1248 Commits (c1445728e35f6863ee2cb77a8f29dfbfca305aa1)

Author	SHA1	Message	Date
Jim	c1445728e3	tests (servers): additional CreateWorker(...) unit tests (#2134)	4 years ago
Jeff Mitchell	caf19f867e	Rename some variables to remove Nodee	4 years ago
Jeff Mitchell	f4642930b4	Updates from review of 2076 (#2135)	4 years ago
Haotian	631c174f47	feat(worker): implements WorkerAuthStorage wrapper for worker credential encryption (#2076) ... * Adds WorkerAuthStorage wrapper for worker credential encryption using nodeenrollment library. * Adds AuthStoragePath field in worker config and dev mode to specify directory to store credentials.	4 years ago
Haotian	1830605a7e	refact(servers) Update api for new worker and controller server tables (#2101) ... * Discontinue support for old Server message in ServerCoordinationService. Split message into ServerWorkerStatus and UpstreamServer (which currently contains controller addresses). Remove unnecessary fields. Modify workerStatusServer to use new fields. Co-authored-by: Todd <github@quaddi.com>	4 years ago
Jeff Mitchell	1987264bc3	Migrate storage to database repo (#2132)	4 years ago
Todd	a1c2f9f4d8	Add delete service function implementation. (#2124)	4 years ago
Jim	5f66d8f2af	feature (worker): add WithFetchNodeCredentialsRequest to CreateWorker (#2131) ... * feature (errors): add support fmt specifier with operands to WithMsg(...) * feature (worker): add WithFetchNodeCredentialsRequest to CreateWorker * fixup! feature (worker): add WithFetchNodeCredentialsRequest to CreateWorker	4 years ago
Todd	abbfe45419	Add the Read/List service functions (#2123)	4 years ago
Jeff Mitchell	5c76017dd6	Fix nil storage	4 years ago
Jim	9da0faabd7	refactor (servers/workerauth): add StoreNodeInformationTx(...) (#2125) ... refactor to export StoreNodeInformationTx(...) which can be used by other repositories within their transactions to store node information.	4 years ago
Jim	6cbb36f2b1	chore (servers): update nodeenrollment dep (#2129) ... The signature for registration.AuthorizeNode(...) changed	4 years ago
Jeff Mitchell	98449f25eb	Fix build	4 years ago
Jim	78ffd82581	fix (servers): return unhandled err from storeRootCertificates(...) (#2127)	4 years ago
irenarindos	642e41c9d7	feat(workerAuth): Implement nodeenrollment lib workerauth storage	4 years ago
Todd	4716c1a788	Update List Workers Repo function to allow limits and provide scopes (#2121) ... * Update List Workers Repo function to allow limits and provide scopes Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	4 years ago
Todd	587c6372c2	Add worker update to server repo (#2117)	4 years ago
Todd	731a45eba6	Merge the worker_status table with the worker table (#2111)	4 years ago
Jeff Mitchell	46e97a2b91	Update to new nodee lib bits (#2120)	4 years ago
irenarindos	bf3b0340e5	feat(workerauth): add storage for RootCertificates aggregate	4 years ago
Jeff Mitchell	7bfe35da0d	Update controller address handling (#2089) ... * Don't assume it's non-empty or that this is an issue * Ensure it's empty if the response is coming back through the multihop service so that it simply uses what is in the config file, at least for now	4 years ago
Michael Gaffney	eece174e5e	test(worker): Fix TestDeleteWorker	4 years ago
Todd	fa2efe9878	Create the Worker API resource and the CRUDL operation definitions for a worker. (#2114)	4 years ago
irenarindos	c811dff89b	refact(api): move worker handlers	4 years ago
irenarindos	74fce3776b	feature(workers): add repository DeleteWorker	4 years ago
Jim	70c5da1048	feature (workers): add repository CreateWorker(...) (#2105)	4 years ago
Todd	a281d10206	Add worker config table and view (#2090) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id constraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller.	4 years ago
Todd	e5f02dfc26	Refactor the different repo methods into separate files (#2096) ... * Refactor the different repo methods into separate files * Move DefaultLiveness to the repository.go file to be shared across workers and controllers.	4 years ago
Todd	1c575a8762	make gen fix.	4 years ago
Todd	3fbf901739	Add source to worker tags table (#2087) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id contraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller. * Adding worker tag db writing test. * Move the server table back to the top. * Update comment for the worker object. * Update comment for the worker table. * Add worker tag sources ("config" or "api") * Revert renaming of UpsertWorker until later. * Remove no longer needed files. * Moving the TestWorker into the servers package. Fix the worker tags test. * Update internal/proto/controller/storage/servers/store/v1/worker.proto Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> * Place the repos back together so they can be refactored in a different PR. Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>	4 years ago
Irena Rindos	12044af824	Merge pull request #2067 from hashicorp/irindos-pki-schemas ... feat(pki): Add PKI schemas and protos	4 years ago
irenarindos	af3f75ffaf	fixup! feat(pki): Add PKI schemas and protos	4 years ago
Jeff Mitchell	f6ef708466	Update against new nodeenrollment registration cache	4 years ago
irenarindos	20c314787d	fixup! feat(pki): Add PKI schemas and protos	4 years ago
irenarindos	88a6ca036f	feat(pki): Add PKI schemas and protos	4 years ago
Jeff Mitchell	1f550722a2	Sync against current library state	4 years ago
Todd	2ecd550e27	Add fields to server_worker to be a boundary resource (#2083) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id contraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller. * Updating server_id references to controller_id. * Adding worker tag db writing test. * Move the server table back to the top. * Update comment for the worker object. * Update comment for the worker table. * Update the newWorkerId call to take a context and fix its error. * Correct comment for the wt_network_address domain.	4 years ago
Todd	472d7d520a	Remove the server_id from session table, change it to worker_id on session_connection (#2070) ... * Remove the server_id from session table, change it to worker_id on session_connection This is step 1 in updating the worker table. The worker is becoming a public resource so it must have a public id. We drop the server_id column on the session_connection table and add the worker_id column so we can use the wt_public_key type. Since db migrations are applied while the controller is offline, it should be safe to assume all session connections are not in a running state, thus allowing us to null out all the worker ids in the session_connection table. For now we don't have very good enforcement of the wt_public_id constraints, since the id is currently defined in the worker config, but this will soon change and the worker's id will be generated by the controller.	4 years ago
Jeff Mitchell	0581e164f1	Update nodeenrollment dep	4 years ago
Jeff Mitchell	2f06513a3a	Merge branch 'main' into llb-byow	4 years ago
Jim	785241237e	refactor (kms): adopt the go-kms-wrapping/extras/kms package (#2027) ... * feature (db): add Db.UnderlyingDB() This is needed to allow for integration with bits that need a *dbw.DB * feature (kms): add new go-kms-wrapping/extras/kms dependency * refactor (kms): schema changes required to adopt extras/kms pkg * refactor (kms/iam): rename to DeprecateCreateKeysTx(...) * refactor (kms): remove deprecated test * refactor (kms): refactor Kms type This refactor includes renaming the existing type to DeprecatedKms and then refactoring the Kms type to become a wrapper of go-kms-wrapping/extras/kms * refactor (kms): delete all the unneeded bits All this stuff is not needed now that we're using go-kms-wrapping/extras/kms * refactor (db): fixup tests after kms refactor * refactor (kms/tests): use testing.TB for test helpers Our test helper packages were not possible to use with benchmarks. This refactor switches to testing.TB to allow both tests and benchmarks to use the helpers. * tests (session benchmarks): refactor to use new Kms type * refactor (schema): rm test which relies on deprecated Kms code * refactor (kms): post rebase on main changes required * chore (kms refactor): re-add unit test from main * refactor (kms): uses migrations that don't include KMS schema changes	4 years ago
Jeff Mitchell	00e57db60f	Adapt to library changes	4 years ago
Johan Brandhorst-Satzkorn	8cef1017e9	fix(session): Fix typo in connection documentation (#2075)	4 years ago
irenarindos	54c30d2cad	bug(session): null fkey trigger also checks for session terminated state	4 years ago
Haotian	898da56a77	feat(workers): Add storage path parameter to worker config	4 years ago
Jeff Mitchell	8ebb8d1477	Merge remote-tracking branch 'origin/main' into llb-byow	4 years ago
Jeff Mitchell	99a16dafc2	Leave cluster listener up when bad data is sent (#2073) ... Leave cluster listener up when bad data is sent Removing the ALPN muxer exposed the underlying listener directly to the gRPC server, which means that a quirk of the ALPN muxer (not surfacing errors on accept) turned into the gRPC server receiving errors on accept, and it turns out if the error does not satisfy a special temporary interface the listener will be closed. The obviously better thing to do would be to let the listener close itself if there was truly a fatal error rather than relying on undocumented interfaces, but here we are.	4 years ago
irenarindos	0ef523ba77	Remove column cascade	4 years ago
Todd	b83f4ece39	Manual merge of main into llb-byow.	4 years ago
Todd	d8a443e238	Merge branch 'main' into llb-byow ... # Conflicts: # internal/daemon/controller/handlers/targets/target_service.go # internal/daemon/controller/handlers/workers/multihop_service.go # internal/daemon/controller/handlers/workers/worker_proxy_service.go # internal/daemon/controller/handlers/workers/worker_service.go # internal/daemon/worker/status.go # internal/daemon/worker/worker.go	4 years ago