database. This also includes a bug fix for retrieving sessions that could result in incomplete results when there is a large number (10k+) of sessions.	4 years ago
Timothy Messier	075ac87a58	chore(changelog): Add entries for session and target list improvements	4 years ago
Timothy Messier	f00af362dc	fix(session): Include where clause with order and limit When applying the limit and order by, the where clause also needs to be applied to yield the correct results. This can be seen with an example. Assuming a data set where there are 100 sessions, with 10 sessions belonging to a user with id `u_user1` and 90 sessions belonging to `u_user2`. If the constructed query is like: select * from (select public_id from session limit 10) s, session_list ss where s.public_id = ss.public_id and s.user_id = 'u_user1' order by create_time asc; The initial sub-query with the limit could return sessions only belonging to `u_user2`, then it would apply the where clause and exclude all of the rows. Instead if the query is: with session_ids as ( select public_id from sessions as s where s.user_id = 'u_user1' order by create_time asc limit 10 ) select * from session_list where session_list.public_id in (select * from session_ids) order by create_time asc; The CTE applies the where clause ensuring that only sessions for `u_user1` are used for the final select from the view. Note that the CTE is use primarily for readability. This also adds an index on `session (create_time)` to aide the query planner in performing the order by.	4 years ago
Jeff Mitchell	4cf2a87e8d	Update targets to new listing method (#2045 ) This uses the prefetch method to fetch resource IDs and validate them for authz by the user before then fetching the full list of targets.	4 years ago
Johan Brandhorst-Satzkorn	21b0d584ad	feat(dbtest): Add benchmark dump generator Generate dumps ahead of time so that they can be used for benchmarks without prohibitive startup costs. Fixes https://hashicorp.atlassian.net/browse/ICU-4039	4 years ago
Johan Brandhorst-Satzkorn	e864652b33	feat(sessions): Add list benchmarks The list benchmark tests uses pre-created database dumps to run its benchmarks. This benchmark will be used to guide optimizations around listing of sessions. Fixes https://hashicorp.atlassian.net/browse/ICU-4042	4 years ago
Johan Brandhorst-Satzkorn	5d042c7ec7	feat(dbtest): Mount DB dumps and create templates Mount the benchmark dump directory when running the test database and create a new script for creating templates from the dumps. This makes it easy to create pre-populated databases for benchmark tests. Fixes https://hashicorp.atlassian.net/browse/ICU-4040	4 years ago
Johan Brandhorst-Satzkorn	9e424db0a3	test(session): Ignore unique error on session create Sometimes when creating a lot of sessions concurrently we can run into a unique constraint error in the warehouse triggers in the database. Simply retrying the call will allow the session creation to succeed.	4 years ago
Johan Brandhorst-Satzkorn	7f9b294a7e	refact(all): Use testing.TB for test helpers Our test helper packages were not possible to use with benchmarks. This refactor switches to testing.TB to allow both tests and benchmarks to use the helpers.	4 years ago
Johan Brandhorst-Satzkorn	a7a2c82931	feat(dbtest): Add docker-load Makefile target The new docker-load target uses docker buildx to build a local image of each of the Dockerfiles, and load them into the local docker socket image store.	4 years ago
Jeff Mitchell	b41e983503	Reorder authz check for sessions (#2042 ) * Reorder session authz checks This implements a mechanism for service handlers to pass a repo satisfying an interface into the scope IDs listing function. The purpose of this interface is to allow the same function to perform authorization checking against resources rather than requiring service handlers to fetch all resources in the determined set of scopes and then perform this checking. While this could be done in each service handler, this approach centralizes the logic, which has the nice benefit of removing some boilerplate from service handler list functions that have adapted to it. Tests haven't changed, which is expected -- the function should return exactly what was being returned before, simply faster.	4 years ago
Jeff Mitchell	0f961eb5f6	Bump Go to latest 1.17 (#2041 )	4 years ago
Todd	a1cf3234ed	url.PathEscape resource ids in the sdk before sending building a request. (#2035 )	4 years ago
Johan Brandhorst-Satzkorn	89196f2ce7	Remove old migration code & Avoid db test image confusion (#2038 ) * refact(dbtest): Remove old migration code This is no longer needed, so we can clean up this script a bit. * refact(dbtest): Change test image env var The existing environment variable clashes with the one used in the top level Makefile. The new name prevents confusing behavior when setting the env var and creating the test database from the root of the repository.	4 years ago
Todd	5603652d33	Make the {id} regexp less strict for identifying the "path" label value. (#2034 ) Previously we were matching what boundary considers an id, but that is determined after requests are routed by grpc-gateway. This changes the regexp to match any path segment to try to behave the same way that grpc-gateway would when assigning values to the {id} variable declared in the protobuf.	4 years ago
Carlos Alcaide Corvo	960ed6a80f	Update from v2 to v3 all gh actions (#2030 )	4 years ago

1 2 3 4 5 ...

1971 Commits (6ceda0e595eb10869091fc0c115954d16cfdb158) All Branches Search

1971 Commits (6ceda0e595eb10869091fc0c115954d16cfdb158)

All Branches