449 Commits (ca7b84454404b529a86784102d760eae50b7dc33)

 

All Branches   

Search

Author	SHA1	Message	Date
Jeff Malnick	ca7b844544	start production install docs	6 years ago
Jeff Malnick	8515d0bbdb	docs: production install	6 years ago
Jeff Malnick	9afeb23027	ci: use more descriptive job runner name	6 years ago
Jeff Mitchell	27d728875c	Cleanup session state enum (#394) ... It's up to the worker to understand what a change in state means, so there was no functional difference between simply sending a state change request and a cancel request.	6 years ago
Jim	b334aeff41	refactor CancelSession and updateStates to be idempotent (#390)	6 years ago
Christian Frichot	72de1a6916	Fix WATCHTWER ENV variable names (#389)	6 years ago
Jeff Mitchell	9b2646eaf9	Fix retry behavior with KMS recovery and misleading error message (#391)	6 years ago
Jeff Mitchell	5747ea603e	Fix nil pointer with revamped chosen host ID logic	6 years ago
Jeff Mitchell	fcdaf129a3	Add missing continue in close function	6 years ago
Jeff Mitchell	33b0021547	Add Sessions CLI command and add session cleanup to worker (#388)	6 years ago
Jeff Mitchell	bb6ece69b6	Remove unused struct member	6 years ago
Jeff Mitchell	9cbc7b5c3d	Add connection close call from worker to controller (#387)	6 years ago
Jeff Mitchell	7ff4b7f106	Send connected RPC to controller (#386)	6 years ago
Jeff Mitchell	5370111336	Omit private key from session output	6 years ago
Jeff Mitchell	4669c95999	Pass more session info around, make proxy UX nicer (#385)	6 years ago
Todd Knight	e937b0ea27	Sessions Read/List/Cancel API and SDK (#369)	6 years ago
Jeff Mitchell	f7e48ec836	Plumb connection limit to proxy and output it (#384)	6 years ago
Jeff Mitchell	7db0e2a5ed	Fix database check	6 years ago
Jeff Mitchell	697ea561e0	Fix breakage from dual merges	6 years ago
Jim	5764b2c70a	return States as a field of Connection repo operations. (#382)	6 years ago
Jeff Mitchell	edffc7863d	Change connection limit to -1 for unlimited so it works with TF (#383) ... * Migrate connection limit unlimited value to -1 * Fix authorization check	6 years ago
Jeff Mitchell	5214f14105	Work on connection authorization (#381)	6 years ago
Jim	223591d835	return connection authz info from session.AuthorizeConnection (#380)	6 years ago
Jim	66400c9cff	changes needed for sessions.AuthorizeConnection (#377)	6 years ago
Jeff Mitchell	ee7cdde7de	Add trace code for when we add port to controller address	6 years ago
Jeff Mitchell	5bf555cca2	Remove connection idle timeout seconds for now (#379)	6 years ago
Jeff Mitchell	e002326293	Plumb timeouts to worker and set appropriate deadlines (#378)	6 years ago
Jeff Mitchell	0a3f9b8357	Rename connection idle timeout duration -> seconds and sessions max duration -> seconds (#376)	6 years ago
Jeff Mitchell	62baef1b7e	Add multi connection parameters through targets and into session creation (#375) ... * Update protos and gen * Add new values to targets CLI command * Lots more plumbing of new parameters through everything * allow fields to be set to zero value. * Disallow set but empty name/description strings in create/update verifiers Co-authored-by: Jim Lambert <jlambert@hashicorp.com>	6 years ago
Jeff Mitchell	07a7e9750a	Tie together the database-driven session handling with the worker and add relevant CLI comands (#370)	6 years ago
Justin Weissig	fd8ceb6cc4	docs: minor wording (#374)	6 years ago
Jim	e7e70b1b94	new domain functions for the session repo (#368)	6 years ago
Jim	7e927203e8	schema changes to support multi-connections (#372)	6 years ago
Jeff Malnick	e58072a719	feat: add logo to README (#373)	6 years ago
Jeff Mitchell	ff8ce053e1	Don't try to recreate resources when adding test cluster members	6 years ago
Jeff Mitchell	8bef1d734a	Fix mismatch in default role creation permissions	6 years ago
Jim	611288bdc7	basic sessions (#337)	6 years ago
Jeff Mitchell	0a44ed3edd	Fix global scope lookup (#367) ... The changed auth logic + verify logic in the scope handler pass the parent ID for validation, which is correct, as a scope lives in its parent ID. However, the global scope has no parent, and the changes resulted in an empty ID being passed in rather than the global scope itself. This fixes that lookup.	6 years ago
Jeff Mitchell	a660e56ee7	Fix whitespace typo in generated API	6 years ago
Jeff Mitchell	a67d5c8abb	When logging urls, also log method	6 years ago
Jeff Mitchell	c1cc2e3e8e	Fix typo	6 years ago
Jeff Mitchell	37e9fed2e3	Allow not destroying dev databases (#366) ... This also shifts some logic around to better prepare for non-dev-mode workloads, although it does not actually call the KMS creation functions and initial auth method creation from non-dev commands yet.	6 years ago
Jeff Mitchell	c4e2b88022	Add database URL. (#365) ... * Add database URL. This allows specification of either a file://, env://, or other string. If it starts with file:// or env:// the actual value will be read from those resources. * Tidy up the KMS output * Also run migrations in test mode when specifying the URL	6 years ago
Jeff Mitchell	c2b49dbc7d	Plumb root/worker auth kms testing options to public side	6 years ago
Jeff Mitchell	ab1f31e9af	Add WithDatabaseUrl to testing package	6 years ago
Jeff Mitchell	05c2e38f03	Bump deps (#364) ... * Bump deps * Revert go-kms-wrapping as the vault team broke it :-(	6 years ago
Jeff Mitchell	4ef0c57a39	Fix r_default description typo	6 years ago
Jeff Mitchell	3c13e4765d	Verbose isn't actually used right now so don't expose it; fix some wording for scope id flag	6 years ago
Jeff Mitchell	570e52cabb	Add missing set-grants to role command	6 years ago
Todd Knight	f96fa25157	Add Auth Account id to Auth Token response (#363)	6 years ago