2467 Commits (af9db26b52e4fa2f5d343ee2dc3cb779c3068d4e)

Author	SHA1	Message	Date
Michael Li	95ad3eab48	docs: Update resource table format (#3432)	2 years ago
Devon Anderson	6f1a7c1e41	Update Boundary to latest UI (#4307)	2 years ago
Todd	b734c43cda	return error when creating table fails (#4305)	2 years ago
Jim	a61993abd7	fix (auth): event verify error (#4302)	2 years ago
Johan Brandhorst-Satzkorn	72c87e81cf	internal/authtoken: use view for listing (#4284) ... Use the existing auth token account view for listing instead of a custom query. Testing shows that the performance difference is negligible, and this is simpler.	2 years ago
Jeff Mitchell	e91c4cbfe2	Remove support for 'id' field in grants (#4290)	2 years ago
Louis Ruch	7921ce22fd	test(grant): Use ID to validate version check (#4274) ... * test(grant): Use ID to validate version check * Update docs from id to ids * Remove 'id' in 0.16.0	2 years ago
Louis Ruch	fe6126438e	chore: Fix typos (#4285)	2 years ago
dani	6a55245394	fix(cli): StoragePolicyId indent on list scopes (#4279)	2 years ago
Johan Brandhorst-Satzkorn	133e928c6d	internal/db/schema: update recording indexes (#4278) ... The new index includes the new delete_time and delete_after columns, which are used in the list query.	2 years ago
Todd	e32a25f2a4	No longer enforce version matching between daemon and cli (#4271) ... * No longer check version matching between daemon and cli * Add Log Service Handler and report if the daemon is running in background mode	2 years ago
Jeff Mitchell	03825a5b8f	Address some extra review feedback on multi scope grants (#4272)	2 years ago
Devon Anderson	7707524ebf	Update Boundary to latest UI (#4270)	2 years ago
Jeff Mitchell	f5dd457b34	Multiple grant scope IDs (#4251) ... Co-authored-by: Timothy Messier <tim.messier@gmail.com> Co-authored-by: Todd <github@quaddi.com>	2 years ago
Todd	d0eb670dcf	s/Full Fetch/Recheck Support/ in logs and expose filter query param to search command (#4269) ... * s/Full Fetch/Recheck Support/ and expose filter query param to command	2 years ago
Todd	0dac9005c1	Boundary auth without a keyring configured behaves like -keyring-type none (#4268)	2 years ago
Louis Ruch	fa69ddcb8a	fix(db): Set max storage policy days (#4267)	2 years ago
Jim	6a37c93d77	fix: properly handle rows.Err() (#4261) ... * fix (auth): properly handle rows.Err() * fix (auth/ldap): properly handle rows.Err() * fix (auth/oidc): properly handle rows.Err() * fix (auth/password): properly handle rows.Err() * fix (authtoken): properly handle rows.Err() * fix (credential): properly handle rows.Err() * fix (credential/static): properly handle rows.Err() * fix (credential/vault): properly handle rows.Err() * fix (db): properly handle rows.Err() * fix (db/schema): properly handle rows.Err() * fix (db/migrations): properly handle rows.Err() * fix (host): properly handle rows.Err() * fix (host/plugin): properly handle rows.Err() * fix (host/static): properly handle rows.Err() * fix (iam): properly handle rows.Err() * fix (kms): properly handle rows.Err() * fix (oplog): properly handle rows.Err() * fix (pagination/purge): properly handle rows.Err() * fix (plugin): properly handle rows.Err() * fix (job/scheduler): properly handle rows.Err() * fix (server): properly handle rows.Err() * fix (session): properly handle rows.Err() * fix (target): properly handle rows.Err()	2 years ago
Jim	c6714c1302	refact: remove used limit parameter in query funcs (#4263)	2 years ago
Jim	81c217c1b0	refact (authmethods): remove used list auth methods (#4264)	2 years ago
Jeff Mitchell	3414e09cbb	Remove announced deprecated code allowing ports in target addrs (#4265) ... We made it an error in the API to do this a while back; this cleans up the logic to disallow it for existing targets too.	2 years ago
Todd	30066c06f5	Add log location to the status output (#4260)	2 years ago
Jeff Mitchell	fff5f9506f	Migrate proxy logic to the API package (#4216) ... This allows arbitrary programs to have an easy mechanism to make connections through Boundary using Go. Internal cluster tests and test helpers have been migrated to use this package, as well as the `connect` command. --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
David Bond	422bd6c224	Use correct argument name in log line (#4252) ... This commit modifies a log line produced in the WorkerStatusReport function when closing orphaned connections that appears to incorrectly label a worker identifier as a controller identifier. Signed-off-by: David Bond <davidsbond93@gmail.com>	2 years ago
Devon Anderson	43c37ab1d9	Bump UI commit (#4259)	2 years ago
Johan Brandhorst-Satzkorn	b229ece914	internal/db: use more efficient index for host listing (#4256) ... In tests, the index including the catalog_id performs significantly better.	2 years ago
Louis Ruch	22fcf8a2ba	Projects do not have perm to attach/detach policy	2 years ago
Louis Ruch	d620dcbd4f	feat(db): Update storage policy override default to false	2 years ago
Todd	b8f4e16ecf	Fix flaky log rotation test (#4257) ... * Fix flaky log rotation test	2 years ago
Timothy Messier	9c5c17a3ee	feat(cmd): Disable postgres JIT for boundary dev ... After updating `boundary dev` to use postgres:12 by default, it was noticed that the responsiveness of boundary was noticeably slower. This is due to the introduction of JIT being enabled by default in postgres:12. JIT seems to incur noticeable overhead without providing benefits, at least for the instance used for `boundary dev`. It is also worth noting that for postgres:14 and newer, JIT does not get triggered for the same queries since they seem to result in a cheaper query plan that does not exceed the default threshold for JIT. See: https://www.postgresql.org/docs/current/jit.html ICU-12283	2 years ago
Todd	884a0cb1fc	Fix daemon synopsis and command grouping (#4249)	2 years ago
Jeff Mitchell	253d79116c	Swap id field in grants to ids since that's now standardized (#4250) ... * Swap id field in grants to ids since that's now standardized * Fix some tests I missed * Update generated resource table	2 years ago
Todd	962f9bd638	Pass in options to NewCommand call (#4248)	2 years ago
Devon Anderson	66393ca3d6	Bump UI commit (#4245)	2 years ago
Jeff Mitchell	8c1bdb2190	Fix Unix listener causing 500s on Mac (#4243) ... Some platforms use `@` for a Unix socket address, and some leave it empty. In the empty case this causes the rate limiting code to throw a 500 error. This commit standardizes on using `@` for incoming connections over a Unix socket.	2 years ago
Louis Ruch	957cd59d91	test(e2e): Update e2e timeout (#4241)	2 years ago
Jeff Mitchell	e07503add4	Remove some long-standing commented code (#4242) ... This actually was implemented elsewhere for eventing but the commented code wasn't removed. We can finally be free.	2 years ago
Louis Ruch	5505833702	chore: reorder db migrations from llb	2 years ago
Danielle Miu	e903947bef	Create delete_session_recording job and associated infra	2 years ago
Damian Debkowski	2dda19aafe	fix: reapply-storage-policy	2 years ago
Damian Debkowski	621b535dde	chore: move infinity retention definition	2 years ago
Louis Ruch	b237fe24f1	feat(cmd): Add help text for storage policy scope funcs	2 years ago
Damian Debkowski	5c1ef080cc	feat(cmd): session recording reapply storage policy	2 years ago
Louis Ruch	f26243e9af	feat(recording): Delete Session Recording	2 years ago
Damian Debkowski	0a853c2262	feat(handler): reapply storage policy unimplemented	2 years ago
Damian Debkowski	c27d12c189	fix(db): add target_org_id to session_recording_aggregate table	2 years ago
Damian Debkowski	5858e4c69c	feat(proto): add reapply storage policy method	2 years ago
Damian Debkowski	3d1f7bc892	chore: update website permissions resource table	2 years ago
Damian Debkowski	b7739cd214	chore: generated files	2 years ago
Johan Brandhorst-Satzkorn	07be75b7be	internal/handlers: add pagination to storage policies	2 years ago
Johan Brandhorst-Satzkorn	b454b28912	internal/handlers: add policy list resource type	2 years ago
Johan Brandhorst-Satzkorn	dc4ea67d6e	internal/db: changes for pagination	2 years ago
Louis Ruch	86f10f3ea4	feat(recording): Add RetainUntil and DeleteAfter to Session Recording CLI	2 years ago
Hugo	0d71976437	feat(proto): Add RetainUntil and DeleteAfter timestamps on Session Recordings	2 years ago
Danielle Miu	39b3bb2d1d	fix(db): allow session_recording_aggregate to return recordings correctly	2 years ago
Louis Ruch	853ce5dcd6	feat(policy): Use int32 to avoid json converting int64->float64 string	2 years ago
Louis Ruch	360dd616ff	fix(rate-limiting): Add support for Scope-StoragePolicy actions	2 years ago
Louis Ruch	20897640cd	feat(cli): Add support for Scope Storage Policy	2 years ago
Louis Ruch	45de26bfe9	feat(scope): Add API for Attach/Detach StoragePolicy to scope	2 years ago
Hugo	08e8d96514	feat(cmd): Policies	2 years ago
Hugo	c9f1c53693	feat(api): Policies	2 years ago
Damian Debkowski	40ce80bc55	feat(iam): read storage policy id for scope output	2 years ago
Danielle Miu	df02651bb5	feat(db): new cols for retain and delete session recordings, update structs, and tests	2 years ago
Damian Debkowski	6ca1bc3c3f	feat(handlers): utilize service func for scope service	2 years ago
Damian Debkowski	1be1636883	feat(iam): support scope storage policy	2 years ago
Damian Debkowski	7dce1206ab	feat(types): support new grant types	2 years ago
Damian Debkowski	50990d1b19	chore: generated files	2 years ago
Damian Debkowski	a39bf33598	proto(iam): add scope policy storage policy	2 years ago
Danielle Miu	40477d84c0	add objects to default loopback bucket	2 years ago
Hugo	edbb33de5b	feat(handlers): Implement Policy Service ... This also includes adding new grant and type primitives, as well as package domain names.	2 years ago
Hugo	1c3b1b42f7	feat(proto): Create Policy SDK and API Service (#793)	2 years ago
dani	c43ded06a6	add delete objects command to proto and loopback (#785)	2 years ago
Hugo	e3971decf4	feat(policy): Create storage policies (#773)	2 years ago
Hugo	978db86186	feat(internal/db): Storage policies implementation (#767) ... This commit implements part of the storage policy's database model, focusing specifically on the operational tables for this feature.	2 years ago
Devon Anderson	4a548c0927	Bump UI commit (#4231)	2 years ago
Jeff Mitchell	9332179a01	Remove the deprecated old KMS worker auth mechanism (#3935) ... This has been superceded by the nodeenrollment-based KMS worker auth mechanism. This commit only removes the ability to connect with this mechanism; some upgrade logic will remain intact for a bit and can be removed later.	2 years ago
Johan Brandhorst-Satzkorn	9a23bd14f0	internal/session: tidy up query	2 years ago
Johan Brandhorst-Satzkorn	b6fe9824ab	internal/db: optimize session list indexes	2 years ago
Elim Tsiagbey	c28a8ecfeb	fix(bsr): remove unnecessary `WriteAndClose` function in BSR Journal	2 years ago
Elim Tsiagbey	e1ae3b0689	fix(bsr): log failure reason for encode benchmark tests and stop the tests	2 years ago
Elim Tsiagbey	17330e13df	feat(bsr): use constant for BSR buffer size	2 years ago
Elim Tsiagbey	ac382da11f	fix: initialize `assert` for `withBuffer` test	2 years ago
Elim Tsiagbey	fd385089e8	feat: create default logical block size	2 years ago
Elim Tsiagbey	dbb077e898	fix failing delta for sha256sums test (#852)	2 years ago
Damian Debkowski	7cdbcd71ca	fix(bsr): missing buffer opts for channel writers	2 years ago
Damian Debkowski	208611ec3e	feat(bsr): invoke writeAndClose() in encode	2 years ago
Damian Debkowski	2157a29e6e	fix(fstest): return a LimitedSpaceFile on OpenFile()	2 years ago
Damian Debkowski	450da59686	feat(bsr): create checksum writer	2 years ago
Damian Debkowski	4f42dbf59f	feat(bsr): utilize rolling buffer	2 years ago
Elim Tsiagbey	5a6a6a5198	remove WithMinimumBuffer for MemFile (#820)	2 years ago
Damian Debkowski	87b19504d7	feat(storage): remove withMinimumBuffer	2 years ago
Elim Tsiagbey	cae97fcd2e	feat: Add function that writes to a file without expanding the buffer and closes the file.	2 years ago
Elim Tsiagbey	366128f079	Update Storage options to support rolling buffer (#798) ... Add new storage options: - `WithBuffer`: WithBuffer sets the buffer size. The value must be a factorial of 4KiB. - `WithMinimumBuffer`: WithMinimumBuffer sets the threshold to enforce when the buffer expands back to its original size.	2 years ago
Todd	5056c93845	Fix typo (#4226)	2 years ago
Todd	fa2dc80e36	Close the logfile at test cleanup (#4224)	2 years ago
Timothy Messier	b3bc367534	feat(controller): Expose rate limiting headers via CORS (#4159) ... This adds a Access-Control-Expose-Headers response header to an Options request to allow the rate limiting related headers to be accessible via requests that are subject to CORS.	2 years ago
Todd	0823e395a6	Give more time for worker to start up (#4223)	2 years ago
Johan Brandhorst-Satzkorn	1303f7c363	Fix linter warnings (#4219)	2 years ago
Johan Brandhorst-Satzkorn	69262c386c	internal/db: renumber migrations (#4218)	2 years ago
Johan Brandhorst-Satzkorn	3daa55b913	internal/handlers: add scope list pagination	2 years ago
Johan Brandhorst-Satzkorn	ad5b34da6b	internal/iam: add scope list pagination	2 years ago
Johan Brandhorst-Satzkorn	85ca909720	internal/db: add iam_scope indexes ... These will help the iam_scope list queries	2 years ago
Johan Brandhorst-Satzkorn	d4b60241db	internal/db: storage bucket pagination migrations (#4213)	2 years ago
Michael Milton	52b1c1b4c7	Managed group list pagination (#4208) ... * wip * managed groups pagination * address PR comments * missed one change	2 years ago
Todd	f49ba4662c	Add more logged events (#4206)	2 years ago
Todd	c94a933578	Manually build the socket url (#4205)	2 years ago
Johan Brandhorst-Satzkorn	b7e474d277	internal/handlers: add accounts pagination	2 years ago
Johan Brandhorst-Satzkorn	d5e8877f2c	internal/auth/password: add account pagination	2 years ago
Johan Brandhorst-Satzkorn	1452952ddb	internal/auth/oidc: add account pagination	2 years ago
Johan Brandhorst-Satzkorn	6281a5b73c	internal/auth/ldap: add account pagination	2 years ago
Johan Brandhorst-Satzkorn	44971b3559	internal/db: migrations for accounts pagination	2 years ago
Todd	36a8c6e289	Client cache: Update the default values timing issues (#4203)	2 years ago
Johan Brandhorst-Satzkorn	0715003945	internal/db: renumber session recording migration	2 years ago
Johan Brandhorst-Satzkorn	b6c2e900ba	internal/authtoken: join to auth_account to filter (#4198) ... Instead of doing the scope_id filtering in the second CTE, join the auth_account table to the auth_token table in the query directly.	2 years ago
Johan Brandhorst-Satzkorn	cce52a16e6	internal/db: db migrations for session recordings (#4200)	2 years ago
Michael Li	3a0c1b8e9f	test(e2e): Add test for search (#4196) ... * test(e2e): Add test for search * CR * CR	2 years ago
Johan Brandhorst-Satzkorn	f38c79a5ce	internal/handlers: add host catalog pagination	2 years ago
Johan Brandhorst-Satzkorn	c0c28c63bc	internal/host: add pagination support to catalogs	2 years ago
Johan Brandhorst-Satzkorn	e9b90d9ce1	internal/db: add schema changes for host catalog pagination	2 years ago
Johan Brandhorst-Satzkorn	f0dbddb9e3	internal/db: ensure new columns are not null (#4197) ... Ensure the new create_time and update_time columns are marked as not null after populating the data. Also ensure that the data is populated safely with an updated query pattern inspired by the auth method pattern.	2 years ago
Todd	40d9c3fd1d	Paginate iam groups (#4194)	2 years ago
Johan Brandhorst-Satzkorn	8dc431fef5	internal/db: renumber auth methods migration (#4199)	2 years ago
Michael Milton	8d50a0913f	Auth Method list pagination (#4165) ... * wip * implement list pagination for auth methods * remove unused code * update tests to fix sorting * address PR comments * simplify query, add token tests * change test name * wip sql testing * add boolean column to indicate whether auth methods should be returned to unauthenticated users, remove secrets from api response * is_active_public not null * remove secrets and unwrapping * move not null to immediately after data migration * order public_id descending * fix(db): Fix auth method migrations (#4193) * wip * fix db tests * fix failing api tests * reverse order of create time and update time in test --------- Co-authored-by: Michael Gaffney <mike@gaffney.cc>	2 years ago
Todd	0fad770d8a	Paginate iam user (#4185) ... * paginate iam user	2 years ago
Johan Brandhorst-Satzkorn	db21fbb7c1	internal/host/plugin: revert unnecessary method change ... This logic was accidentally updated to support pagination when it's no longer used. Revert it back to the original code.	2 years ago
Johan Brandhorst-Satzkorn	b3207d8e1c	internal/host: sort public_id descending ... The previous sort would run the risk of missing items which collide on update or create times because of the compound comparison using strictly less than for both the timestamp and the public_id. Sorting both descending avoids this issue.	2 years ago
Todd	e429e91bc4	Do not cache or allow searching for old controllers (#4136) ... * Do not cache or allow searching for old controllers * Identify resourceless responses as coming from supported or unsupported controllers * Do not report refresh token status info for unsupported controllers	2 years ago
Johan Brandhorst-Satzkorn	d94a25bbd2	internal/host: sort public_id descending ... The previous sort would run the risk of missing items which collide on update or create times because of the compound comparison using strictly less than for both the timestamp and the public_id. Sorting both descending avoids thi issue.	2 years ago
Johan Brandhorst-Satzkorn	d4f5677858	internal/iam: sort public_id descending ... The previous sort would run the risk of missing items which collide on update or create times because of the compound comparison using strictly less than for both the timestamp and the public_id. Sorting both descending avoids thi issue.	2 years ago
Johan Brandhorst-Satzkorn	f9950a7e1c	internal/authtoken: sort public_id descending ... The previous sort would run the risk of missing items which collide on update or create times because of the compound comparison using strictly less than for both the timestamp and the public_id. Sorting both descending avoids thi issue.	2 years ago
Johan Brandhorst-Satzkorn	d4d1efce93	internal/session: sort public_id descending ... The previous sort would run the risk of missing items which collide on update or create times because of the compound comparison using strictly less than for both the timestamp and the public_id. Sorting both descending avoids thi issue.	2 years ago
Johan Brandhorst-Satzkorn	6238a533b0	internal/credential: sort public_id descending ... The previous sort would run the risk of missing items which collide on update or create times because of the compound comparison using strictly less than for both the timestamp and the public_id. Sorting both descending avoids thi issue.	2 years ago
Johan Brandhorst-Satzkorn	fc9b26efa7	internal/target: sort public_id descending ... The previous sort would run the risk of missing items which collide on update or create times because of the compound comparison using strictly less than for both the timestamp and the public_id. Sorting both descending avoids thi issue.	2 years ago
Johan Brandhorst-Satzkorn	050bcdfec9	handlers/host_sets: implement pagination for host sets ... Adds protobuf types and handler logic to support pagination of host sets.	2 years ago
Johan Brandhorst-Satzkorn	e14c1382b3	internal/host: add static host set pagination	2 years ago
Johan Brandhorst-Satzkorn	4ba521a3e0	internal/host: add plugin host set pagination	2 years ago
Johan Brandhorst-Satzkorn	27393a8227	internal/db: add host set indexes	2 years ago
Johan Brandhorst-Satzkorn	6757510205	internal/session: add helper for listing sessions ... This is used in an enterprise test	2 years ago
Johan Brandhorst-Satzkorn	f29d559d60	handlers/session_recordings: add pagination support	2 years ago
Johan Brandhorst-Satzkorn	24130c4313	handlers/storage_buckets: add pagination fields	2 years ago
Johan Brandhorst-Satzkorn	516d7b3486	internal/storage: support pagination for storage buckets	2 years ago
Johan Brandhorst-Satzkorn	8c3e309816	internal/storage/plugin: run tests in parallel	2 years ago
Johan Brandhorst-Satzkorn	1a6e2fc5b1	internal/storage: fix options test ... An assert created in the parent was being used in subtests, which will attribute test failures incorrectly. Also run tests in parallel.	2 years ago
Johan Brandhorst-Satzkorn	16eab12458	internal/plugin: fix typo	2 years ago
Johan Brandhorst-Satzkorn	5ef1a39727	internal/credential: use simpler query arg	2 years ago
Johan Brandhorst-Satzkorn	61642f8b5f	internal/authtoken: use simpler query arg	2 years ago
Johan Brandhorst-Satzkorn	9b40cf0801	internal/iam: validate token resource type	2 years ago
Johan Brandhorst-Satzkorn	025ef0d9ca	internal/target: validate token resource type	2 years ago
Johan Brandhorst-Satzkorn	3288f78f12	internal/session: validate token resource type	2 years ago
Johan Brandhorst-Satzkorn	12403d49ad	internal/credential: validate token resource type	2 years ago