boundary

Commit Graph

Author	SHA1	Message	Date
Irena Rindos	736cde3584	Update references to deprecated controllers field (#3212 )	3 years ago
Hugo	22ecf95449	docs: Explain -format json behaviour on boundary authenticate cmd (#3202 )	3 years ago
XingLu Wang	9d50db4c44	doc: Fix typo (#3185 )	3 years ago
Jeff Mitchell	413ec67ace	Fix description of port to not be optional	3 years ago
Dan Heath	6db6cc18e2	docs: Credential management documentation (#3147 ) * docs: Create credential management documentation * docs: Copy edits * docs: Update graphics * docs: Additional copy edits * docs: Fix typos * docs: Reduce size of graphics * docs: Fix pixel density in brokering graphic * docs: Increase size of graphics * docs: Fix pixel density in brokering graphic * docs: Fix issue with brokering image size * docs: Adjust cred brokering image width * docs: Adjust width of brokering graphic * docs: Specify width for gifs * docs: Undo width settings on gifs * docs: Test brokering gif at 75% * doc: Test resized images in preview deployment * docs: Resize gifs smaller * docs: Resize gifs a bit larger * doc: Cleanup extra graphics, test zoomable link * docs: Test gif loop with original * docs: Update gif with loop, fix legacy link * docs: Clean up file names, add updated graphics * docs: Increase size of terminal gif * docs: Update terminal graphic * docs: Update with larger terminal graphic * docs: Move large graphics to DatoCMS	3 years ago
Irena Rindos	b4a8032649	docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour (#3140 ) * docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Bryce Kalow	5e43976947	chore: update dependency (#3138 )	3 years ago
Jeff Mitchell	163ce184b8	KMS-PKI Workers (#3101 ) This adds a new mechanism for worker authentication that uses the third-party arbitration of the original KMS flow by leveraging recently-added capabilities in nodeenrollment to support a registration wrapper. This allows for workers to be registered to the system with just a name and a matching wrapper, while at the same time allowing these workers to be used for private Vault access and multi-hop as they contain per-worker encryption keys and support rotation. Nodes using this mode will generate and rotate credentials in-memory (using another recently added nodeenrollment capability) so will have a new set of keys on every startup. This has the side effect of ensuring that there is never a conflict or re-use of these credentials. Note that the normal test worker flow was using the now-deprecated KMS method; there is still a test that uses this (explicitly) but all other tests using test workers that did not specify a specific PKI flow now actually use this mechanism. This means there is fairly decent test coverage in a general sense, plus the specific tests updated/added for this feature. This also adds a new KMS type that can be used to have distinct KMSes for upstream authentication vs. accepting from downstream.	3 years ago
Conor McCullough	8b0f149882	Replace broken link (#3119 ) Link to the old URL for the dynamic host catalog page removed, added the current valid path.	3 years ago
Dan Heath	d1e30af9ce	docs: Add links to new tutorials (#3106 ) * docs: Add links to new tutorials * docs: Make heading plural * docs: Small rewrite to force a commit	3 years ago
Dan Heath	e6e666443d	docs: Update FAQs with IAM role answer (#3093 ) * docs: Update FAQs with IAM role answer * docs: Cut first sentence after review * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	3 years ago
Dan Heath	fd1140236e	docs: Update what is Boundary (#3033 )	3 years ago
dependabot[bot]	ef37369c2b	chore(deps): bump json5 from 2.2.0 to 2.2.3 in /website (#2802 ) Bumps [json5](https://github.com/json5/json5) from 2.2.0 to 2.2.3. - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](https://github.com/json5/json5/compare/v2.2.0...v2.2.3) --- updated-dependencies: - dependency-name: json5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	a711189337	chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 in /website (#2682 ) Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2) --- updated-dependencies: - dependency-name: decode-uri-component dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	8ef32cf46d	chore(deps): bump semver-regex from 3.1.3 to 3.1.4 in /website (#2136 ) Bumps [semver-regex](https://github.com/sindresorhus/semver-regex) from 3.1.3 to 3.1.4. - [Release notes](https://github.com/sindresorhus/semver-regex/releases) - [Commits](https://github.com/sindresorhus/semver-regex/commits/v3.1.4) --- updated-dependencies: - dependency-name: semver-regex dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Jim	86192f75eb	feature (auth/ldap): add LDAP auth method along with associated accounts and managed groups (#2912 ) * feature (auth): required schema changes for auth ldap method (#2669) chore (auth/ldap): move schema changes to next avail migration number * feature (auth/ldap): define AuthMethod and all its value objects (#2703) * feature (auth/ldap): storage protos * feature (auth/ldap): define AuthMethod and all its value objects * feature (auth/ldap): add repo and reading an auth method (#2718) * feature (auth/ldap): add Repository.CreateAuthMethod(...) and Repository.DeleteAuthMethod(...) (#2724) * feature (auth/ldap): add Repository.UpdateAuthMethod(...) (#2739) * feature (auth/ldap): add Account * feature (auth/ldap): add AuthMethod.EnableGroups * fix (auth/ldap): refactor AuthMethod.oplog to enforce proper constraints * feature (auth/ldap): add Account repo functions * refactor (auth/ldap): remove entry attributes from account Realized the entry attributes could have absolutely anything in them (including binary data) and since we absolutely don't have to have them there's just no reason to take on the risk. * feature (auth/ldap): add AuthMethod.UseTokenGroups * feature (auth/ldap): add Authenticate(...) * refactor (auth/ldap): ensure options take a context as the 1st parameter * feature (auth/ldap): add Account attribute maps * chore (auth/ldap): make fmt deltas * feature (auth/ldap): add managed groups (#2760) * tests (auth/ldap): add missing unit test to Repository.DeleteAccount(...) Add bits to test the delete operation when you're not able to generate oplog metadata * feature (auth/ldap): add managed groups fixup! feature (auth/ldap): add managed groups (#2760) * feature (auth/ldap): service proto definition (#2761) * feature (handlers/authmethods): add handlers for ldap auth method operations (#2794) * feature (auth/ldap): add Account attribute maps * chore (auth/ldap): update cap/ldap to latest version * feature (auth/ldap): add ldap api generation definitions * feature (authmethods): add ldap repo NewService(...) * feature (authmethods/ldap): add proper mask_mapping to protobufs * feature (authmethods): add support to get an ldap auth method * refactor (auth/ldap): export TestGenerateCA(...) * feature (authmethods): add support to create an ldap auth method * feature (authmethods): add support to delete an ldap auth method * feature (authmethods): add support to list ldap auth methods * refactor (auth/ldap): make urls optional for NewAuthMethod(...) * refactor (auth/ldap): export ldap.TestInvalidPem * chore: make fmt changes * fix (auth/ldap): properly handle group search config Add constraints and tests to ensure when an ldap AuthMethod.EnableGroups is true, and UseTokenGroups is false; that there's a GroupDn configured for finding a user's associated groups * feature (authmethods): add support to update an ldap auth methods * chore (db/ldap): tmp mv migrations so there's no conflict with ongoing work * feature (verifier): add ldap auth method to verifier bits * fix (controller): prevent panic when controller stops when there's no listener * feature (authmethods): add support to authenticate via ldap auth methods * chore (migrations): fix whitespace in stmt * chore: fmt fixup * tests (auth/ldap): invalid err msg * feature (cli/authmethods): add support for ldap auth-methods CRUD and authenticate (#2810) * feature (authmethods): add CLI support for ldap auth methods CRUD * tests (api/auth): ldap auth method classification tests * feature (authmethods): add CLI support for ldap auth authenticate * feature (auth/ldap): set request timeouts for ldap server connections * feature (handlers/authmethods): handle u_anon listing properly. * feature (account/handers): ldap account and managed group CRUDL APIs (#2852) * feature (auth/ldap) add repository Listing of ManagedGroupMemberAccount * feature (controller/handlers): add ldapRepoFn to accounts service * feature (auth/ldap) register ldap managed group subtype * feature (account/handlers): ldap account CRUDL APIs * feature (controller/handlers): add ldapRepo to managed groups service * feature (account/handlers): ldap managed group CRUDL APIs * docs (domain): add LDAP accounts, auth-methods and managed groups (#2857) * feature (ldap/cli) add ldap accounts and managed groups CRUDL commands (#2856) * fix (handlers/authmethods): fix ldap authorized actions (#2892) * feature (cli/ldap/authenticate): use primary auth method if none is provided (#2890) * fix (auth/ldap): support setting the state attribute * feature (cli/ldap/authenticate): use primary auth method if none is provided * feature (wh/ldap) add tests for new ldap auth method and accounts (#2919) * refactor (migrations/ldap): mv to correct directory * chore: add copyright headers * fix (api/authmethods/ldap): renumber new LdapAuthMethodAttributes field * fix (auth/ldap): allow the auth method state to be updated (#2951) * chore: update sdk and api versions for llb - this is tmp until merging * tests (managed groups): add required errContains for new test	3 years ago
XingLu Wang	ad5c6d836e	Update service-discovery.mdx (#2995 )	3 years ago
Dan Heath	d7049e4e79	docs: Update main branch with 0.12.0 revisions (#2975 ) * docs: Add HCP only to heading * docs: Add worker requirements * docs: Fix heading format and hierarchy * docs: Fix headings format * docs: Update feature name using "sessions" * docs: Fix heading hierarchy * docs: Fix headings format * docs: Fix spacing in title	3 years ago
Dan Heath	260b0ec51e	docs: Update 0.12.0 release notes with HCP links (#2955 )	3 years ago
Dan Heath	fc2bf00838	docs: Update Getting Started guide, direct address (#2855 ) * docs: Update Getting Started guide, direct address * docs: Delete unused image * docs: Resize image * docs: Resize image	3 years ago
Jeff Mitchell	d15af1d5f3	Remove incorrect assertion that public_addr can be a go-sockaddr template	3 years ago
Todd	f7030513c1	Update documentation to encourage using "hcp_boundary_cluster_id" (#2940 )	3 years ago
Robin Beck	d7b2239bb8	adds cve link (#2934 )	3 years ago
Dan Heath	3dce39decf	docs: Create 0.12.0 release notes (#2926 ) * docs: Create 0.12.0 release notes * docs: add job run table enhancement * Update website/content/docs/release-notes/v0_12_0.mdx Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Apply batch of suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/release-notes/v0_12_0.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: adding HCP content * Update website/content/docs/release-notes/v0_12_0.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: fix typo --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	3 years ago
Jeff Malnick	eea5e80fa2	Update documentation with new authenticate usage on the CLI (#2865 ) * docs: update deploy-and-login getting started guide with new authenticate usage * docs: update api-clients/cli.mdx to remove login-name flag when using authenticate * docs: update common-workflows/manage-users-groups.mdx to remove login-name flag when using authenticate * docs: update common-workflows/workflow-ssh-proxycommand.mdx with new short form usage of authenticate command when using the primary auth method in the global scope * docs: update oss/installing/no-gen-resources.mdx to remove login-name usage in authenticate command * docs: update oss/installing/run-and-login.mdx with short form usage of boundary authenticate * docs: fix tabs * docs: fix numbering * Apply batch of suggestions from code review Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * docs: fix code blocks * fixes code blocks --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>	3 years ago
Dan Heath	0a28dab9d0	docs: Add JSON credentials blob example (#2915 )	3 years ago
Johan Brandhorst-Satzkorn	3c29308673	chore: Add license headers to all files	3 years ago
Dan Heath	51f2876265	docs: Update credentials docs for 0.12.0 (#2871 ) * docs: Update credentials docs for 0.12.0 * Update website/content/docs/concepts/domain-model/credential-libraries.mdx Co-authored-by: Timothy Messier <tim.messier@gmail.com> * docs: updates from review * docs: fix capitalizationi --------- Co-authored-by: Timothy Messier <tim.messier@gmail.com>	3 years ago
Bryce Kalow	a15c5d80ce	website(README): add content-check command (#2889 )	3 years ago
Dan Heath	a31eb7a261	docs: Add frontmatter to ref architecture topic (#2837 ) * docs: Add frontmatter to ref architecture topic * docs: Fix typo	3 years ago
Dan Heath	1284f8f530	docs: Remove links from release note headings - 0.11 (#2829 ) * docs: Remove links from headings - 0.11 * docs: Remove v.10 link * docs: Remove v0.9 link * docs: Remove v0.8 link * docs: Remove v0.7 link * docs: Remove v0.6 link * docs: Remove v0.5 link * docs: Remove v0.4 link * docs: Remove v0.3 link * docs: Remove v0.2 link * docs: Remove v0.1 link	3 years ago
Dan Heath	d41ef25a27	docs: Update multi-hop docs (#2806 ) * docs: Update multi-hop docs * Apply batch of suggestions from code review Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> * docs: Fix spelling Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>	3 years ago
Ashlee M Boyer	e6be6431b2	docs: Migrate link formats (#2777 ) * Adding docs-content-check-legacy-links-format workflow * Adding test-link-rewrites workflow * Migrating links to new format	3 years ago
Kendall Strautman	0d621b4520	chore: updates generated website README (#2792 )	3 years ago
Ashlee M Boyer	a437bdae0a	[docs] Adjusting more links for rewrite project (#2791 ) * Removing in query param from tutorial link * Updating link to renamed tutorial * Fixing broken link syntax	3 years ago
Irena Rindos	d15bd5507e	Multihop workers doc (#2772 ) Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>	3 years ago
Ashlee M Boyer	f3e23f485f	Removing empty link (#2785 )	3 years ago
Ashlee M Boyer	053edb040c	Fixing link syntax that was on multiple lines (#2778 )	3 years ago
Irena Rindos	12415990ac	Add default port and address to target doc (#2775 ) * add default port and address to target doc Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Irena Rindos	5ac590f305	Update documentation to add ingress and egress filters (#2771 ) * Update documentation to add ingress and egress filters	3 years ago
Hugo Vieira	1f9063e042	docs(target): Introduce direct address targets and explain tradeoffs	3 years ago
Dan Heath	a026e6e70e	docs: Fix typo in Use Cases topic (#2746 )	3 years ago
Dan Heath	e2ac9e9f27	docs: Add HCP link to navigation (#2722 ) * docs: Add HCP link to navigation * Add trailing slash * Use relative path instead of absolute * Change back to absolute link * Change link to cloud.hashicorp * Update name of product	3 years ago
Dan Heath	49909a331c	docs: Delete roadmap topic (#2707 ) * docs: Delete roadmap topic * Remove topic from navigation * Add redirect * Fix redirect	3 years ago
Johan Brandhorst-Satzkorn	240278cbf1	fix(docs): Use "root" to reference the root key (#2700 ) The "root" identifier is how we identify the root key in configuration, so it is the phrase we should use in this documentation.	3 years ago
Dan Heath	70a1302cd9	Update Vault credential library templating section (#2679 ) * Update Vault credential library templating section * Add request body to intro * Update website/content/docs/concepts/domain-model/credential-libraries.mdx Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> * Minor rewrite Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	3 years ago
Jeff Malnick	07a823c520	docs: update GCP KMS docs with environment variable usage (#2690 )	3 years ago
HashiBot	64662c649a	chore: Update Digital Team Files (#2671 ) * Update generated scripts (website-build.sh) * Update generated scripts (website-start.sh) * Update generated scripts (should-build.sh) * Update generated website Makefile * Update website/scripts/should-build.sh Co-authored-by: Kevin Wang <kwangsan@gmail.com>	3 years ago
Johan Brandhorst-Satzkorn	6d25b35b4e	Add KMS rotation/destruction feature to the changelog and docs (#2600 ) * Add initial changelog entry * feat(docs): Add initial stab at docs for KMS rotation/destruction * fixup! Add initial changelog entry * Review comments	3 years ago
Danielle	5f8d292ea1	Inject Custom Response Headers By Status (#2587 ) * add custom ResponseWriter struct to inject custom response headers based on status code * docs * upgrade listenerutil * fix config tests * replace all instances of "data:" with "data:" to reflect changes to listenerutil swapping strings.HasPrefix in favor of mux.Handler for ui request matching * set ui path as const * add custom response headers to changelog	3 years ago

1 2 3 4 5 ...

509 Commits (ace2def49dce2971ce37db44d94faac0e2289bb7)