207 Commits (955ae412155af95be366dd1caa8688efaacc73e4)

Author	SHA1	Message	Date
Todd Knight	955ae41215	Support upgrading from old migration table name (#889)	5 years ago
Jeff Mitchell	6cd97a4a6e	Add support for recursive listing (#885)	5 years ago
Todd Knight	1f9fcad1cd	Adding Migrate Command (#872)	5 years ago
Jeff Mitchell	6b58a3317d	Add recursive listing to roles (#881) ... This also lays the framework for adding recursive listing to the rest of the resources.	5 years ago
Jeff Mitchell	526e24cd19	Goimports reordering	5 years ago
Jeff Mitchell	717a3b52ee	Add worker tagging (#862) ... This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.	5 years ago
Todd Knight	595a86508e	Fix lockup when initalizing database. (#875)	5 years ago
Jeff Mitchell	46644300d9	Switch to execabs for os/exec in connect cmd (#873) ... * Switch to execabs for os/exec in connect cmd This is more of an abundance-of-caution change (e.g. defense in depth) but it doesn't seem like we should be using binaries from the current directory for `boundary connect` executions (unless given an explicit path). * Update changelog	5 years ago
Jeff Mitchell	dcb15cffbd	Add authorized actions output on resources (#870)	5 years ago
Todd Knight	ec6151d174	Organize DB Schema Migration Code and DB Init Checks (#842) ... Create Schema Manager and propagate contexts into the DB calls downstream. Add checks at controller startup and database init for correct schema version and schema migration dirty bit being set.	5 years ago
Jeff Mitchell	27919ab11b	Groundwork for returning authorized actions (#860) ... This returns authorized actions on targets to users when they perform an operation on a target, including listing. It also prevents users from seeing values in listing targets on which they have no permissions.	5 years ago
Michael Gaffney	94cb79bbdd	See how Boundary would look with gofumpt applied (#853) ... * See how Boundary would look with https://github.com/mvdan/gofumpt applied Results of running `gofumpt -w -s .` * Update tools file and Makefile for gofumpt Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Louis Ruch	dbc796759b	ICU-934/Verify controller config block (#851) ... * Verify controller config block * update changelog	6 years ago
Jeff Mitchell	5b5602969f	Update go-keyring to use forked version (#846) ... This may help with #830.	6 years ago
Jeff Mitchell	6580d85388	Remove erronious IsGlobalUnicast check. (#845) ... Fixes the issue raised at https://www.boundaryproject.io/docs/configuration/worker#complete-configuration-example	6 years ago
Jeff Mitchell	e6c98f1454	Add logic to error on certain invalid listener configs (#838) ... This adds logic to error on certain invalid listener config: * If an address in the worker's "controller" set is unspecified or multicast or global unicast, error * If the controller's cluster address is unspecified, ensure public_cluster_addr is set This has been a source of some confusing behavior on some GitHub tickets and even on the team, so preventing it is probably a good idea. It also relaxes the restriction around controller address matching cluster address in single-server mode when using DNS names.	6 years ago
Jeff Mitchell	16f7dc1c96	Update connect unauthorized message to give a bit more detail	6 years ago
Jeff Mitchell	a6cca576a3	Attempt canceling sessions by the client (#831) ... * Attempt canceling sessions by the client In some circumstances (like a Ctrl-C), the client knows it's shutting down and the TOFU token will be lost. In this case it makes sense to cancel the session rather than have it time out. This introduces a command enum to the handshake message which can be used for the client to send commands to the worker -- in this case the only specified command is to cancel the session. It doesn't occur if the session is already timed out or if we can't authorize connections as this generally means the session is already invalid.	6 years ago
Jeff Mitchell	b809d3f12a	Add `kube` connect subcommand (#816)	6 years ago
Jeff Mitchell	9a84e50493	Minor linting	6 years ago
Jeff Mitchell	833f29e352	Switch connection limit for default target to -1 (#814) ... This makes the initial testing workflow less confusing for users	6 years ago
Jeff Mitchell	d4a6efb363	Pass endpoint to the client (#811) ... This allows us to automatically set TLS parameters, useful for `boundary connect http` and some other features to come.	6 years ago
Todd Knight	aa4157639c	Change Format of API Error (#784) ... This is a wire breaking change for json errors since we have removed and renamed a few fields, and changed part of the structure of the returned json error. * Remove redundant fields in Status, details.error_id, details.TraceId and details.request_id from API errors. * Added wrapped errors and "ops" field to indicate the internal operation of the errors returned by the API. * Added error cli error reporting of Op and wrapped errors.	6 years ago
Jeff Mitchell	589c79831f	Create internal capability for json errors for connect (#809) ... * Create internal capability for json errors for connect * Update error codes	6 years ago
Todd Knight	f6e50006fc	Generate postgres.gen.go using schema version directory structure (#808) ... * Reorganize the db migration .sql scripts into individual schema version directories and generate the sql httpfs fakeFile accordingly. * Created a /dev schema version directory to hold db schema updates that have not been finalized. * Add an 'allow-development-migrations' flag to allow `boundary database init` to be executed even when there are schema updates in /dev.	6 years ago
Jeff Malnick	af2d9dfe90	fix: do not print info in output that could be JSON or YAML format (#799) ... * fix: print err msg for no credentials found to stderr	6 years ago
Jeff Malnick	11c7c8dbe8	feat: make auth token staleness and duration configurable (#777) ... * feat: make auth token time to live and staleness configurable * docs: add configuration docs for auth token TTL and staleness Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	6 years ago
Jeff Malnick	a7fca44809	Fix authz flag (#787) ... * Fix authz flag * add changelog bug fix for authz flag Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	6 years ago
Jim	af6ef1b687	Refactor existing sentinel errors (#774)	6 years ago
Jeff Mitchell	6d59ac1eda	Update synopsis for Connect command so it doesn't wrap on most terminals	6 years ago
Jeff Mitchell	e2e4631929	Add ability to set public cluster address (#761)	6 years ago
Jeff Mitchell	f063b8601c	Fix IPv4-only check when no port is specified (#752) ... We have behavior that causes "0.0.0.0" to only listen on IPv4, however, it also assumed there was a port suffixed. This changes it so that it also works with a port-less address.	6 years ago
Jeff Mitchell	813d21565f	Allow authorize-session to be invoked with target name (#737)	6 years ago
Jeff Mitchell	09b865ab28	Add `pass` cred storage support (#731) ... * Add `pass` cred storage support Make it the default on non-Windows/macOS Document the token storage behavior	6 years ago
Jim	547ae7c802	Fix database init when locale isn't english (#736) ... * use IsMissingTableError(error) * update changelog	6 years ago
Jeff Mitchell	1f48d97327	Support for Unix domain socket listeners (#705) ... The client already supports protocol-agnostic transport so handles unix:/// schemes.	6 years ago
Jeff Mitchell	97e8613eb7	Fix hyphenation of resource subcommand output (#689) ... * Fix hyphenation of resource subcommand output Fixes #686	6 years ago
Jeff Mitchell	f454fa9ef2	Don't return error code 1 if saving the value to the keyring (#668)	6 years ago
Sam Salisbury	bcfd9d038f	version command: fix version string (#662)	6 years ago
Jeff Mitchell	ef16b6177c	Update configuration docs (#661) ... * Update configuration docs * Fix public addr example	6 years ago
Jeff Mitchell	f7bd5e18f9	Fix spacing for scope output in account command	6 years ago
Jeff Mitchell	437f874d44	Fix spacing before Attributes when printing auth method	6 years ago
Jeff Mitchell	868a65ac3d	Don't show "Version v" on startup if empty (#653) ... We'll still show the SHA in this case	6 years ago
Jeff Mitchell	95404b2a56	Separate out protocol-specific functions (#610) ... Placing them into separate files slims down the main connect file and makes it more obvious where things need to be handled for future integrations.	6 years ago
Jeff Mitchell	a982fc9437	Remove proxy proto documentation for now (#606) ... We haven't tested it with the new lib yet. We can add this back whenever we get to testing it.	6 years ago
Jeff Mitchell	603b0582d7	Fix CLI help output and make more consistent (#605)	6 years ago
Jeff Mitchell	bd271b707d	Add version command (#604)	6 years ago
Jeff Mitchell	4833fbba23	Simplify worker->controller connection (#601) ... Go's TLS stack doesn't need a separate CA cert and in fact for sessions we don't use this. So simplify the worker connection to remove an unnecessary extra key generation.	6 years ago
Todd Knight	abe5e9b950	Add Termination Reason (#573)	6 years ago
Jeff Mitchell	ae3a9e32cf	Remove proxy command ... You can now use -authz-token in `boundary connect` which also allows using the connect subcommands when you already have a token.	6 years ago