boundary

Commit Graph

Author	SHA1	Message	Date
Irena Rindos	b4a8032649	docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour (#3140 ) * docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Jeff Mitchell	163ce184b8	KMS-PKI Workers (#3101 ) This adds a new mechanism for worker authentication that uses the third-party arbitration of the original KMS flow by leveraging recently-added capabilities in nodeenrollment to support a registration wrapper. This allows for workers to be registered to the system with just a name and a matching wrapper, while at the same time allowing these workers to be used for private Vault access and multi-hop as they contain per-worker encryption keys and support rotation. Nodes using this mode will generate and rotate credentials in-memory (using another recently added nodeenrollment capability) so will have a new set of keys on every startup. This has the side effect of ensuring that there is never a conflict or re-use of these credentials. Note that the normal test worker flow was using the now-deprecated KMS method; there is still a test that uses this (explicitly) but all other tests using test workers that did not specify a specific PKI flow now actually use this mechanism. This means there is fairly decent test coverage in a general sense, plus the specific tests updated/added for this feature. This also adds a new KMS type that can be used to have distinct KMSes for upstream authentication vs. accepting from downstream.	3 years ago
Conor McCullough	8b0f149882	Replace broken link (#3119 ) Link to the old URL for the dynamic host catalog page removed, added the current valid path.	3 years ago
Dan Heath	d1e30af9ce	docs: Add links to new tutorials (#3106 ) * docs: Add links to new tutorials * docs: Make heading plural * docs: Small rewrite to force a commit	3 years ago
Dan Heath	e6e666443d	docs: Update FAQs with IAM role answer (#3093 ) * docs: Update FAQs with IAM role answer * docs: Cut first sentence after review * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	3 years ago
Dan Heath	fd1140236e	docs: Update what is Boundary (#3033 )	3 years ago
Jim	86192f75eb	feature (auth/ldap): add LDAP auth method along with associated accounts and managed groups (#2912 ) * feature (auth): required schema changes for auth ldap method (#2669) chore (auth/ldap): move schema changes to next avail migration number * feature (auth/ldap): define AuthMethod and all its value objects (#2703) * feature (auth/ldap): storage protos * feature (auth/ldap): define AuthMethod and all its value objects * feature (auth/ldap): add repo and reading an auth method (#2718) * feature (auth/ldap): add Repository.CreateAuthMethod(...) and Repository.DeleteAuthMethod(...) (#2724) * feature (auth/ldap): add Repository.UpdateAuthMethod(...) (#2739) * feature (auth/ldap): add Account * feature (auth/ldap): add AuthMethod.EnableGroups * fix (auth/ldap): refactor AuthMethod.oplog to enforce proper constraints * feature (auth/ldap): add Account repo functions * refactor (auth/ldap): remove entry attributes from account Realized the entry attributes could have absolutely anything in them (including binary data) and since we absolutely don't have to have them there's just no reason to take on the risk. * feature (auth/ldap): add AuthMethod.UseTokenGroups * feature (auth/ldap): add Authenticate(...) * refactor (auth/ldap): ensure options take a context as the 1st parameter * feature (auth/ldap): add Account attribute maps * chore (auth/ldap): make fmt deltas * feature (auth/ldap): add managed groups (#2760) * tests (auth/ldap): add missing unit test to Repository.DeleteAccount(...) Add bits to test the delete operation when you're not able to generate oplog metadata * feature (auth/ldap): add managed groups fixup! feature (auth/ldap): add managed groups (#2760) * feature (auth/ldap): service proto definition (#2761) * feature (handlers/authmethods): add handlers for ldap auth method operations (#2794) * feature (auth/ldap): add Account attribute maps * chore (auth/ldap): update cap/ldap to latest version * feature (auth/ldap): add ldap api generation definitions * feature (authmethods): add ldap repo NewService(...) * feature (authmethods/ldap): add proper mask_mapping to protobufs * feature (authmethods): add support to get an ldap auth method * refactor (auth/ldap): export TestGenerateCA(...) * feature (authmethods): add support to create an ldap auth method * feature (authmethods): add support to delete an ldap auth method * feature (authmethods): add support to list ldap auth methods * refactor (auth/ldap): make urls optional for NewAuthMethod(...) * refactor (auth/ldap): export ldap.TestInvalidPem * chore: make fmt changes * fix (auth/ldap): properly handle group search config Add constraints and tests to ensure when an ldap AuthMethod.EnableGroups is true, and UseTokenGroups is false; that there's a GroupDn configured for finding a user's associated groups * feature (authmethods): add support to update an ldap auth methods * chore (db/ldap): tmp mv migrations so there's no conflict with ongoing work * feature (verifier): add ldap auth method to verifier bits * fix (controller): prevent panic when controller stops when there's no listener * feature (authmethods): add support to authenticate via ldap auth methods * chore (migrations): fix whitespace in stmt * chore: fmt fixup * tests (auth/ldap): invalid err msg * feature (cli/authmethods): add support for ldap auth-methods CRUD and authenticate (#2810) * feature (authmethods): add CLI support for ldap auth methods CRUD * tests (api/auth): ldap auth method classification tests * feature (authmethods): add CLI support for ldap auth authenticate * feature (auth/ldap): set request timeouts for ldap server connections * feature (handlers/authmethods): handle u_anon listing properly. * feature (account/handers): ldap account and managed group CRUDL APIs (#2852) * feature (auth/ldap) add repository Listing of ManagedGroupMemberAccount * feature (controller/handlers): add ldapRepoFn to accounts service * feature (auth/ldap) register ldap managed group subtype * feature (account/handlers): ldap account CRUDL APIs * feature (controller/handlers): add ldapRepo to managed groups service * feature (account/handlers): ldap managed group CRUDL APIs * docs (domain): add LDAP accounts, auth-methods and managed groups (#2857) * feature (ldap/cli) add ldap accounts and managed groups CRUDL commands (#2856) * fix (handlers/authmethods): fix ldap authorized actions (#2892) * feature (cli/ldap/authenticate): use primary auth method if none is provided (#2890) * fix (auth/ldap): support setting the state attribute * feature (cli/ldap/authenticate): use primary auth method if none is provided * feature (wh/ldap) add tests for new ldap auth method and accounts (#2919) * refactor (migrations/ldap): mv to correct directory * chore: add copyright headers * fix (api/authmethods/ldap): renumber new LdapAuthMethodAttributes field * fix (auth/ldap): allow the auth method state to be updated (#2951) * chore: update sdk and api versions for llb - this is tmp until merging * tests (managed groups): add required errContains for new test	3 years ago
XingLu Wang	ad5c6d836e	Update service-discovery.mdx (#2995 )	3 years ago
Dan Heath	d7049e4e79	docs: Update main branch with 0.12.0 revisions (#2975 ) * docs: Add HCP only to heading * docs: Add worker requirements * docs: Fix heading format and hierarchy * docs: Fix headings format * docs: Update feature name using "sessions" * docs: Fix heading hierarchy * docs: Fix headings format * docs: Fix spacing in title	3 years ago
Dan Heath	260b0ec51e	docs: Update 0.12.0 release notes with HCP links (#2955 )	3 years ago
Dan Heath	fc2bf00838	docs: Update Getting Started guide, direct address (#2855 ) * docs: Update Getting Started guide, direct address * docs: Delete unused image * docs: Resize image * docs: Resize image	3 years ago
Jeff Mitchell	d15af1d5f3	Remove incorrect assertion that public_addr can be a go-sockaddr template	3 years ago
Todd	f7030513c1	Update documentation to encourage using "hcp_boundary_cluster_id" (#2940 )	3 years ago
Robin Beck	d7b2239bb8	adds cve link (#2934 )	3 years ago
Dan Heath	3dce39decf	docs: Create 0.12.0 release notes (#2926 ) * docs: Create 0.12.0 release notes * docs: add job run table enhancement * Update website/content/docs/release-notes/v0_12_0.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Apply batch of suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/release-notes/v0_12_0.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: adding HCP content * Update website/content/docs/release-notes/v0_12_0.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: fix typo --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	3 years ago
Jeff Malnick	eea5e80fa2	Update documentation with new authenticate usage on the CLI (#2865 ) * docs: update deploy-and-login getting started guide with new authenticate usage * docs: update api-clients/cli.mdx to remove login-name flag when using authenticate * docs: update common-workflows/manage-users-groups.mdx to remove login-name flag when using authenticate * docs: update common-workflows/workflow-ssh-proxycommand.mdx with new short form usage of authenticate command when using the primary auth method in the global scope * docs: update oss/installing/no-gen-resources.mdx to remove login-name usage in authenticate command * docs: update oss/installing/run-and-login.mdx with short form usage of boundary authenticate * docs: fix tabs * docs: fix numbering * Apply batch of suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: fix code blocks * fixes code blocks --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>	3 years ago
Dan Heath	0a28dab9d0	docs: Add JSON credentials blob example (#2915 )	3 years ago
Dan Heath	51f2876265	docs: Update credentials docs for 0.12.0 (#2871 ) * docs: Update credentials docs for 0.12.0 * Update website/content/docs/concepts/domain-model/credential-libraries.mdx Co-authored-by: Timothy Messier <tim.messier@gmail.com> * docs: updates from review * docs: fix capitalizationi --------- Co-authored-by: Timothy Messier <tim.messier@gmail.com>	3 years ago
Dan Heath	a31eb7a261	docs: Add frontmatter to ref architecture topic (#2837 ) * docs: Add frontmatter to ref architecture topic * docs: Fix typo	3 years ago
Dan Heath	1284f8f530	docs: Remove links from release note headings - 0.11 (#2829 ) * docs: Remove links from headings - 0.11 * docs: Remove v.10 link * docs: Remove v0.9 link * docs: Remove v0.8 link * docs: Remove v0.7 link * docs: Remove v0.6 link * docs: Remove v0.5 link * docs: Remove v0.4 link * docs: Remove v0.3 link * docs: Remove v0.2 link * docs: Remove v0.1 link	3 years ago
Dan Heath	d41ef25a27	docs: Update multi-hop docs (#2806 ) * docs: Update multi-hop docs * Apply batch of suggestions from code review Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> * docs: Fix spelling Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>	3 years ago
Ashlee M Boyer	e6be6431b2	docs: Migrate link formats (#2777 ) * Adding docs-content-check-legacy-links-format workflow * Adding test-link-rewrites workflow * Migrating links to new format	3 years ago
Ashlee M Boyer	a437bdae0a	[docs] Adjusting more links for rewrite project (#2791 ) * Removing in query param from tutorial link * Updating link to renamed tutorial * Fixing broken link syntax	3 years ago
Irena Rindos	d15bd5507e	Multihop workers doc (#2772 ) Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>	3 years ago
Ashlee M Boyer	f3e23f485f	Removing empty link (#2785 )	3 years ago
Ashlee M Boyer	053edb040c	Fixing link syntax that was on multiple lines (#2778 )	3 years ago
Irena Rindos	12415990ac	Add default port and address to target doc (#2775 ) * add default port and address to target doc Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Irena Rindos	5ac590f305	Update documentation to add ingress and egress filters (#2771 ) * Update documentation to add ingress and egress filters	3 years ago
Hugo Vieira	1f9063e042	docs(target): Introduce direct address targets and explain tradeoffs	3 years ago
Dan Heath	a026e6e70e	docs: Fix typo in Use Cases topic (#2746 )	3 years ago
Dan Heath	49909a331c	docs: Delete roadmap topic (#2707 ) * docs: Delete roadmap topic * Remove topic from navigation * Add redirect * Fix redirect	3 years ago
Johan Brandhorst-Satzkorn	240278cbf1	fix(docs): Use "root" to reference the root key (#2700 ) The "root" identifier is how we identify the root key in configuration, so it is the phrase we should use in this documentation.	3 years ago
Dan Heath	70a1302cd9	Update Vault credential library templating section (#2679 ) * Update Vault credential library templating section * Add request body to intro * Update website/content/docs/concepts/domain-model/credential-libraries.mdx Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> * Minor rewrite Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	3 years ago
Jeff Malnick	07a823c520	docs: update GCP KMS docs with environment variable usage (#2690 )	3 years ago
Johan Brandhorst-Satzkorn	6d25b35b4e	Add KMS rotation/destruction feature to the changelog and docs (#2600 ) * Add initial changelog entry * feat(docs): Add initial stab at docs for KMS rotation/destruction * fixup! Add initial changelog entry * Review comments	3 years ago
Danielle	5f8d292ea1	Inject Custom Response Headers By Status (#2587 ) * add custom ResponseWriter struct to inject custom response headers based on status code * docs * upgrade listenerutil * fix config tests * replace all instances of "data:" with "data:" to reflect changes to listenerutil swapping strings.HasPrefix in favor of mux.Handler for ui request matching * set ui path as const * add custom response headers to changelog	3 years ago
Dan Heath	c506107127	Document vault credential library templating (#2635 ) * Document credential library injection * Add caveat about versions < 0.11.1, remove link	3 years ago
Johan Brandhorst-Satzkorn	df02501dcc	Create new "previous-root" key purpose for root key migrations (#2639 ) (#2648 ) * Update go-kms-wrapping dependency * Apply changes suggested by Jeff * Fix listener test * Add note about config fix to CHANGELOG * Review comments Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Dan Heath	58f86936e7	[SPE-6] Boundary vs. other software (#2626 ) * [SPE-6] Boundary vs. other software * Minor edit for word choice * Update navigation * Change redundant word in nav * Fix broken links * Add anchor link * Copy edits * Nest navigation for What is Boundary? section * Apply batch suggestions from code review Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com> * Update intro sentence with new wording * Split sections out into topics * changes title of Introduction -> Overview to What is Boundary? * adds redirects for use-cases and what-is-boundary Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com> Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>	3 years ago
Dan Heath	72410cfa97	Update Boundary network requirements (#2609 )	3 years ago
Dan Heath	4509981e5b	Fix pull-down placement (#2610 )	3 years ago
Robin Beck	c20445754e	Docs deploy and login updates (#2574 ) * replaces all references to Origin URL with Cluster URL * fixes content headers * removes reference to Beta * removes content duplicated by dev-portal page subtitle * updates style for code snippet copy-paste values * Update website/content/docs/getting-started/deploy-and-login.mdx Use h1 header Co-authored-by: Ashlee M Boyer <43934258+ashleemboyer@users.noreply.github.com> * fixes headers Co-authored-by: Ashlee M Boyer <43934258+ashleemboyer@users.noreply.github.com>	4 years ago
Dan Heath	7abea7a4a9	docs: Remove redundant word (#2563 ) The bullet point for _Consistent Workflow for Access_ uses the word "securely" twice: > Boundary securely connects the user securely to their infrastructure regardless of cloud platform This PR removes the second instance.	4 years ago
Jeff Mitchell	cede1aec93	Add initial templating support to Vault credential libraries (#2569 ) (#2575 ) Add initial templating support to Vault credential libraries This adds support for templating various account and user values into Vault dynamic credential library POST bodies and GET/POST paths. It also unifies how parameters are used in grants, with backwards compatibility.	4 years ago
stephan242	220456d092	Remove duplicate sentence (#2560 )	4 years ago
PPacent	d2572a343c	Fixing dead link for OSS getting started Fixing dead link for OSS getting starte	4 years ago
XingLu Wang	7942ba2806	Added 0.11 release notes (#2522 )	4 years ago
XingLu Wang	0a1fc6f457	Added FAQ and common errors to docs (#2520 ) * adding new pages * Added faq content * Updated common errors	4 years ago
Robin Beck	5a7cb5c181	Docs: getting started edits (#2521 ) * getting started content updates * updates screenshot	4 years ago
xka5h	e3519ada3a	fix minor typos (#2507 )	4 years ago

1 2 3 4 5 ...

333 Commits (8c5464802d00a9d47f261d56b643d74bbb6382d7)