156 Commits (c2bc19c71fac7c3ccf106b3cdf0c19fb7ecf899d)

Author	SHA1	Message	Date
Michael Gaffney	9354a4ebcf	refactor(scheduler): Add statusThreshold parameter to job.Run ... The scheduler monitors running jobs to make sure they are not hung. If the status of a running job does not change after a duration (the interruptThreshold in the scheduler), the scheduler kills the job. This change passes the scheduler's interruptThreshold to the job when it calls Run() on the job.	1 year ago
David Bond	61c1544446	Fix panic in credential renewal job (#5116) ... This commit modifies the credential renewal job to handle a case where the `renewLease` method can return `nil, nil`. Currently, a panic is caused by usage of the `renewedCred` variable in this scenario. This commit adds a nil check and returns an error if the `renewedCred` variable is returned as `nil`. Signed-off-by: David Bond <davidsbond93@gmail.com>	2 years ago
Jim	28b465e4b8	refact: to use go-dbw CreateItems, DeleteItems (#4974) ... * refact: to use go-dbw CreateItems, DeleteItems Latest version of go-dbw updated the signature of CreateItems(...) and DeleteItems(...) on a happy note this latest version of go-dbw actually does batch inserts and updates for this functions. * all: regenerate protos with new protoc-gen-go version	2 years ago
Louis Ruch	2e6edb843d	feat(vault): Add headers to client interface	2 years ago
Louis Ruch	0cfca44cf5	fix(vault): Fixes credential_vault_credential_private view ... The worker_filter column was dropped from the credential_vault_credential_private view in the 56/02_add_data_key_foreign_key_references.up.sql migration. Any credential renewal/revocations that relied on the worker filter would not successfully renew.	2 years ago
Louis Ruch	c376d06355	feat: Add support for correlationId	2 years ago
Michael Li	d74d667716	test(credential): Potential fix for race condition (#4587) ... * test(credential): Potential fix for race condition * test: Additional instances	2 years ago
Jeff Mitchell	4542eef22b	Add templating coalesce function (#4492)	2 years ago
Jeff Mitchell	19b19d6756	Comment out parallel statements causing test failures (#4528) ... It hasn't been investigated why this is happening (getting a number of 403 errors) but for now removing parallel fixes it.	2 years ago
Jeff Mitchell	9408b2b299	Add some more fixes caught by race detector (#4488)	2 years ago
Michael Li	9eb608feeb	chore: Update protobuf to 1.33 (#4485) ... Release: https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0 CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-24786	2 years ago
Jeff Mitchell	014a5a7aae	Vet/race fixes (#4421) ... This addresses all found vet/race fixes in community edition. --------- Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>	2 years ago
Jeff Mitchell	35cef97bd4	Linter fixes PR 3 (#4415) ... * Linter fixes * fix(bsr): update test to register TEST protocol once --------- Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>	2 years ago
Jeff Mitchell	4068829509	Merge pull request #4401 from hashicorp/jefferai-linter-fixes ... Fix linter warnings, parts 1 and 2	2 years ago
Jeff Mitchell	49803e653c	Linter fixes numero 2 (#4408)	2 years ago
Jeff Mitchell	25bce9e8ff	Fix linter warnings	2 years ago
Jim	3af259ff69	chore: update deps (#4394) ... * chore: update deps * tests: update sqlmock tests for breaking chg * tests (handlers): sort grants in checkEqualGrants(...) sort the expected and got grants in checkEqualGrants(...) to make the test more deterministic. * tests (asciicast): update backspace enc in TestEventMarshal(...)	2 years ago
Johan Brandhorst-Satzkorn	d9c6de4e8b	deps: update runc dependency (#4349) ... Fixes GHSA-xr7r-f8xq-vfvv	2 years ago
Michael Li	25dff3322a	test: Randomize docker network name (#4306) ... We were observing TestAuthorizeSession_Errors failing in CI due to it complaining that a docker network with name TestAuthorizeSession_Errors already exists. Looking deeper, it turns out that internal/daemon/controller/handlers/targets/tcp and internal/daemon/controller/handlers/targets/ssh both have a test with that same name, and for some reason, they often run on top of each other, causing one of the tests to fail to create a docker network. To prevent any conflicts with tests that have the same name, this commit randomizes the network name that is created.	2 years ago
Jim	6a37c93d77	fix: properly handle rows.Err() (#4261) ... * fix (auth): properly handle rows.Err() * fix (auth/ldap): properly handle rows.Err() * fix (auth/oidc): properly handle rows.Err() * fix (auth/password): properly handle rows.Err() * fix (authtoken): properly handle rows.Err() * fix (credential): properly handle rows.Err() * fix (credential/static): properly handle rows.Err() * fix (credential/vault): properly handle rows.Err() * fix (db): properly handle rows.Err() * fix (db/schema): properly handle rows.Err() * fix (db/migrations): properly handle rows.Err() * fix (host): properly handle rows.Err() * fix (host/plugin): properly handle rows.Err() * fix (host/static): properly handle rows.Err() * fix (iam): properly handle rows.Err() * fix (kms): properly handle rows.Err() * fix (oplog): properly handle rows.Err() * fix (pagination/purge): properly handle rows.Err() * fix (plugin): properly handle rows.Err() * fix (job/scheduler): properly handle rows.Err() * fix (server): properly handle rows.Err() * fix (session): properly handle rows.Err() * fix (target): properly handle rows.Err()	2 years ago
Jeff Mitchell	9332179a01	Remove the deprecated old KMS worker auth mechanism (#3935) ... This has been superceded by the nodeenrollment-based KMS worker auth mechanism. This commit only removes the ability to connect with this mechanism; some upgrade logic will remain intact for a bit and can be removed later.	2 years ago
Johan Brandhorst-Satzkorn	1303f7c363	Fix linter warnings (#4219)	2 years ago
Johan Brandhorst-Satzkorn	6238a533b0	internal/credential: sort public_id descending ... The previous sort would run the risk of missing items which collide on update or create times because of the compound comparison using strictly less than for both the timestamp and the public_id. Sorting both descending avoids thi issue.	2 years ago
Johan Brandhorst-Satzkorn	5ef1a39727	internal/credential: use simpler query arg	2 years ago
Johan Brandhorst-Satzkorn	12403d49ad	internal/credential: validate token resource type	2 years ago
Johan Brandhorst-Satzkorn	7190042f8e	internal/credential: 🤦	2 years ago
Johan Brandhorst-Satzkorn	a7ebb7a3ef	internal/credential: add store pagination logic	2 years ago
Johan Brandhorst-Satzkorn	3197ab763f	internal/credential/static: add store pagination logic	2 years ago
Johan Brandhorst-Satzkorn	7efb43ac03	internal/credential/vault: add store pagination logic	2 years ago
Johan Brandhorst-Satzkorn	dc0b8cfc62	internal/credential: fix some test typos	2 years ago
Johan Brandhorst-Satzkorn	48e8d454a4	internal/credential: use correct resource in tests (#4128)	2 years ago
Johan Brandhorst-Satzkorn	c6e80dbe32	internal/credential: add library pagination logic	2 years ago
Johan Brandhorst-Satzkorn	1337a57674	internal/credential/vault: add pagination logic	2 years ago
Johan Brandhorst-Satzkorn	a9e0d6693d	internal/credential/static: simplify list parsing (#4112) ... Using a struct for the list parsing simplifies the logic and makes the mapping between the result and the Go type safer.	2 years ago
Johan Brandhorst-Satzkorn	6b2f5fe29f	internal/credential: fix comment (#4106)	2 years ago
Johan Brandhorst-Satzkorn	9f6ac602ee	internal/handlers: add credential pagination support	2 years ago
Johan Brandhorst-Satzkorn	fa898fe87b	internal/credential: add pagination service functions ... The new service functions are used for various stages of pagination.	2 years ago
Johan Brandhorst-Satzkorn	e0092999de	internal/credential/static: add pagination support ... Refactors ListCredentials and adds the new ListCredentialsRefresh method to the Repository, supporting pagination of credentials. Also adds the EstimateCount and ListDeletedCredentialIds methods used during pagination.	2 years ago
Johan Brandhorst-Satzkorn	a470f4c0c3	internal/credential: add pagination options ... The new options are used in future commits for paginating list results.	2 years ago
Johan Brandhorst-Satzkorn	0d39456418	internal/boundary: add GetResourceType to Resource ... The resource type method is used to automatically create refresh tokens from a resource when that resource is the last item returned in a page. This also renames the iam domain ResourceType method to GetResourceType to align with the new method.	2 years ago
Jeff Mitchell	263660a7cb	Add support for templating key_id (#4215)	2 years ago
Jeff Mitchell	b6df5693b5	Add generic read/update/delete commands (#3992) ... * Add generic read/update/delete commands This adds three generic commands that use the resource prefix to determine the subcommand to run and pass through args over to that subcommand. Since this occurs very early on and to avoid loading essentially every internal resource package, I moved subtype definitions to globals. This replaces #3967 Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * De-duplicate Subtype code (#4031) Co-authored-by: Timothy Messier <tim.messier@gmail.com> --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: Timothy Messier <tim.messier@gmail.com>	2 years ago
Michael Gaffney	d638378d57	fix(vault): Set the Vault TLS client options if specified ... Two Vault client settings were not being properly used when constructing a Vault client. The `TLS Skip Verify` setting was only being set if a `CA Cert` was also configured. This fix sets the `TLS Skip Verify` when configured regardless of other settings. Closes #3961. The `TLS Server Name` setting was never being set. Bad programmers. This fix now sets it on the Vault client if the Vault Credential Store has been configured to use a value for this setting. Closes #3962.	2 years ago
Jeff Mitchell	a9e372930d	Revert 0bf60996c5 (#3990) ... Post-merge some issues were discovered with the ways typing is used for proto reflection. This will be reworked without moving the subtypes around.	2 years ago
Jeff Mitchell	0bf60996c5	Add generic read/update/delete commands (#3967) ... * Add generic read/update/delete commands This adds three generic commands that use the resource prefix to determine the subcommand to run and pass through args over to that subcommand. Since this occurs very early on and to avoid loading essentially every internal resource package, I moved subtype definitions to globals. * Update main.go Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update changelog and remove another deprecated command --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	2 years ago
Johan Brandhorst-Satzkorn	6081b6c58d	internal/credential: simplify TestObject test helper (#3899) ... The TestObject test helper previously returned an error, but it's easier to have it perform the error check itself, as it conventionally done with test helpers.	2 years ago
dani	c89777de41	Expose Valid Principals for Vault SSH Signed Certs (#3791) ... * allow additional valid principals when creating vault ssh signed cert cred lib * add additional_valid_principals field to credential libraries documentation page	2 years ago
Jeff Mitchell	eb20b80c71	Migrate some credential bits around (#3864)	3 years ago
Johan Brandhorst-Satzkorn	2e0587bff0	credential: fix lint errors (#3746) ... The existing pattern was subject to a bug whereby a lock value was copied every time the value was passed around. This was happening because of the use of an embedded protobuf type. To avoid copying a mutex, use a pointer type in the embedding. Also fixes a few linter warnings complaining about the use of unkeyed literals.	3 years ago
Irena Rindos	9733a250fa	refact(event): move observability/event to event (#3704)	3 years ago