boundary

Commit Graph

Author	SHA1	Message	Date
Johan Brandhorst-Satzkorn	d709b97e18	fix(schema): Panic with error rather than function (#2391 )	4 years ago
Johan Brandhorst-Satzkorn	ac591d8283	fix(managed_groups): Fix validation function panic (#2390 ) The logic would panic if no attributes were specified. Ensure that attributes are non-nil before checking any sub fields.	4 years ago
Renato Costa	ec3d2ef360	Fix incorrect use of loop variable in parallel tests (#2389 ) This fixes occurences of a loop variable being captured in parallel tests. With the previous code, only the last test case is actually exercised. To work around this problem, we create a local copy of the range variable before the parallel test, as suggested in the documentation for the `testing` package: https://pkg.go.dev/testing#hdr-Subtests_and_Sub_benchmarks Issues were found automatically using the `loopvarcapture` linter.	4 years ago
Irena Rindos	b43e61c8c7	bug(workers): Create worker-led panics on invalid token (#2388 ) * Check for error before returning result	4 years ago
Jim	b0bc6bd632	refactor: eliminate gorm references in favor of go-dbw (#2386 )	4 years ago
Louis Ruch	929a385fdb	fix: move 'drop target_all_subtypes' after whx views	4 years ago
Irena Rindos	4aa09242ab	Fix dev Docker build (#2380 ) * Fix dev Docker build	4 years ago
Irena Rindos	dde0c35f23	Update request data in session manager (#2369 ) * bug(session): Update request data in session manager	4 years ago
Louis Ruch	564affa294	chore: Add 0.10.2 changelog	4 years ago
Josh Brand	8c0efb9715	Enos: add additional guards before authentication (#2382 ) * Enos: add additional guards before authentication Previously, we would see failures when the ALB in front of a cluster was alive and passing healthchecks, but the database behind had not been initialized yet. This adds a check with an unauth'd call to `auth-methods list` to validate the DB is up before auth.	4 years ago
Damian Debkowski	27e9f775be	feat: add initial migration hook	4 years ago
Timothy Messier	79866a287f	feat(schema): Add support for migration hooks This adds the ability to define hooks that will run prior to a schema migration. The hooks should only be used when a migration would fail due to data being in an invalid state, likely due to a bug in the previous schema definition. For example if a column was missing a constraint, and a new migration is attempting to add the constraint, there might already be values that violate the new constraint. In such cases, we would want the user to make a decision to address the data, and need to provide them with details about what data is problematic in case they want to manually address the problem. To help the user, if there is a sane way to address the data, we should provide an option to automatically "repair" the data, allowing the migration to continue. However, this still should be an explicit opt-in from the user, and we need to clearly describe what the repair option would do to the user so they understand the consequences of opting in. To accomplish this each migration can be provided a hook that contains a CheckFunc, RepairFunc, and RepairDescription. These functions must operate at the point-in-time of the migration immediately preceding the current migration, as as such they should not use and domain packages or repositories, instead they should use direct sql with the sql library. The description is used to explain what the RepairFunc will do. Hooks should be defined in `internal/db/schema/migrations/oss/oss.go` and registered with the schema edition. See the example in `internal/db/schema/manager_example_test.go` for more details.	4 years ago
Michael Gaffney	1fa79e9aa1	test(db): Add tests for inserts into target_host_set	4 years ago
Michael Gaffney	0512ddb060	test(db): Add tests for inserts into target_credential_library	4 years ago
Damian Debkowski	c4aa9a0358	test(sql) add tests to validate project scope for target_static_credential	4 years ago
Jeff Mitchell	a56d7aa4d0	Ensure that "null" can only be specified in "set-" commands (#2363 ) This allows a check function to be set to determine whether it is allowed to be set. This also ensures that if null is allowed it is either the only value or not set.	4 years ago
Jeff Mitchell	a7bde08eee	Pull in AWS plugin v0.1.1 (#2379 ) This adds normalization to the filter field.	4 years ago
Jeff Mitchell	7364d84835	Add mechanism for plugin to normalize attributes (#2376 ) * Add mechanism for plugin to normalize attributes This introduces a new normalization call to the plugin RPC service. If implemented, the plugin will be given the attributes prior to saving them in a create/update call, and can perform any normalization needed, e.g. ensuring that a parameter passed in is represented in a canonical way. As an example, the CLI allows a user of the AWS plugin to pass in a string, but canonically it is a string slice, and should be returned that way as well. Not by chance, this is the exact behavior of the testing implementation of this function. This does not update any individual plugin, but rather sets the controller-side logic up for plugins to support this functionality.	4 years ago
Johan Brandhorst-Satzkorn	d4fce6fbe1	fix: Move enos job attribute into enos-run workflow (#2374 ) Maybe this will fix it? This doesn't make any sense.	4 years ago
Johan Brandhorst-Satzkorn	91e6857631	fix: Use correct yaml (#2373 ) Didn't notice this until it failed on main	4 years ago
Johan Brandhorst-Satzkorn	b6445adff0	feat: Stop enos jobs from failing CI pipelines (#2372 ) Enos jobs are still a bit unstable, we should use them as advisory for now. When they have gained more stability, we can let them fail pipelines again.	4 years ago
Johan Brandhorst-Satzkorn	e8b2104a80	fix: Update Dockerfile to use new PRODUCT_VERSION arg (#2370 ) This is necessary since the merge of https://github.com/hashicorp/actions-docker-build/pull/25	4 years ago
Jeff Mitchell	b89430772b	Update azure host plugin (#2368 ) Fixes #2348	4 years ago
Jaymala	369f818f4c	Update Enos run (#2326 ) * Rotate the credential used for the Enos SSH Key * Use the enos provider from TFC Signed-off-by: Jaymala Sinha <jaymala@hashicorp.com>	4 years ago
Adam Bouhmad	e1a6a60cce	0.10 release notes (#2352 ) * 0.10 release notes This PR proposes the addition of the 0.10.0 release notes to the Boundary Docs page * update nav structure to include 0.10.0 * Update v0_10_0.mdx Added link to HCPb Credential Injection Tutorial	4 years ago
Jim	2818bb65cd	feature (downstreams): Add hooks for optional downstream workers/router (#2359 ) This includes the required interfaces, factories, error codes, etc	4 years ago
Johan Brandhorst-Satzkorn	222a935223	Update grpc-gateway dependency (#2311 ) * chore(deps): Update grpc-gateway dependency This fixes an issue which would allow an attacker to trigger a (recovered) panic in the gateway handler. * fix(server): Use cmp.Diff instead of assert.Equal Testify is not great at handling protobuf types, and was for some reason returning a diff here when in reality there is none. Switch to go-cmp for the comparison to remove the error.	4 years ago
Louis Ruch	66d536eb5d	chore: prep for next release	4 years ago
Louis Ruch	5b3672536e	chore: prep for next release	4 years ago
Zhihe Li	4e9f4ff0cc	chore: Bump UI commitsh and update changelog (#2356 )	4 years ago
Jeff Mitchell	94dd7d9305	Update to latest sdk tag	4 years ago
Jeff Mitchell	f1b737c62e	Fix error validation code in attr parsing (#2353 ) For a flag type used for attributes/secrets, values have always been able to be used with env:// or file:// format, but the error check to see whether the value was successfully parsed was doing a simple string equality rather than `errors.Is`. As a result a value containing a colon would trip up this check and cause an error, rather than allowing it to be used as a bare value.	4 years ago
Louis Ruch	d01f374490	bug(db): Fix credential purpose migration (#2351 ) * bug(db): Fix credential purpose migration	4 years ago
Randall Morey	adf63c8a5f	chore: bump ui commitish to latest (#2350 ) * chore: bump ui commitish to latest * chore: add changelog entry	4 years ago
Jeff Mitchell	5bfb780586	Update changelog with known 0.10.0 issue	4 years ago
Jeff Mitchell	3debee13f9	Update changelog	4 years ago
Michael Gaffney	a6d9c228aa	Merge branch 'mgaffney-greppable-sql'	4 years ago
Jim	7aa7deafa3	chore: update go-dbw dependencies (#2298 ) * chore: update go-dbw dependencies This update included an update of the upstream gorm dependency. In the latest update, gorm appears to have become more sensitive when a slice is passed into operations. The ptr to slice must now be a ptr to slice of ptrs. This change required an update to how boundary handles slices of PrincipalRole, which now must return a ptr to PrincipalRole. There were also some tests that needed to be updated because of this change. * fixup! chore: update go-dbw dependencies	4 years ago
Jeff Mitchell	7df1331e93	Update configutil/pluginutil deps (#2346 ) Fixes #2343	4 years ago
Michael Gaffney	f71eb764d9	docs: add SQL style guide	4 years ago
Louis Ruch	ad9a47a7f9	chore: update changelog for release	4 years ago
Jeff Mitchell	0de5654060	Update sdk/api	4 years ago
Jeff Mitchell	30ede3b137	Fix various website issues (#2344 ) I found some invalid links and some missing KMS information; this fixes those.	4 years ago
Jeff Mitchell	f494a9b80a	Update website with new password rules taken into account (#2330 ) * Update website with new password rules taken into account * Remove the prompt examples as it messes up copying	4 years ago
Louis Ruch	7fafadd70b	db: Add credential_sha256 to session_credentials (#2339 ) * db: Add credential_sha256 to session_credentials	4 years ago
Michael Gaffney	ac6f14a37f	style(sql): make migrations more greppable	4 years ago
Jeff Mitchell	02dd28f587	Add support for SSH private key passphrases (#2331 ) This adds support for encrypted SSH keys via passphrase. Co-authored-by: Louis Ruch <louisruch@gmail.com> Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>	4 years ago
Jeff Mitchell	07bca9dd66	Ensure initial upstreams is empty before hcpb worker listing (#2334 ) The intention of the code was to have one-hop-away workers list KMS workers to get initial upstreams, and have other workers continue using what was in their config file. However, nothing stops people from having initial_upstreams but _also_ adding a cluster ID in their config file, in which case we'd always run this check and replace the config-set initial upstreams. So, ensure the config-set initial upstreams is also len zero.	4 years ago
Louis Ruch	dcccaf1bcf	bug(cmd): Ensure RunShutdownFuncs is called when an early error occurs (#2333 ) * bug(cmd): Ensure RunShutdownFuncs is called when an early error occurs	4 years ago
claire labry	4d966c8eb4	introduces the post publish website event (#2261 )	4 years ago

1 2 3 4 5 ...

2311 Commits (d709b97e18efeb10fb8cd98d062edd5e113324b3) All Branches Search

2311 Commits (d709b97e18efeb10fb8cd98d062edd5e113324b3)

All Branches