boundary

Commit Graph

Author	SHA1	Message	Date
Todd	c3ee4fa9ff	Instead of relying on termination reason use status	2 years ago
Todd	98b5e3fa52	Close proxy listener if session is no longer active (#4850 ) * Close proxy listener if session is no longer active	2 years ago
Dan Heath	4fd49f00f6	docs: Update release notes for 0.16.1 (#4838 ) * docs: Update release notes for 0.16.1 * docs: Specify fix is for self-managed versions * docs: Minor rewrites for clarity and style * docs: Minor rewrites for sentence length	2 years ago
Elim Tsiagbey	93aae23895	chore: update change log (#4845 )	2 years ago
Dan Heath	68712fbef8	docs: Add new telemetry to changelog (#4839 ) * docs: Add new telemetry to changelog * Update CHANGELOG.md Co-authored-by: Sepehr <46660996+sepehrfrgh@users.noreply.github.com> * docs: Add PR for session recording proto --------- Co-authored-by: Sepehr <46660996+sepehrfrgh@users.noreply.github.com>	2 years ago
Michael Li	8dd419ab85	chore(e2e): Add minio variables to UI test module (#4840 )	2 years ago
Todd	6cb7c74336	point to new api taged version (#4836 )	2 years ago
Todd	6c378e7723	Create an option to set the session teardown timeout (#4834 )	2 years ago
Michael Li	c986d20cef	test(e2e): Rename daemon command to cache (#4833 )	2 years ago
Michael Li	d519759c53	chore(e2e): Add aws region to UI tests (#4831 )	2 years ago
Michael Li	a22f031ce0	chore(e2e): Use region specified in variable (#4814 )	2 years ago
Todd	e0a7c9acdd	Document the deprecation of include_terminated (#4602 ) * Document the deprecation of include_terminated * Update the changelog	2 years ago
Sepehr	1f48ba5d1a	Telemetry: storage bucket proto (#4824 ) * oss:feat(storage): add observation tag in proto for telemetry * oss:feat(storage): add observation tag in proto service * oss:feat(storage): generate proto files with changes * oss:feat(storage): add storage bucket id to target proto	2 years ago
Uruemu S Aganbi	1aa8c2e1d7	Add observation tags for Session Recording Service (#4825 ) * Add observation tags to session_recording.proto * remove scope_info observation tags * Remove quotes and add tag to storage_bucket_id * Add tags for session recording service * Update proto definitions - Remove gotags on messages - Remove quotes	2 years ago
Michael Li	69dfeacc55	chore(e2e): Remove call to tparse (#4817 )	2 years ago
Johan Brandhorst-Satzkorn	ec289420d3	clientagentcmd: use "localhost" to call client agent (#4816 ) The client agent serves on "localhost:9300" by default. It appears on some systems this resolves to ::1:9300 and on some systems 127.0.0.1:9300. We should use the same address on the client as the server to avoid any incompatibilities between systems.	2 years ago
Johan Brandhorst-Satzkorn	a1391db090	internal/cmd: rename ferry files to client_agent (#4815 ) This was missed in the big rename PR	2 years ago
Johan Brandhorst-Satzkorn	e64443c66f	Rename daemon CLI command to cache (#4808 ) * internal/cmd/wrapper: add deprecation wrapper The deprecation wrapper can be used to display a warning to callers when a command is deprecated. * all: rename daemon to cache Rename the boundary daemon command to boundary cache. This avoids confusion with future client/daemons. * changes daemon to cache in nav --------- Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>	2 years ago
Johan Brandhorst-Satzkorn	be7d72d690	Merge pull request #4809 from hashicorp/jbrandhorst-rename-ferry internal/cmd: rename ferry to client-agent	2 years ago
Todd	6936a5448c	update status cli to optionally return some fields (#4810 )	2 years ago
Johan Brandhorst-Satzkorn	8ff18f6c3c	internal/cmd: rename ferry to client-agent Renames the ferry command and related flags and env vars to client-agent following the new naming decision.	2 years ago
dani	d87a4bab8b	bump minio plugin to v0.1.2 (#4801 )	2 years ago
dani	7714e68a41	Merge pull request #4798 from hashicorp/dmiu_remove-macos-runners remove macos runners for darwin builds in favor of linux	2 years ago
Hugo	9b44974524	docs: Add CHANGELOG entry	2 years ago
Hugo	2983f80eaa	fix(cmd): Support account attribute maps	2 years ago
Hugo	61e2056ef4	fix(auth/ldap): Take user attrs into account when authenticating	2 years ago
Michael Li	6eded679bc	chore: Update to use Node20 version of Actions (#4787 ) * chore: Update to use Node20 version of Actions * CR: Add additional triggers to milestone checker * CR: Remove use of third-party action	2 years ago
Timothy Messier	a2c529b9d1	fix(controller): Use max request duration cluster listener (#4805 ) The cluster listener supports a `max_request_duration` option, and defaults to 90 seconds. However, this configuration was not being use when processing grpc requests from the listener. This meant that requests from worker to controller could hang indefinitely and contributed to the recently fixed issue with database connections being stuck in `idle in transaction`. This commit adds a grpc interceptor that ensures each request has a deadline set to the max request duration for the listener. Refs: `29cd7bc9d6`	2 years ago
Michael Li	7954ad42fd	chore(bats): Fix unzip error (#4806 ) The workflow started breaking when there was a competing file in /usr/local/bin/LICENSE.txt (from a packer install). The added flag forces unzip to overwrite any files.	2 years ago
Timothy Messier	29cd7bc9d6	fix(session): Move encryption/decryption out of database transactions (#4803 ) Several session.Repository methods need to encrypt or decrypt fields when persisting or retrieving a Session. These encrypt/decrypt operations where being performed while within a database transaction. The first step in the encrypt/decrypt operation is to retrieve the kms.Wrapper. While the wrappers get cached in memory, the retrieval still results in a database query to check that the kms collection version has not changed. This query happens with a separate db.Reader, and therefore uses a separate database connection from the transaction being used by the session.Repository. If the controllers are configured with a relatively low `max_open_connections`, and be under sufficient load interactive with sessions, the controller can consume all of the available database connections, and get stuck with open transactions while waiting for a database connection to execute the kms related queries. This can be see by checking pg_stat_activity and seeing transactions stuck in `idle in transaction` with a wait_event of ClientRead. This commit changes all of the Repository methods the perform any encryption or decryption operations, including the retrieval of the kms.Wrapper, outside of a database transaction. An alternative approach would be to unsure that the kms.Wrapper retrieval happens within the same database transaction. However, it seems preferable to avoid doing these relatively expensive operations within a transaction when it is not necessary. As part of this fix, it also eliminates some logic that is no longer needed. During previous would with KMS wrapping, the method of how sessions were encrypted was changed, and some logic to lazily re-encrypt sessions was introduced. However, given that terminated sessions are deleted, and the KMS changes was introduced several versions ago (0.13.0), this lazy re-encrypt logic should no longer be necessary. Refs: `edd323b73a` See: https://www.postgresql.org/docs/current/monitoring-stats.html#MONITORING-PG-STAT-ACTIVITY-VIEW https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-IDLE-IN-TRANSACTION-SESSION-TIMEOUT https://developer.hashicorp.com/boundary/docs/configuration/controller#max_open_connections	2 years ago
Johan Brandhorst-Satzkorn	111b8fbecf	internal/cmd/ferry: add sessions command (#4800 )	2 years ago
Todd	590182cf72	Updated the expected status code for unimplemented api errors. (#4802 ) * Updated the expected status code for unimplemented api errors.	2 years ago
Todd	e675aed978	Add the unimplemented api error. (#4799 )	2 years ago
Danielle Miu	a99788233d	remove macos runners for darwin builds in favor of linux	2 years ago
Johan Brandhorst-Satzkorn	0ed1803557	mod: update transit dependency (#4797 ) This version supports context cancelation	2 years ago
Todd	5a06e4fe66	Auto generate the permissions pages. (#4786 ) * Auto generate the permissions pages. * Add add- set- remove- auto descriptions. Hide scope line when no scope provided * Document the resource info struct	2 years ago
Todd	c3f9fde5d7	Wait to select tokens until we know we need to (#4794 ) AuthToken selection involves checking to seeing if the one we are picking has been canceled or expired on the boundary controller. If we are only searching locally and not performing a refresh, there is no need to check if the tokens have expired or not.	2 years ago
Dan Heath	9d3f3da4df	docs: Add bsr purpose key examples (#4785 ) * docs: Add bsr purpose key examples * Apply batch of suggestions from code review Co-authored-by: Michael Li <michael.li@hashicorp.com> --------- Co-authored-by: Michael Li <michael.li@hashicorp.com>	2 years ago
Dan Heath	1420d182d6	docs: Update session-recordings CLI doc (#4775 ) * docs: Update session-recordings CLI doc * fixes id example --------- Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>	2 years ago
Irena Rindos	6f09819e9f	chore: fix workers tag cmd help strings (#4780 )	2 years ago
Irena Rindos	8b90efcde3	docs: fix broken session recording link (#4777 )	2 years ago
Irena Rindos	325949c23a	chore: removed commented out time.sleep calls (#4770 )	2 years ago
pedrorsantana	9cb2d4fa5a	Update README_docker_io.md (#3405 ) * Update README_docker_io.md Fix image names in Docker run commands README to include "hashicorp/" prefix to make sure that local trash images will not pollute the process. * doc: Add trailing backslashes to make it copyable --------- Co-authored-by: Michael Li <michael.li@hashicorp.com>	2 years ago
Michael Milton	f7e59d5d04	Add hidden ferry pause and resume commands (#4771 ) * Add hidden ferry pause and resume functions * add check for 200 status * include pause/resume status in ferry status, fix output * put error string back to previous state	2 years ago
soly-hashicorp	43c336ff75	Update configure-workers.mdx (#4772 )	2 years ago
Irena Rindos	52f53a149c	bug: test fails on end of month (#4748 )	2 years ago
Michael Li	afd8443cc5	docs: Fix broken link (#4766 )	2 years ago
Kerim Satirli	e54519975b	adds missing space in mlock warning (#4286 )	2 years ago
Stan Ryzhov	b4fcf25e9b	Merge pull request #4763 from hashicorp/stan-update-aliases-bats-tests test(bats): Update aliases bats tests	2 years ago
Stan Ryzhov	76a5530b53	test(e2e): Verify host id and invalid input for aliases (#4691 )	2 years ago

1 2 3 4 5 ...

4196 Commits (c3ee4fa9ff495a5046723744a882ac8db102bc3a) All Branches Search

4196 Commits (c3ee4fa9ff495a5046723744a882ac8db102bc3a)

All Branches