boundary

Commit Graph

Author	SHA1	Message	Date
Michael Li	6eded679bc	chore: Update to use Node20 version of Actions (#4787 ) * chore: Update to use Node20 version of Actions * CR: Add additional triggers to milestone checker * CR: Remove use of third-party action	2 years ago
Timothy Messier	a2c529b9d1	fix(controller): Use max request duration cluster listener (#4805 ) The cluster listener supports a `max_request_duration` option, and defaults to 90 seconds. However, this configuration was not being use when processing grpc requests from the listener. This meant that requests from worker to controller could hang indefinitely and contributed to the recently fixed issue with database connections being stuck in `idle in transaction`. This commit adds a grpc interceptor that ensures each request has a deadline set to the max request duration for the listener. Refs: `29cd7bc9d6`	2 years ago
Michael Li	7954ad42fd	chore(bats): Fix unzip error (#4806 ) The workflow started breaking when there was a competing file in /usr/local/bin/LICENSE.txt (from a packer install). The added flag forces unzip to overwrite any files.	2 years ago
Timothy Messier	29cd7bc9d6	fix(session): Move encryption/decryption out of database transactions (#4803 ) Several session.Repository methods need to encrypt or decrypt fields when persisting or retrieving a Session. These encrypt/decrypt operations where being performed while within a database transaction. The first step in the encrypt/decrypt operation is to retrieve the kms.Wrapper. While the wrappers get cached in memory, the retrieval still results in a database query to check that the kms collection version has not changed. This query happens with a separate db.Reader, and therefore uses a separate database connection from the transaction being used by the session.Repository. If the controllers are configured with a relatively low `max_open_connections`, and be under sufficient load interactive with sessions, the controller can consume all of the available database connections, and get stuck with open transactions while waiting for a database connection to execute the kms related queries. This can be see by checking pg_stat_activity and seeing transactions stuck in `idle in transaction` with a wait_event of ClientRead. This commit changes all of the Repository methods the perform any encryption or decryption operations, including the retrieval of the kms.Wrapper, outside of a database transaction. An alternative approach would be to unsure that the kms.Wrapper retrieval happens within the same database transaction. However, it seems preferable to avoid doing these relatively expensive operations within a transaction when it is not necessary. As part of this fix, it also eliminates some logic that is no longer needed. During previous would with KMS wrapping, the method of how sessions were encrypted was changed, and some logic to lazily re-encrypt sessions was introduced. However, given that terminated sessions are deleted, and the KMS changes was introduced several versions ago (0.13.0), this lazy re-encrypt logic should no longer be necessary. Refs: `edd323b73a` See: https://www.postgresql.org/docs/current/monitoring-stats.html#MONITORING-PG-STAT-ACTIVITY-VIEW https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-IDLE-IN-TRANSACTION-SESSION-TIMEOUT https://developer.hashicorp.com/boundary/docs/configuration/controller#max_open_connections	2 years ago
Johan Brandhorst-Satzkorn	111b8fbecf	internal/cmd/ferry: add sessions command (#4800 )	2 years ago
Todd	590182cf72	Updated the expected status code for unimplemented api errors. (#4802 ) * Updated the expected status code for unimplemented api errors.	2 years ago
Todd	e675aed978	Add the unimplemented api error. (#4799 )	2 years ago
Johan Brandhorst-Satzkorn	0ed1803557	mod: update transit dependency (#4797 ) This version supports context cancelation	2 years ago
Todd	5a06e4fe66	Auto generate the permissions pages. (#4786 ) * Auto generate the permissions pages. * Add add- set- remove- auto descriptions. Hide scope line when no scope provided * Document the resource info struct	2 years ago
Todd	c3f9fde5d7	Wait to select tokens until we know we need to (#4794 ) AuthToken selection involves checking to seeing if the one we are picking has been canceled or expired on the boundary controller. If we are only searching locally and not performing a refresh, there is no need to check if the tokens have expired or not.	2 years ago
Dan Heath	9d3f3da4df	docs: Add bsr purpose key examples (#4785 ) * docs: Add bsr purpose key examples * Apply batch of suggestions from code review Co-authored-by: Michael Li <michael.li@hashicorp.com> --------- Co-authored-by: Michael Li <michael.li@hashicorp.com>	2 years ago
Dan Heath	1420d182d6	docs: Update session-recordings CLI doc (#4775 ) * docs: Update session-recordings CLI doc * fixes id example --------- Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>	2 years ago
Irena Rindos	6f09819e9f	chore: fix workers tag cmd help strings (#4780 )	2 years ago
Irena Rindos	8b90efcde3	docs: fix broken session recording link (#4777 )	2 years ago
Irena Rindos	325949c23a	chore: removed commented out time.sleep calls (#4770 )	2 years ago
pedrorsantana	9cb2d4fa5a	Update README_docker_io.md (#3405 ) * Update README_docker_io.md Fix image names in Docker run commands README to include "hashicorp/" prefix to make sure that local trash images will not pollute the process. * doc: Add trailing backslashes to make it copyable --------- Co-authored-by: Michael Li <michael.li@hashicorp.com>	2 years ago
Michael Milton	f7e59d5d04	Add hidden ferry pause and resume commands (#4771 ) * Add hidden ferry pause and resume functions * add check for 200 status * include pause/resume status in ferry status, fix output * put error string back to previous state	2 years ago
soly-hashicorp	43c336ff75	Update configure-workers.mdx (#4772 )	2 years ago
Irena Rindos	52f53a149c	bug: test fails on end of month (#4748 )	2 years ago
Michael Li	afd8443cc5	docs: Fix broken link (#4766 )	2 years ago
Kerim Satirli	e54519975b	adds missing space in mlock warning (#4286 )	2 years ago
Stan Ryzhov	b4fcf25e9b	Merge pull request #4763 from hashicorp/stan-update-aliases-bats-tests test(bats): Update aliases bats tests	2 years ago
Stan Ryzhov	76a5530b53	test(e2e): Verify host id and invalid input for aliases (#4691 )	2 years ago
Stan Ryzhov	99f7e470f2	test(bats): Verify alias can be created with host id	2 years ago
Stan Ryzhov	60706a49e5	test(bats): Verify invalid inputs for aliases	2 years ago
Robin Beck	ba5eb2087b	adds note about future auto-role creation deprecation (#4760 )	2 years ago
hashicorp-tsccr[bot]	1c6065d811	Result of tsccr-helper -log-level=info gha update -latest . (#4757 ) Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>	2 years ago
Damian Debkowski	7256957127	chore: update boundary api & sdk versions (#4756 )	2 years ago
Dan Heath	f978993724	docs: Aliases overview, domain model, CLI docs (#4705 ) (#4751 ) * docs: Aliases overview, domain model, CLI docs (#4705) * docs: Aliases overview and domain model * docs: Add new topics to TOC * docs: Updates * docs: Update CLI topics, add usage * docs: Edits to value description * docs: Add how-to for creating new target * docs: Add procedure to update existing alias from CLI * docs: Update targets domain model topic * Apply batch suggestions from code review Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com> Co-authored-by: Todd <github@quaddi.com> * docs: Fix spelling * docs: Remove ferry references * docs: Remove note about aliases not working with generic commands * docs: Updates to naming conventions * switches Tabs order and adds tab groups * fixes shell-session line breaks * Apply batch of suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: Delete redundant sentence * docs: Fix jump links --------- Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com> Co-authored-by: Todd <github@quaddi.com> Co-authored-by: Robin Beck <stellarsquall@protonmail.ch> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * rerun tests --------- Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com> Co-authored-by: Todd <github@quaddi.com> Co-authored-by: Robin Beck <stellarsquall@protonmail.ch> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	2 years ago
Robin Beck	471f9476e2	Docs 0.16.0 assembly minio (#4708 ) * adds configure-worker-storage.mdx * adds session-recording/storage-providers pages * migrates worker and provider reqs to new pages * adds TOC * update storage requirements to be provider agnostic * updates requirements with bucket considerations * creates tabs, adds minio support * adds minio requirements * fixes Amazon S3 branding * style guide fixes for UI tabs * makes UI tab primary * removes KMS and adds service account policy * cleans up service account and region notes * restricts ListBucket policy * adds minio API port example * reformats CLI attributes, fixed typos * adds Resources section * adds Resources section with KMS docs link * docs: Add ENT banners * docs: Fix links * docs: Move BSR storage requirements * docs: Add Requirements sections to old topics * docs: Add next steps sections * docs: Minor style edits * docs: Add NetBSD caveat * docs: Make NetBSD caveat a note --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	2 years ago
Dan Heath	a373f97ee9	docs: Release notes (#4738 ) * docs: Release notes * docs: Add local storage state, remove deprecation * docs: Add correlation-id header, remove EOL section * docs: Revise alias definition * docs: Fix typo	2 years ago
Dan Heath	49afe51445	docs: Revise HTTP header documentation (#4637 ) * docs: Revise HTTP header documentation * docs: Define new header * docs: Revise definition * docs: Update if header is not provided	2 years ago
Damian Debkowski	649804d950	chore: update change log (#4723 )	2 years ago
Cameron Perera	d54c6392d9	docs: update CHANGELOG with UI entries (#4712 ) * docs: update CHANGELOG with UI entries * Update CHANGELOG.md Co-authored-by: Susmitha Girumala <susmitha@hashicorp.com> --------- Co-authored-by: Susmitha Girumala <susmitha@hashicorp.com>	2 years ago
Cameron Perera	e0306293be	chore: bump ui commit to dd92321 (#4745 )	2 years ago
Michael Li	3733af2163	test(e2e): Add support for credential rotation in minio buckets (#4744 ) * test(e2e): Update minio module to add permissions for credential rotation * test(e2e): Add minio user id to test suite	2 years ago
Damian Debkowski	facd7d33a2	chore: dependency upgrade to resolve GHSA-c5pj-mqfh-rvc3 vulnerability (#4742 )	2 years ago
Lisbet Alvarez	5876b29758	bump ui commit (#4740 )	2 years ago
Todd	3cae272c27	Hide ferry specific flags (#4737 )	2 years ago
Michael Li	67e6664de9	test(e2e): Close http requests in rate limit test (#4733 ) * test(e2e): Close http requests * test(e2e): Address timing flakiness	2 years ago
Jeff Mitchell	986328db2c	Fix some changelog issues	2 years ago
Zhihe Li	3b66f0651c	chore: bump ui commit (#4734 )	2 years ago
Irena Rindos	16d23fa55f	bug(scopes): scopes list returns 500 without perms (#4731 )	2 years ago
Todd	7ccc099807	Use the default retry limit across client cache (#4727 )	2 years ago
Cameron Perera	e792dd0ea5	chore: bump ui commit to dccf06c (#4724 )	2 years ago
Michael Li	1416ac5e07	test(e2e): Add module for iam user with credential rotation support (#4718 )	2 years ago
Casey Trahan	fe29aae5c0	Update create-storage-bucket.mdx (#4715 ) This single incorrectly spaced opening bracket is causing an error in AWS 'invalid policy syntax'.	2 years ago
Cameron Perera	7018234724	chore: bump ui commit to 5ae490c (#4713 )	2 years ago
Lisbet Alvarez	a73076d666	bump ui commit to a6bdc4f (#4707 )	2 years ago
Michael Li	400e36ee21	test(e2e): Update postgres version (#4701 ) 15.3 is no longer available	2 years ago

1 2 3 4 5 ...

4169 Commits (6eded679bc1222e04d285e17febbcb22847e2bce) All Branches Search

4169 Commits (6eded679bc1222e04d285e17febbcb22847e2bce)

All Branches