227 Commits (72e6ea8da0cf60021dcb60d40929c2db3efbbeea)

Author	SHA1	Message	Date
Jeff Mitchell	62d4f8453b	Don't explode grants from the DB (#5104) ... This removes the Cartesian product in the DB for GrantsForUser in favor of returning the actual grant scope information and dealing with it in application code. (cherry picked from commit 913cd53682)	1 year ago
Jeff Mitchell	3a4ee032d9	Paginate targets in cache (#5101) ... * Update Go API to support pagination * Implement pagination of targets in cache (cherry picked from commit cd25fad42f)	1 year ago
Damian Debkowski	9576ed40dc	test: improve test to ensure ipv6 compatability (#5113)	1 year ago
Johan Brandhorst-Satzkorn	a830892fec	Some test fixes (#5084) ... * internal/session: update variable name in test This was missed in #5071 * internal/tests/cluster: skip failing tests These tests will need to be fixed or removed. It is not clear why they are failing, but they are always failing. * Makefile: try upgrading golangci-lint * internal/host/plugin: fix flaky test Hosts contain IP addresses in string form, whose order is not defined.	1 year ago
Hugo	903039e885	fix(daemon): Return 404 if alias interceptor ResolveRequestIds fails (#5006)	2 years ago
Irena Rindos	2191aa1d03	refact(session connection): remove session connection state table (#4617) ... * refact(session connection): remove session connection state table	2 years ago
Johan Brandhorst-Satzkorn	c6f3c375f3	api: remove deprecated grant_scope_id field (#4886) ... * api: remove deprecated grant_scope_id field The grant_scope_id field was deprecated in 0.15.0, so we can remove it for 0.17.0. * Fix tests * Fix more tests * Remove an option and some related code that stuck around * Fix bats tests --------- Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	2 years ago
Irena Rindos	325949c23a	chore: removed commented out time.sleep calls (#4770)	2 years ago
Stan Ryzhov	99f7e470f2	test(bats): Verify alias can be created with host id	2 years ago
Stan Ryzhov	60706a49e5	test(bats): Verify invalid inputs for aliases	2 years ago
Todd	608b6bb2b7	Add ListResolvableAliases SDK changes (#4653) ... * Add API changs for list resolvable aliases	2 years ago
Todd	55fe70e643	Change 404 errors for aliases to 401s (#4575) ... * Change 404 errors for alias resolution to 401s --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Todd	cb1e9b570b	Add CLI flags for creating an alias with a target (#4512) ... * Add CLI flags for creating an alias with a target * Add bats tests	2 years ago
Todd	868228847d	Add handler and API support for alias creation with target (#4508) ... * Add handler and API support for alias creation with target	2 years ago
Todd	c8ca773f9f	Add boundary connect alias bats tests (#4441) ... * Add boundary connect alias bats tests Adding tests that validate the authorize-session requests when a host-id is provided when an alias is used, both configured and not configured with a host id already. Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>	2 years ago
Irena Rindos	0429ac678f	fix(bats): use different target name in alias tests (#4430)	2 years ago
Todd	305bb09c35	Treat alias values like other required fields in API and CLI (#4404) ... * Treat Alias values like other required fields in API and CLI * Fix protoc versions since we recently rebased on main which uses updated version	2 years ago
Todd	a6c96d69ae	Add TargetAliasAuthorizeSessionArgumentsHostId api options (#4397) ... * Add host id api option	2 years ago
Irena Rindos	ba21e076bb	cli(aliases): Support aliases for connect and targets in the CLI (#4356) ... * cli(aliases): Support aliases for boundary connect and boundary targets CLI	2 years ago
Todd	78e10864c4	Add alias CLI CRUDL commands (#4353) ... * Add alias CLI CRUDL commands	2 years ago
Todd	3f3b624b54	Add alias resolution to target service (#4277) ... * Add aliases to target resource and alias resolution to target service * Wire up the target alias domain package to the target service handler * Adding alias resolution to target api tests	2 years ago
Todd	92181e272a	Create the alias service and resource (#4276) ... * Create the alias service and resource * Add alias generated API files and tests	2 years ago
Todd	53c95e1775	Extract out the setup of workers and targets to handle ent specific configurations (#4461)	2 years ago
Michael Milton	2e69d59dd2	feat(billing): Add cli subcommand for monthly active user counts	2 years ago
Louis Ruch	7921ce22fd	test(grant): Use ID to validate version check (#4274) ... * test(grant): Use ID to validate version check * Update docs from id to ids * Remove 'id' in 0.16.0	2 years ago
Jeff Mitchell	f5dd457b34	Multiple grant scope IDs (#4251) ... Co-authored-by: Timothy Messier <tim.messier@gmail.com> Co-authored-by: Todd <github@quaddi.com>	2 years ago
Jeff Mitchell	fff5f9506f	Migrate proxy logic to the API package (#4216) ... This allows arbitrary programs to have an easy mechanism to make connections through Boundary using Go. Internal cluster tests and test helpers have been migrated to use this package, as well as the `connect` command. --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Jeff Mitchell	253d79116c	Swap id field in grants to ids since that's now standardized (#4250) ... * Swap id field in grants to ids since that's now standardized * Fix some tests I missed * Update generated resource table	2 years ago
Jeff Mitchell	9332179a01	Remove the deprecated old KMS worker auth mechanism (#3935) ... This has been superceded by the nodeenrollment-based KMS worker auth mechanism. This commit only removes the ability to connect with this mechanism; some upgrade logic will remain intact for a bit and can be removed later.	2 years ago
Johan Brandhorst-Satzkorn	b7e474d277	internal/handlers: add accounts pagination	2 years ago
Michael Milton	8d50a0913f	Auth Method list pagination (#4165) ... * wip * implement list pagination for auth methods * remove unused code * update tests to fix sorting * address PR comments * simplify query, add token tests * change test name * wip sql testing * add boolean column to indicate whether auth methods should be returned to unauthenticated users, remove secrets from api response * is_active_public not null * remove secrets and unwrapping * move not null to immediately after data migration * order public_id descending * fix(db): Fix auth method migrations (#4193) * wip * fix db tests * fix failing api tests * reverse order of create time and update time in test --------- Co-authored-by: Michael Gaffney <mike@gaffney.cc>	2 years ago
Johan Brandhorst-Satzkorn	3b54611d14	api: update api listing ... Change from refresh token to list token	2 years ago
Johan Brandhorst-Satzkorn	4e368f154f	internal/tests: add target pagination test	2 years ago
Jeff Mitchell	fe4c43305c	Move and export ExpectWorkers (#4207) ... This is a useful test function and keeping it in the cluster package means it can't be used by api/cli tests.	2 years ago
Timothy Messier	758e7b8bf1	test(credentials): Disable rate limiting for test ... This test quickly polls a list endpoint, which exceeds the default rate limits before the test can complete in CI.	2 years ago
Timothy Messier	c52caae345	refact(action): Make ActionSet behave as a set instead of a list ... This switches the implementation of an ActionSet from a slice to a map to ensure the elements in an ActionSet are unique. This allows for other packages to perform set operations such as a union or difference without needing to account for duplicates.	2 years ago
Michael Li	4f262e7de5	test(bats): Use correct attribute for the test (#4033)	2 years ago
Jeff Mitchell	cb1386932d	Use sdk wspb library and remove internal (#4025)	2 years ago
Jeff Mitchell	92f7d8cfb2	Minor test fixes (#4004) ... * Minor test fixes The auth rotation test fix allows us to keep checking if we did not yet see the expected bytes in case the call to lookup succeeds but we are late in rotating due to parallelism. The api credentials test fix allows us to check if at _least_ one rotation has happened. That way if two rotations happen before we check again due to parallelism, this is deemed a successful result. * Add timeout to auth rotation test	2 years ago
Timothy Messier	dd23f6fdbf	Update websocket library (#3908) ... The nhooyr/websocket library now has a release with the new default behavior that removes the message size limit. This allows us to switch off of the fork and back to the upstream. In the same release that includes the fix we need for the boundary client, the wspb helper package was removed from websocket. This package contained some functions to read and write protobuf messages. However, it was using the deprecated github.com/golang/protobuf/proto library. To avoid this dependancy in the library they opted to just remove wspb. Thus this provides a replacement implementation that uses google.golang.org/protobuf/proto. Notably the newer proto library seems to lack an equivalent of proto.NewBuffer so writes to the websocket and not able to leverage a sync.Pool of byte.Buffers to reduce allocations. Refs: 88bb253554 See: ac385120c6	2 years ago
Jeff Mitchell	a9e372930d	Revert 0bf60996c5 (#3990) ... Post-merge some issues were discovered with the ways typing is used for proto reflection. This will be reworked without moving the subtypes around.	2 years ago
guangwu	8bb6632512	chore: remove refs to deprecated io/ioutil (#3811) ... Signed-off-by: guoguangwu <guoguangwu@magic-shield.com>	2 years ago
Jeff Mitchell	0bf60996c5	Add generic read/update/delete commands (#3967) ... * Add generic read/update/delete commands This adds three generic commands that use the resource prefix to determine the subcommand to run and pass through args over to that subcommand. Since this occurs very early on and to avoid loading essentially every internal resource package, I moved subtype definitions to globals. * Update main.go Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update changelog and remove another deprecated command --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
dani	c89777de41	Expose Valid Principals for Vault SSH Signed Certs (#3791) ... * allow additional valid principals when creating vault ssh signed cert cred lib * add additional_valid_principals field to credential libraries documentation page	2 years ago
Jeff Mitchell	fb4a5a98dc	Add some target fields and move some things around (#3879) ... In preparation for putting proxy code in the api package this creates some necessary fields in the target output and it pre-moves credential parsing and proxy handshake code to their new places. This will make the diff for the actual proxy code move quite a bit smaller. Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Michael Li	e089aa219d	test(bats): Add `list` tests for other resource types (#3869)	2 years ago
Michael Li	7f596bafa9	test(bats): Fix grant due to deprecation (#3853)	2 years ago
Michael Li	dc912e2a86	test: Update tests to account for deprecated features in 0.14.0 (#3776) ... * chore: Fix comment typo * test(e2e): Update to use new credential library type * test(e2e): Update to use new field name * test(bats): Remove tests that use deprecated subcommand * chore: Update to 0.14.0 * test(credentiallibraries): Update to use new credential library type * doc: Add deprecation notices for 0.14.0 * fixup! doc: Add deprecation notices for 0.14.0	2 years ago
dani	a7c1876d7b	remove deprecated option application-credential-source (#3728) ... Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>	2 years ago
Irena Rindos	9733a250fa	refact(event): move observability/event to event (#3704)	2 years ago