509 Commits (b24f6dcee825caf59cd484fbf6edfeb4cab72e75)

Author	SHA1	Message	Date
Irena Rindos	2191aa1d03	refact(session connection): remove session connection state table (#4617) ... * refact(session connection): remove session connection state table	2 years ago
Damian Debkowski	a20aae9879	update persisted storage bucket credential states from worker status	2 years ago
Damian Debkowski	c0cf5c4e1b	feat(api): return remote storage states for worker	2 years ago
Damian Debkowski	00e4c5448b	feat: workers filtered by sbc state	2 years ago
Damian Debkowski	9bc5e492f6	feat(sbc): add upsert worker storage bucket job	2 years ago
Elim Tsiagbey	670a43ca22	feat(worker): set storage bucket states for worker status ... Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>	2 years ago
Damian Debkowski	162a857a29	feat(sbc): Add domain changes for SBC	2 years ago
Jeff Mitchell	4e0c2d79ac	Add grant scope IDs to role list (#4893) ... This adds grant_scope_ids in the output of role listing. The lookup for grant scope IDs was changed to allow taking in a set of roles instead of just a single role, and the results are collated afterwards. --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Johan Brandhorst-Satzkorn	c6f3c375f3	api: remove deprecated grant_scope_id field (#4886) ... * api: remove deprecated grant_scope_id field The grant_scope_id field was deprecated in 0.15.0, so we can remove it for 0.17.0. * Fix tests * Fix more tests * Remove an option and some related code that stuck around * Fix bats tests --------- Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	2 years ago
Jeff Mitchell	d547e0d459	Add test ability to reinitialize worker auth roots on startup (#4895)	2 years ago
Irena Rindos	b54608b9f2	worker auth: use new previous pkix field (#4894) ... * worker auth: use new previous pkix field	2 years ago
Irena Rindos	61e7ab4738	Allow descriptions to contain newlines and other whitespace (#2599) ... * Allow names and descriptions to contain newlines and other whitespace * separate validate name from validate description * update changelog --------- Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>	2 years ago
David Bond	0c25dbad13	Use appropriate gRPC error codes for OIDC (#4877) ... This commit makes modifications to the OIDC request handlers to return appropriate gRPC status codes on errors. Before this change, boundary presents the internal error codes to clients. This causes problems for reverse proxies, as these status codes are mapped to non-standard HTTP response codes which are ultimately all turned into 500 responses when 4xx status codes are more appropriate and descriptive of the error returned. Some modifications in this commit include calls to `event.WriteError` so that the internal error is written to the controller log for visibility. Comments about potential duplicate logs are now removed as `event.WriteError` is not called when using functions from the `handlers` package. Signed-off-by: David Bond <davidsbond93@gmail.com>	2 years ago
Michael Li	e18e3ab783	test: Fix tests due to time (#4855) ... * test(billing): Calculate time deltas from a fixed time Some time calculations are impacted when using the current day vs. the start of the month. * test(db): Conditionally skip tests at end of month Certain tests fail when run on the last day of the month because of edge cases in the setup of test data (for example, if today is May 31 and NZ time is June 1). This adds conditional logic to skip those tests when run on the last day of a month. * CR: typo	2 years ago
Timothy Messier	a2c529b9d1	fix(controller): Use max request duration cluster listener (#4805) ... The cluster listener supports a `max_request_duration` option, and defaults to 90 seconds. However, this configuration was not being use when processing grpc requests from the listener. This meant that requests from worker to controller could hang indefinitely and contributed to the recently fixed issue with database connections being stuck in `idle in transaction`. This commit adds a grpc interceptor that ensures each request has a deadline set to the max request duration for the listener. Refs: 29cd7bc9d6	2 years ago
Irena Rindos	16d23fa55f	bug(scopes): scopes list returns 500 without perms (#4731)	2 years ago
Todd	7df9144fbf	Fix typos in request validation errors for aliases (#4671) ... * Fix typos in request validation errors for aliases * Add format validation for destination id field.	2 years ago
Michael Li	ca1196cdc9	test(worker): Address flake in TestMonitorUpstreamConnectionState (#4668) ... * test(worker): Address flake * test(worker): refactor `TestMonitorUpstreamConnectionState` tests * test(worker): remove assertion for grpc shutdown state --------- Co-authored-by: Elim Tsiagbey <elim.tsiagbey@hashicorp.com>	2 years ago
Todd	0d67b86543	Add ListResolvableAliases to the user service (#4609) ... * Add ListResolvableAliases to the user service There are a few non common ways this method uses our ACL and grant system. A user is able to list resolvable aliases for another user if they are granted permission to do so. That means we had to load the grants for the user being listed for and not the requester when determining if an alias is able to resolve to a destination for which the requested user has permission. Similarly, the grant hash used for the list pagination is required to be that of the user being listed and not the requester.	2 years ago
dani	1a77e4da86	Boundary Plugin MinIO (#4621) ... feat(storage): Add storage support for MinIO via new built-in plugin	2 years ago
Louis Ruch	c376d06355	feat: Add support for correlationId	2 years ago
Elim Tsiagbey	a23c57e7c6	feat: add storageEventListener nil check ... Only shutdown the storageEventListener if the storageEventListener is not nil	2 years ago
Elim Tsiagbey	2c140b1e09	feat: Local Storage State API & CLI ... - add `local_storage_state` value to API & CLI	2 years ago
Elim Tsiagbey	3bef063c72	feat: Filter workers by local storage state function ... - add functionality to filter worker by local storage state. - add feature constraint for local storage state	2 years ago
Elim Tsiagbey	3f94c900f0	feat: Add worker event listener ... - add worker event listener - add worker event handler - start event listener when a worker starts	2 years ago
Elim Tsiagbey	8506ed3e2c	feat: Report Local Storage State Status ... - add `LocalStorageState` to worker status reports - update worker service handler to process `LocalStorageState`. If is empty for workers older workers, we set the `LocalStorageState` to `unknown` - update field mask paths to support `LocalStorageState`	2 years ago
Damian Debkowski	aea473c77b	feat: new worker config for minimumAvailableCapacity	2 years ago
Louis Ruch	e9e3d7cad5	feat(session): Include session recording id in auth-session resp (#4593)	2 years ago
Todd	55fe70e643	Change 404 errors for aliases to 401s (#4575) ... * Change 404 errors for alias resolution to 401s --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Jeff Mitchell	7e214026af	Fix issue with workers connecting in high latency conditions (#4535) ... At some point we migrated to grpc ConnectParams to control how often retries were happening. One value that we didn't set was the MinConnectTimeout. It turns out that if you don't set this, it won't use the default; instead if will actually use a value of zero, which gRPC internally ups to something that seems to be around 25ms to meet a minimum threshold. This is not documented in the function comments. This commit simply sets the value of MinConnectTimeout to the unexported gRPC default.	2 years ago
Jeff Mitchell	a4bafdf9f4	Remove unintended log statements (#4533)	2 years ago
Jeff Mitchell	4542eef22b	Add templating coalesce function (#4492)	2 years ago
Todd	868228847d	Add handler and API support for alias creation with target (#4508) ... * Add handler and API support for alias creation with target	2 years ago
Jeff Mitchell	9408b2b299	Add some more fixes caught by race detector (#4488)	2 years ago
Todd	f7631edcab	rename target2 import alias to talias (#4482)	2 years ago
Todd	4bd38037b3	fixup! Create the alias service and resource (#4276)	2 years ago
Todd	240f86f0a9	fixup! Resolve aliases prior to subtype attribute transforming interceptor (#4379)	2 years ago
Todd	ce250cbc57	fixup! Create the alias service and resource (#4276)	2 years ago
Todd	deab1d5f17	fixup! Create the alias service and resource (#4276)	2 years ago
Irena Rindos	e80e9a6da5	feat(dev): create initial alias targets for boundary dev (#4433) ... * feat(dev): create initial alias targets for boundary dev	2 years ago
Irena Rindos	48d958e395	fix(aliases): check target alias host id on create and update (#4435) ... * fix(aliases): check target alias host id on create and update	2 years ago
Todd	5a17c9cd39	Resolve aliases prior to subtype attribute transforming interceptor (#4379) ... * Resolve aliases prior to subtype interceptor	2 years ago
Todd	78e10864c4	Add alias CLI CRUDL commands (#4353) ... * Add alias CLI CRUDL commands	2 years ago
Irena Rindos	eceb1fd40e	api(targets): add aliases to targets (#4337) ... * api(targets): add aliases to targets	2 years ago
Todd	3f3b624b54	Add alias resolution to target service (#4277) ... * Add aliases to target resource and alias resolution to target service * Wire up the target alias domain package to the target service handler * Adding alias resolution to target api tests	2 years ago
Todd	92181e272a	Create the alias service and resource (#4276) ... * Create the alias service and resource * Add alias generated API files and tests	2 years ago
Todd	e848e76b48	Create Alias Domain Object and Repo (#4275) ... * Create alias domain object resource * Add paginated listing * fixing ratelimit related panics * Address reviewer comments * remove NewAlias value checks	2 years ago
Michael Milton	2e69d59dd2	feat(billing): Add cli subcommand for monthly active user counts	2 years ago
Timothy Messier	111dc87ead	feat(billing): Fix end time comparision for all view	2 years ago
Timothy Messier	e09bf09a95	refact(billing): Use sql functions instead of views ... These functions will ensure that UTC time is used for billing queries, eliminating the need for the repository to set the timezone. This also means the repository no longern needs a writer.	2 years ago