245 Commits (deeac5c457e86c6c2bf6db50f00a385ecbf4a360)

Author	SHA1	Message	Date
Timothy Messier	c8be4a9890	refact(target): Switch subtype attributes to oneof ... This updates the target resources to use a oneof for attributes. This allows requests to the targets service to leverage the new subtypes.AttributeTransformerInterceptor so that attributes are strongly typed prior to the service handler.	4 years ago
Johan Brandhorst-Satzkorn	8c452b0991	feat(authmethods): Add classification to all fields	4 years ago
Timothy Messier	2ade7f34a8	feat(users): Classify resources for audit events	4 years ago
Timothy Messier	006fa3a85a	feat(session): Classify resources for audit events	4 years ago
Timothy Messier	38a3960047	feat(role): Classify resources for audit events	4 years ago
Timothy Messier	6ad9aba505	feat(credentialstore): Classify resources for audit events	4 years ago
Timothy Messier	9d3a57cbb0	refact(credentialstore): Switch subtype attributes to oneof ... This updates the credential store resources to use a oneof for attributes. This allows requests to the credential store service to leverage the new subtypes.AttributeTransformerInterceptor so that attributes are strongly typed prior to the service handler.	4 years ago
Timothy Messier	00e57b20a2	feat(credentiallibrary): Classify resources for audit events	4 years ago
Timothy Messier	3d4ba0389e	refact(credentiallibrary): Switch subtype attributes to oneof ... This updates the credential library resources to use a oneof for attributes. This allows requests to the credential library service to leverage the new subtypes.AttributeTransformerInterceptor so that attributes are strongly typed prior to the service handler.	4 years ago
Timothy Messier	95315a3e0a	feat(groups): Classify resources for audit events	4 years ago
Timothy Messier	e2eca03d26	feat(managedgroups): Classify resources for audit events	4 years ago
Timothy Messier	5d6cb0009d	refact(managed-groups): Switch subtype attributes to oneof ... This updates the credential store resources to use a oneof for attributes. This allows requests to the credential store service to leverage the new subtypes.AttributeTransformerInterceptor so that attributes are strongly typed prior to the service handler.	4 years ago
Johan Brandhorst-Satzkorn	fc6cddfc7f	feat(authtokens): Add classification to all fields (#1996)	4 years ago
Johan Brandhorst-Satzkorn	d51ce41db8	feat(hostsets): Classify all proto fields	4 years ago
Johan Brandhorst-Satzkorn	8fa3e8dee0	feat(hostcatalogs): Classify all proto fields	4 years ago
Johan Brandhorst-Satzkorn	5440195cce	feat(hosts): Classify host proto fields	4 years ago
Johan Brandhorst-Satzkorn	a2bff4efdf	feat(authmethods): Add typed attributes to authenticate request and response ... The AuthenticateRequest and AuthenticateResponse types have a complex mapping rule system, which requires a pair of custom callback functions.	4 years ago
Johan Brandhorst-Satzkorn	0e51f9cc92	feat(authtoken): Add token type to AuthToken ... The token type is used in the response from the OIDC Authenticate method only.	4 years ago
Johan Brandhorst-Satzkorn	53481146fd	feat(authmethods): add well typed attribute options (#1972) ... Add well typed attribute options to the authmethods proto definitions, while hiding them from being rendered in the openapiv2 spec.	4 years ago
Timothy Messier	e76c48ad36	feat(account): Mark auth_method_id as a source id for subtypes	4 years ago
Timothy Messier	cc7e7429ab	feat(account): Add domain file option	4 years ago
Timothy Messier	8cbbfbe3a0	feat(proto): Add new field option to indicate a in id for subtypes ... This allows for marking a field in a message as an id that can be used to determine the message's subtype. When creating some resources, an id from a related resource is used to indicate the resource's subtype, since the resource must have the same subtype as the related resource.	4 years ago
Timothy Messier	760b090567	feat(proto): Add new option for proto files to set domain ... This allows for associating all of the messages in a file with a domain. This will be used by the global subtype registry to group subtypes within a domain. When registering a subtype, it must be unique within a domain. This allows for cases where two domains have the same subtypes, such as two domains both having a "plugin" subtype.	4 years ago
Johan Brandhorst-Satzkorn	6e6efeee71	feat(account): Add gotags classification ... Add gotag classification to all account proto and service definitions.	4 years ago
Johan Brandhorst-Satzkorn	ac5a1acca8	feat(account): Hide internal attribute fields ... These fields are not intended for use by API consumers, so we hide them from the generated API documentation by marking them as INTERNAL.	4 years ago
irenarindos	eb43941771	refact(account): Use OneOf for Account attributes	4 years ago
irenarindos	e76db2cd13	feat(proto): create custom option for attribute subtype	4 years ago
Johan Brandhorst-Satzkorn	b1d6a1da9a	Switch to buf for protobuf generation (#1944) ... * Install buf with go install This reduces the impact of using buf on our dependency closure, which was significant. It also avoids potential issues with building buf given our own internal dependency constraints. This has caused issues (including crashes!) in the past. See https://github.com/cockroachdb/cockroach/issues/67216#issuecomment-874176186 for more discussion on using tool dependencies generally, and https://github.com/bufbuild/buf/issues/52 for an example of where this sort of thing caused an issue for a user. * Upgrade buf version We should migrate to v1 sooner rather than later, as it has some breaking changes from v0. * Change buf lint/breaking commands These commands were moved up one level for v1 * Migrate to buf.yaml to v1 * Remove unused imports These were uncovered by using "buf lint". * Use buf v1.3.1 * Depend on googleapis and grpc-gateway via BSR * Switch to buf for proto generation * Remove third party dependency * Remove unused tools and scripts * Move local protos up one level * Temporarily don't fail on breaking changes * Generate CI config * Fix generation of controller.json * Replace use of deprecated flag * Remove unused import, regenerate files * Remove temporary skipping over breaking check	4 years ago
Hugo	244237cd2f	feat(controller): Add health endpoint (#1882) ... * feat(controller): New health service and server This change also implements a new listener purpose, `ops`. `ops` (short for operations) is a new listener purpose that is responsible for serving Boundary's operations endpoints, like health and possibly metrics. At Startup: `ops` listeners get configured as late as possible to catch any errors with the startup process; At Shutdown: If the health endpoint has been set-up, we introduce a configurable delay in the process. This is to enable the health endpoint to report unhealthy for that amount of time. `ops` listeners are also the last listeners to be shutdown.	4 years ago
Jeff Mitchell	7eb29261b2	Update to go-kms-wrapping version 2, and plugin-based KMS (#1901)	4 years ago
Louis Ruch	a90f1f4eb1	feat(target): Decode based on credential type	4 years ago
Louis Ruch	1cc35fb0df	feat: Credential library mapping API/SDK/CLI on create path ... * feat(sdk): Add fields to credential library proto Adds CredentialType and CredentialMappingOverrides to credential library SDK. * feat(api): Add fields to credenttial library service Adds support for CredentialType and CredentialMappingOverrides to the credential library service (API) * feat(cli): Add feilds for credential library cmd Adds support for CredentialType and CredentialMappingOverrides to the credential library cmd command.	4 years ago
Thor	8c842df8a8	Remove public_id and session id from Connection api (#1767) ... * removed public_id and session_id from Connection msg	4 years ago
Timothy Messier	0a4df95fdd	ci: Run sdk and api tests in ci ... This adds new makefile targets and configuration to run the tests in the api and sdk modules. These do not run by default since `go test ./...` does not cross module boundaries.	4 years ago
Thor	9f7c650101	api: Returns connections as part of sessions (#1714) ... * session.proto: added connections to Session message * make proto * handler: convert connections on toProto * updated unit test to check connections	4 years ago
Jeff Mitchell	b2efce961d	Fix comment on sync_interval_seconds being invalid (#1745)	4 years ago
Jeff Mitchell	866bfceefc	Add secrets_hmac to host catalog output (#1712) ... Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Jeff Mitchell	b3fd23863f	Add external ID to host output (#1705) ... This also fixes a bug if no hosts were returned where the job would run over and over in a loop, and some other cleanup.	5 years ago
Todd Knight	884e1f2d18	Merge branch 'main' into plugin-hostcatalogs ... # Conflicts: # go.mod # sdk/go.mod	5 years ago
Todd	61f9d1f6af	Add update set handler and sdk functionality (#1684)	5 years ago
Jeff Mitchell	30e9f944a2	Add sync interval to host sets (#1680) ... This adds a parameter to host sets allowing the sync interval to be user-specified on a per-host-set basis. A value of -1 disables syncing; a value of null uses the current default.	5 years ago
Jeff Mitchell	0ea3ff03c4	Update SDK go.mod to require Go 1.17	5 years ago
Jim	048fceaf54	feature (workers): Add audit events for worker requests (#1681) ... * feature (audit events): Add interceptor for auditing worker requests * feature (events): Add default deny filter for worker status events * feature (worker audit events): Add tags to SessionService req/resp	5 years ago
Jim	b96f57ec4e	fix (events): Only "sign" audit events (#1677) ... * chore: Update eventlogger dependency. We need the latest version, so we can limit the type of events that are signed. * fix (events): Only "sign" audit events	5 years ago
Jeff Mitchell	48ac8b8f0b	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jim	eecd878b36	feature: Add signing (hmac-sha256) of audit entries (#1666)	5 years ago
Jeff Mitchell	80d41b9044	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Todd	808b986834	Read and List Plugin based Hosts (#1655) ... * Add ability to read and list hosts. Tests to follow. * Add tests for reading and listing as well as validation checks to not modify hosts. * Add IpAddress and DnsNames to the api resource. Populate the plugin info. * Adding go sdk tests for reading and listing hosts and ensuring update and deleting is disallowed.	5 years ago
Timothy Messier	36f1ae75f7	feat(sdk): Add support for egress credentials to target service	5 years ago
Jim	8ae6e9892f	feature (events/audit): Add auth info to audit events (#1644)	5 years ago
Todd	6eba8a4787	Lookups Catalogs and Persisted data together (#1643) ... * Fixed a number of TODOs: 1. Create a catalog/persisted data view. 2. Pass all sets to the plugin when deleting a catalog.	5 years ago
Jeff Mitchell	b64761f38f	Add repository and functions around plugin host set membership (#1629) ... Co-authored-by: Todd <T.Alan.Knight@gmail.com>	5 years ago
Jeff Mitchell	b1a72bd445	Merge remote-tracking branch 'origin/main' into plugin-hostcatalogs	5 years ago
Jim	a679300b50	feature (events): Classify auth method request/resp messages for audit events. (#1640) ... * refactor (oidc): Stop emitting error for not found token id Stop emitting errors when authtoken repo.IssueAuthToken is called and there's if no pending token. It's not an "normal" state and not an error condition. * feature (audit tagging): Add tags for auth method requests/responses Including testing functions for asserting audit events created when a service is called	5 years ago
Jeff Mitchell	0fd906d964	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Timothy Messier	51812ff779	docs(target): Mark additional fields as output only (#1609) ... When creating or updating a target, the following fields should have been marked as output only: - host_set_ids - host_source_ids - application_credential_source_ids - application_credential_library_ids This updates the protobuf and generated files including the swagger file used by the docs site to correctly mark these are output only. Fixes #1588	5 years ago
Jeff Mitchell	1c8e0ed1e1	Add scaffolding for external host plugins and convert aws/azure over (#1581)	5 years ago
Jeff Mitchell	158ab09952	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jim	c8b29ded1c	Events: Add outbound detail protobufs, request status code, and update event encrypt filter. (#1569) ... * feat (events): Add status code to audit events * feat (events): Add the resp proto msg to every audit event * chore (events): Update eventlogger dep This latest version will redact any map and/or map field which isn't explicitly classified via a Taggable interface * feat (events): Begin to add tagging to response proto msgs	5 years ago
Jeff Mitchell	7d71618df0	Add more host-catalog and host-set CLI support (#1567) ... Add more host-catalog and host-set CLI support Co-authored-by: Todd <T.Alan.Knight@gmail.com>	5 years ago
Jeff Mitchell	a834a14785	Add attribute flag building and parsing (#1562) ... This adds a few command sketches but that's not the main point of the PR and filling those out will come in a different PR. This adds a new flag type that can combine inputs to a single target slice, retaining the ability to distinguish where it came from but also keep ordering across different flag names. It also implements a function that does the heuristic parsing with fallback.	5 years ago
Chris Marchesi	8b8f5de120	sdk: update grpc (#1538)	5 years ago
Todd	a4ea99047f	Remove Prefix Id and Plugin Name fields (#1563) ... * Remove Prefix Id and Plugin Name fields. Creating catalogs now require either the plugin id or the name of the plugin resource (but not both). Host Catalogs and Host Sets API resources now have a read only plugin field populated with plugin info. Host Catalogs have a plugin id field as a top level field.	5 years ago
Jeff Mitchell	8fb1898c3e	Update host plugin RPC to return sets from ListHosts (#1557) ... A few other minor tweaks as well.	5 years ago
Todd	bbfef2802f	Placeholder Plugin Providers for Repos and added testPlugin struct (#1532) ... * Create minimalistic plugin map and test plugin. * Pass secrets and attributes to the plugin when creating catalogs or sets. Add tests for CreateSet and CreateCatalog repo methods. * make fmt and extract out getPrivateCatalog and getCatalog helper methods. * Exporting TestPluginServer so it can be used in the handlers. * Keep separate persisted data from host catalogs lookups which facilitate passing it onto the plugins. * Add TODO to merge get Catalog and get Persisted data. * Adding tests for unimplemented being returned by the plugin. * Use GetFields() instead of AsMap() to confirm attributes should be populated. Make clone consistent between catalog and sets. Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Jeff Mitchell	01d4383c1b	Add preferred endpoints logic to API/handler/DB and some CLI bits (#1529)	5 years ago
Jeff Mitchell	f9c620a5d5	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jeff Mitchell	7fc712de44	Bump protoc	5 years ago
Todd Knight	1237d05232	Create a repository to create, lookup, and list host plugins.	5 years ago
Jeff Mitchell	71cba858e3	Add secrets to host catalogs API struct (#1512) ... This also changes the address from a plugin from a scalar value to other fields, starting with an IP address array.	5 years ago
Jeff Mitchell	361d568550	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jeff Mitchell	e9a8ede0d6	Move wrapper package back to SDK (#1511) ... TF uses this, so SDK is a decent place for it. It doesn't create dependencies between it and API.	5 years ago
Jeff Mitchell	f141b806d8	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jeff Mitchell	081de3cf79	Migrate sdk/recovery to api/ and sdk/wrapper to internal (#1507) ... * `recovery` is only used by the API (and the main module, for decryption) * `wrapper` is only used by the CLI right now Moving these brings them closer to the code that uses them, and makes the SDK package a bit more clear in terms of functionality.	5 years ago
Chris Marchesi	ad8839e6de	Move protobufs to sdk/pbs/plugin (#1506)	5 years ago
Jeff Mitchell	2649d1b966	Move protooptions to sdk/pbs (#1486) ... This prevents a reverse dependency from sdk on the main module.	5 years ago
Jeff Mitchell	b13975cb6a	Move API resource pbs to new location (#1484) ... This moves the generated pb files to the `sdk` module. This allows third parties to make use of them if desired (e.g. in upcoming plugins) and moves away from the `gen` nomenclature in the directory, since we are going to be adding some extra interface functions to the messages.	5 years ago
Jeff Mitchell	b0dbd0182e	Add support for additional awskms parameters (#1468) ... This updates to the latest go-kms-wrapping tag to support these parameters and documents them.	5 years ago
Jeff Mitchell	b80607ff46	Update against updated go-secure-stdlib	5 years ago
Jeff Mitchell	2cbcf9a563	Update usage of shared-secure-libs (#1393)	5 years ago
Jeff Mitchell	6b3bad278f	Update SDK deps	5 years ago
Jim	64e6053278	Add TestFreePort(...) which just returns an available free localhost port (#964)	5 years ago
Jeff Mitchell	22462cdd84	Add read:self and cancel:self to sessions; add dev unpriv user (#923) ... * Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed. * Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing. * Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.	5 years ago
Jeff Mitchell	717a3b52ee	Add worker tagging (#862) ... This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.	5 years ago
Jeff Mitchell	dcb15cffbd	Add authorized actions output on resources (#870)	5 years ago
Michael Gaffney	94cb79bbdd	See how Boundary would look with gofumpt applied (#853) ... * See how Boundary would look with https://github.com/mvdan/gofumpt applied Results of running `gofumpt -w -s .` * Update tools file and Makefile for gofumpt Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Jeff Mitchell	c44589b116	Fix bad dep	6 years ago
Jeff Mitchell	a1949da18c	Remove module deps for the moment	6 years ago
Jeff Mitchell	61dd20e421	Add SDK go mod init	6 years ago
Jeff Mitchell	cf3fa4522d	Swap base58 libraries (#472) ... * Swap base58 libraries This doesn't reduce binary size but it removes a metric ton of dependencies.	6 years ago
Todd Knight	2f8d7f0a32	API Errors: Hide and log internal errors (#411)	6 years ago
Jeff Mitchell	33b0021547	Add Sessions CLI command and add session cleanup to worker (#388)	6 years ago
Jeff Mitchell	6201357902	Use scope-specific token DEKs (#342)	6 years ago
Jeff Mitchell	2914b4c14c	Use base58 for a few more user-facing values (#356)	6 years ago
Jeff Mitchell	f8237fb945	Move some packages into SDK, out of internal	6 years ago