60 Commits (d709b97e18efeb10fb8cd98d062edd5e113324b3)

Author	SHA1	Message	Date
Irena Rindos	dde0c35f23	Update request data in session manager (#2369) ... * bug(session): Update request data in session manager	4 years ago
Jim	2818bb65cd	feature (downstreams): Add hooks for optional downstream workers/router (#2359) ... This includes the required interfaces, factories, error codes, etc	4 years ago
Jeff Mitchell	07bca9dd66	Ensure initial upstreams is empty before hcpb worker listing (#2334) ... The intention of the code was to have one-hop-away workers list KMS workers to get initial upstreams, and have other workers continue using what was in their config file. However, nothing stops people from having initial_upstreams but _also_ adding a cluster ID in their config file, in which case we'd always run this check and replace the config-set initial upstreams. So, ensure the config-set initial upstreams is also len zero.	4 years ago
Jeff Mitchell	090b2b28f8	Clean up some dev config kms code (#2321) ... * Clean up some dev config kms code Although it didn't matter in the combined state, the KMS for auth storage was not actually being set properly if only a worker was being instantiated.	4 years ago
Jeff Mitchell	8800ec9c94	Reorganize logic to allow a poison pill (#2317)	4 years ago
Jeff Mitchell	4bd249d347	Fix some missing net.JoinHostPort calls (#2305)	4 years ago
Todd	1aad2627c8	OSS side of second downstream connections (see enterprise PR 69) (#2292)	4 years ago
Jeff Mitchell	8f2ef45a01	Update against new version of nodeenrollment split listener (#2280)	4 years ago
Louis Ruch	a17e973712	feat(credentials): Refactor credential purposes (#2260) ... * feat(credentials): Refactor credential purposes * Application credentials have been refactored to Brokered credentials * Egress credentials have been refactored to Injected Application credentials Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	4 years ago
Jeff Mitchell	fb3b2209e5	Add WithType to worker listing (#2252)	4 years ago
Jeff Mitchell	1596ff3d1c	Update against new nodee conn type (#2245)	4 years ago
Jeff Mitchell	6b48346bf3	Add managed worker address fetching (#2244)	4 years ago
Jeff Mitchell	ca387223b8	Retry faster on initial status (#2243) ... Right now there is a bit of a race condition in that a status call that indirectly tells the controller that a worker is ready to accept sessions can have its response unable to be processed in time for an actual session to come in from a client. It's very unlikely but technically there. This changes where we check if we have ever successfully authenticated from the function called by the ticker to the ticker itself, allowing us to reset the timer to a very short time if we have not yet authenticated. We already have the initial timer set to 0 for "as soon as possible" behavior, but if that initial status failed we'd wait for the normal interval. Now we will instead continue with the "as soon as possible" behavior, and reduce the very unlikely race condition to extremely unlikely. (There are more permanent fixes but those are bigger and can come later.)	4 years ago
Todd	155c5f578b	Create session manager for workers to use to interact with sessions (#2235)	4 years ago
Damian Debkowski	3e9c99c217	refactor(user_password) rename all references of user_password to username_password (#2232)	4 years ago
Todd	9af6c09c36	Move generated pb.go file in to the internal/gen directory (#2225)	4 years ago
Todd	19b549c44a	Rename package servers to server (#2222)	4 years ago
Jeff Mitchell	f5bf3b2c0c	Add events on session activation and connection authz/close (#2215) ... * Add events on session activation and connection authz/close * Only send success event on actual success	4 years ago
Jeff Mitchell	6ffef1e4b5	Update nodeenrollment dep	4 years ago
Louis Ruch	9671daf6e0	Revert "refactor(user_passsword) change all references of user_password into username_password (#2189)" ... This reverts commit ab58b24142.	4 years ago
Damian Debkowski	ab58b24142	refactor(user_passsword) change all references of user_password into username_password (#2189) ... * (refactor) change all sql references of user_password to username_password * refactor(pkg) renamed pkg userpassword to usernamepassword * refactor(proto) updated protocol buffers to use UsernamePassword * refactor(code) updated references from UserPassword to UsernamePassword in golang files * refactor(test) updated unit tests to reference UsernamePassword changes * refactor(ddtest) updated references in dbtests to use UsernamePassword * chore(sql-test) fixed spelling issue * chore(sql) added and updated comments in migartion & tables. fixed indentations * chore(proto) updated comments to reflect username_password changes * refactor(tests) updated unit tests to replace user-password with username-password * refactor(cmd) updated cmd help text to use username * chore(tests) update test name & comments * fix(cmd) fixed cmd usage definition for credentials update * refactor(tests) removed out of scope changes * fix(sql) incremented sql migration id & updated migration comments	4 years ago
Jeff Mitchell	a589c32269	Minor capitalization change	4 years ago
Jim	bd167da7d1	fix (worker): send workerId when authorizing session (#2207) ... * fix (worker): send workerId when authorizing session Send the workerId returned from the last success worker status when authorizing a session. * fixup! fix (worker): send workerId when authorizing session * fixup! fix (worker): send workerId when authorizing session * refactor (worker): deprecate workerId in ActivateSessionRequest It wasn't being used anywho * fixup! fix (worker): send workerId when authorizing session * Update LookupSessionRequest Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	4 years ago
Jeff Mitchell	32d04b9ce7	Allow a worker to use KMS auth but accept PKI for proxy (#2206) ... This essentially worked for non-dev mode before but would create storage directories that weren't actually used or needed, and it didn't work in dev mode because it made assumptions about the presence of a worker auth kms or not. This fixes those behaviors.	4 years ago
Jeff Mitchell	9a4545e59e	Fix eventing and worker name setup (#2204) ... * Don't automatically create worker names, as this is now invalid for PKI workers * Fix a check in dev that clears out name/description in exactly the wrong cases * Change eventing setup to use a hostname-based ID instead of the name (which could change on every start anyways)	4 years ago
Jeff Mitchell	bfd9565010	Merge remote-tracking branch 'origin/byow-attrib-consolidation' into llb-byow	4 years ago
Jeff Mitchell	4efbce3112	Add description updating via worker status (#2197)	4 years ago
Jeff Mitchell	a83a4112ce	Fix hcpb URL suffix	4 years ago
Jeff Mitchell	8fd663af47	Send more info on KMS connect (#2182)	4 years ago
Haotian	40ba275759	feat(worker): add 'initial_upstreams' field to worker config to prepare to replace 'controllers' field. Update worker config description on website.	4 years ago
irenarindos	ee0ecc9991	fix context for worker upstreams	4 years ago
Irena Rindos	f7dbf2a532	Merge pull request #2163 from hashicorp/irindos-clusterid-upstreams ... feat(worker): Map cluster ID in config to upstream address	4 years ago
Jeff Mitchell	5a7291131f	Make current key update on rotation	4 years ago
irenarindos	16d95262a6	feature(worker): add workerKeyId to status	4 years ago
irenarindos	3792fec48b	fixup! feat(worker): Map cluster ID in config to upstream address	4 years ago
irenarindos	256498d40f	fixup! feat(worker): Map cluster ID in config to upstream address	4 years ago
Jeff Mitchell	5b978d7fa7	Adjust parameter naming (#2161) ... * Adjust parameter naming for some worker resource fields * Add eventing listener to event when authentication is successful from a downstream worker	4 years ago
irenarindos	3aa7d11419	feat(worker): Map cluster ID in config to upstream address	4 years ago
Jim	f6c4e3c896	feature (worker): add worker events around authentication (#2157)	4 years ago
irenarindos	594e6e82b5	feat(worker): save workerAuth request to a file	4 years ago
Jeff Mitchell	d1b3b2441f	Add node rotation (#2142)	4 years ago
Jeff Mitchell	4117841cf9	Use persistent storage for worker auth credentials (#2139)	4 years ago
Jeff Mitchell	caf19f867e	Rename some variables to remove Nodee	4 years ago
Jeff Mitchell	f4642930b4	Updates from review of 2076 (#2135)	4 years ago
Haotian	631c174f47	feat(worker): implements WorkerAuthStorage wrapper for worker credential encryption (#2076) ... * Adds WorkerAuthStorage wrapper for worker credential encryption using nodeenrollment library. * Adds AuthStoragePath field in worker config and dev mode to specify directory to store credentials.	4 years ago
Haotian	1830605a7e	refact(servers) Update api for new worker and controller server tables (#2101) ... * Discontinue support for old Server message in ServerCoordinationService. Split message into ServerWorkerStatus and UpstreamServer (which currently contains controller addresses). Remove unnecessary fields. Modify workerStatusServer to use new fields. Co-authored-by: Todd <github@quaddi.com>	4 years ago
Jeff Mitchell	1987264bc3	Migrate storage to database repo (#2132)	4 years ago
Jeff Mitchell	5c76017dd6	Fix nil storage	4 years ago
Todd	731a45eba6	Merge the worker_status table with the worker table (#2111)	4 years ago
Jeff Mitchell	46e97a2b91	Update to new nodee lib bits (#2120)	4 years ago