403 Commits (d46daa573f6eebed7b94766090ac47ae0806e376)

Author	SHA1	Message	Date
Louis Ruch	d46daa573f	feat(server): Add grpc_middleware recovery interceptor	4 years ago
Louis Ruch	72a15b8d2d	bug(target): Add *-host-sources actions to target service (#1794)	4 years ago
Jim	baa1d88f1f	feature: Add client ip to inbound request information (#1678) ... * feature: Add client ip to inbound request information * feature (workers): Add the user's client IP to a session's connection information (#1749)	4 years ago
Thor	8c842df8a8	Remove public_id and session id from Connection api (#1767) ... * removed public_id and session_id from Connection msg	4 years ago
Timothy Messier	0cfd8279b0	fix(controller/targets): Fix creation of credential libraries ... The arg order was incorrect for ingress/egress credentials. Ref: 2cc58ff901 Blame: 36f1ae75f7	4 years ago
Timothy Messier	533b434d1a	refact(controller/targets): Move tcp functionality into subpackage ... This follows a similar pattern as the target domain package, providing a subpackage for the tcp target functionality, allowing this to be pluggable.	4 years ago
Timothy Messier	c9b99306e1	refact(target): Add NewFunc to registry ... This adds a new requirement onto subtypes to register a NewFunc. Previously the subtypes where implementing this function anyway, but the target package was not including them in the registry. This resulted in packages that use the target package needing to import the subtypes directly, which we want to avoid. This refactor will require the subtypes to register their NewFunc which can then be used by `target.New` so packages that need to create targets can do so by only using the target package. This also updates the tcp subpackage to register a NewFunc.	4 years ago
Thor	9f7c650101	api: Returns connections as part of sessions (#1714) ... * session.proto: added connections to Session message * make proto * handler: convert connections on toProto * updated unit test to check connections	4 years ago
Jeff Mitchell	5417cc5cb0	Fix setting nil attributes on host sets (#1746) ... This is the analogue of #1743 but for host sets	4 years ago
Jeff Mitchell	269fb94885	Add test controller option to not use a templated database	4 years ago
Jeff Mitchell	1c39691023	Fix setting host catalog attributes to nil (#1743) ... Internally attributes are not allowed to be the null value. However, as currently implemented, this then breaks our normal model of sending an explicit `null` in the JSON to reset/clear a field. This is a problem because the CLI doesn't have a way to say "set this but to empty" without a lot of hoops, and causes some issues for API users and TF as well. This changes PatchBytes and PatchStruct to return an empty value (or marshaled empty value in the case of PatchBytes) if the source is null or empty. In the host catalog update function we then always set this value if it's in the db mask (removing the nil check). Together this means a null value ends up coming out as an empty value (and thus valid for the DB) from PatchStruct/PatchBytes, and our API translation function already returns nothing for attributes if the length of the fields are zero.	4 years ago
Louis Ruch	9bec68f32c	refact(servers): Cleanup redundant if else (#1741)	4 years ago
Jeff Mitchell	95568ef07f	Fix tests using multiple controllers (#1734) ... The previous PR only initialized plugins if they were required, which meant that there may not actually be a plugin manager running because a second node would not actually create the dev database, which is where the plugin was being added. The assumption that a plugin manager is running is still a fine one at the moment, but we just need to make sure it's running in _all_ cases.	4 years ago
Jeff Mitchell	5559cf54d3	Don't always assume plugins should be activated (#1732)	4 years ago
Jeff Mitchell	3b83184700	Add missing read only check on secrets hmac field in handler (#1729)	4 years ago
Todd	056e72491d	Attempt to fix the ci error. (#1723)	4 years ago
Louis Ruch	0cf9573f24	chore: make fmt	4 years ago
Louis Ruch	c33efbf223	chore: make fmt (#1721)	4 years ago
Todd	1417e17909	Fix nil pointer error when listing by non existing host catalog. (#1720) ... * Fix nil pointer error when listing hosts from nonexisting host catalog.	4 years ago
Todd	b1c53951d5	Use the correct collection actions response when updating host catalogs. (#1718)	4 years ago
Jeff Mitchell	866bfceefc	Add secrets_hmac to host catalog output (#1712) ... Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Jim	ebea283421	fix (kms): Add kms.ReconcileKeys(...) to fix missing audit DEK scenario (#1711) ... This fix addresses the situation where an existing boundary database doesn't have the audit DEKs in the global scope.	4 years ago
Jeff Mitchell	8110e0eab3	Increment version of host during updates (#1707) ... Currently host does not use a version, which means it's not protected against race conditions of either itself or its value objects. This adds and plumbs through version to ensure that if a host or its value objects change that they are not going to be affected by a race condition.	4 years ago
Jeff Mitchell	b3fd23863f	Add external ID to host output (#1705) ... This also fixes a bug if no hosts were returned where the job would run over and over in a loop, and some other cleanup.	4 years ago
Todd	5d2b0e94aa	Update sync interval seconds field. (#1698) ... * Update sync interval seconds field. * If the sync interval was updated, schedule the next sync job wakeup immediately. * Calculate the next sync time for the scheduler should wake up if we only updated the sync interval.	5 years ago
Todd	b16ce175e5	Fix secrets clearing bug in update. Changes to update count behavior for catalogs (#1691) ... * Fix secret clearing bug in update. Always return 1 catalog updated if we can find a catalog w/ a matching version.	5 years ago
Todd Knight	f41bceda83	Merge from main and `make gen`	5 years ago
Todd Knight	884e1f2d18	Merge branch 'main' into plugin-hostcatalogs ... # Conflicts: # go.mod # sdk/go.mod	5 years ago
Jim	f46803d808	feature (authmethod): Add managed grps perms to auth collection actions (#1695)	5 years ago
Todd	61f9d1f6af	Add update set handler and sdk functionality (#1684)	5 years ago
Jeff Mitchell	30e9f944a2	Add sync interval to host sets (#1680) ... This adds a parameter to host sets allowing the sync interval to be user-specified on a per-host-set basis. A value of -1 disables syncing; a value of null uses the current default.	5 years ago
Todd	050553ffcf	Add update catalog support for plugin based catalogs in handler and go sdk (#1673) ... * Create catalog service handler for updating plugin. Add tests for handler and run make fmt. Silently drop attributes where the value is nil when creating the catalog or set.	5 years ago
Jim	048fceaf54	feature (workers): Add audit events for worker requests (#1681) ... * feature (audit events): Add interceptor for auditing worker requests * feature (events): Add default deny filter for worker status events * feature (worker audit events): Add tags to SessionService req/resp	5 years ago
Jeff Mitchell	48ac8b8f0b	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jim	eecd878b36	feature: Add signing (hmac-sha256) of audit entries (#1666)	5 years ago
Todd	54bccf3674	Mask manager can now include mask paths w/ a specified prefix which would be filtered otherwise (#1654) ... * Update the mask manager to always allow fields containing a prefix which matchs a passedThroughPrefix. This will be useful when updating plugin based host catalog and sets since attributes and secrets cannot be contained in the mask manager mapping.	5 years ago
Jim	f63ca1313c	feature (kms/audit): Add base audit key type (#1651) ... * feature (db): Add the ability to enable debug output for a connection * refactor: Use scope.Global instead of "global" * feature (db/migrations): Add kms audit keys Add schema changes to support a new DEK for audit crypto operations. * feature (kms/audit): Add audit key type All the bits required to define a new DEK concrete type for operating on audit entries. * refactor (db): Remove deprecated migration unit tests. We added a new audit DEK to kms.CreateKeysTx(...). Unfortunately, unit tests like TestMigrations_UserDimension, Test_PrimaryAuthMethodChanges and TestMigrations_CredentialDimension have an indirect dependency on a specific historical set of DEKs via an indirect call kms.CreateKeysTx. This of course fails because the new DEK's tables is not a part of pinned migration versions that these tests depend on.	5 years ago
Jeff Mitchell	80d41b9044	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jeff Mitchell	b9269ce93c	Update available actions for host resource (#1659)	5 years ago
Todd	808b986834	Read and List Plugin based Hosts (#1655) ... * Add ability to read and list hosts. Tests to follow. * Add tests for reading and listing as well as validation checks to not modify hosts. * Add IpAddress and DnsNames to the api resource. Populate the plugin info. * Adding go sdk tests for reading and listing hosts and ensuring update and deleting is disallowed.	5 years ago
Timothy Messier	decc3ec2cf	test(targets): Change test to not depend on response order (#1653) ... This test started failing when the order of the list response changed. Since the order does not matter, this test was updated to not depend on the order.	5 years ago
Timothy Messier	36f1ae75f7	feat(sdk): Add support for egress credentials to target service	5 years ago
Todd	1312628a1e	Add plugin set sync and orphaned host cleanup jobs (#1647)	5 years ago
Jeff Mitchell	5e782b6ecc	Update view to return host IDs in a set on set lookup (#1646) ... This removes the optional call to the plugin.	5 years ago
Timothy Messier	2cc58ff901	refact(target): Change repository to take CredentialLibraries ... This change removes the hard-coded credential purpose for the Credential Libraries. It also moves the logic of creating CredentialLibraries from CredentialSources out of the repository and into the targets.Service. This refactor will allow for additional credential purposes to be supported in both the service and the repository.	5 years ago
Jim	8ae6e9892f	feature (events/audit): Add auth info to audit events (#1644)	5 years ago
Jeff Mitchell	b1a72bd445	Merge remote-tracking branch 'origin/main' into plugin-hostcatalogs	5 years ago
Jeff Mitchell	1782f6a4e4	Enhance worker connection security (#1641) ... This stores worker connection nonces within the database to ensure uniqueness of connections. Prior the connection required any attacker to be able to decrypt the incoming encrypted authentication message in order to replay (and if the attacker has access to the KMS you have bigger problems), but with this change even if an attacker does have access to the KMS key, they cannot reuse the same message. (If they're able to encrypt against the KMS key, they can still act as a worker with a new message, so this only really helps if they only have decryption capabilities.)	5 years ago
Timothy Messier	24c6c329fe	chore(target): Remove unused option support from repo Create ... For the target Repository's Create method, the options of WithHostSources and WithCredentialSources where never used by the targets.Service. As such the repository does not need to support these options. See: 51812ff779	5 years ago
Todd	8795b20fe2	Delete actions for plugin based catalogs and sets (#1622) ... * Add ability to delete plugin based host catalogs and host sets * Add plugin host catalog and set tests for API.	5 years ago