42 Commits (e3e96a87fa795bbefa67a218017e626d665d587c)

Author	SHA1	Message	Date
Jeff Mitchell	4738ceee5d	Add TLS certificate and worker tag reloading on SIGHUP (ICU-1142) (ICU-1143) (#959)	5 years ago
Jeff Mitchell	717a3b52ee	Add worker tagging (#862) ... This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.	5 years ago
Michael Gaffney	94cb79bbdd	See how Boundary would look with gofumpt applied (#853) ... * See how Boundary would look with https://github.com/mvdan/gofumpt applied Results of running `gofumpt -w -s .` * Update tools file and Makefile for gofumpt Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Jeff Mitchell	a6cca576a3	Attempt canceling sessions by the client (#831) ... * Attempt canceling sessions by the client In some circumstances (like a Ctrl-C), the client knows it's shutting down and the TOFU token will be lost. In this case it makes sense to cancel the session rather than have it time out. This introduces a command enum to the handshake message which can be used for the client to send commands to the worker -- in this case the only specified command is to cancel the session. It doesn't occur if the session is already timed out or if we can't authorize connections as this generally means the session is already invalid.	5 years ago
Jeff Mitchell	18ea39b237	Remove usage of manual.GenerateAndRegisterManualResolver (#810) ... This has been removed in latest grpc.	5 years ago
Jeff Mitchell	e2e4631929	Add ability to set public cluster address (#761)	6 years ago
Jeff Mitchell	1f48d97327	Support for Unix domain socket listeners (#705) ... The client already supports protocol-agnostic transport so handles unix:/// schemes.	6 years ago
Jeff Mitchell	4833fbba23	Simplify worker->controller connection (#601) ... Go's TLS stack doesn't need a separate CA cert and in fact for sessions we don't use this. So simplify the worker connection to remove an unnecessary extra key generation.	6 years ago
Jeff Mitchell	8615d21a1f	Remove connection from worker if in terminated state and all conns are closed, not just in canceling state	6 years ago
Jeff Mitchell	61a0ae02c1	Bring go-alpnmux in house for now	6 years ago
Jeff Mitchell	e86c11db62	Add session lifecycle info to controller's INFO log. (#431) ... This required some plumbing, but nothing major.	6 years ago
Christian Frichot	3940842c4d	Remove legacy references to Vault's API (#426)	6 years ago
Jeff Mitchell	262ff06042	Add public address config option (#405)	6 years ago
Jeff Mitchell	f25186f78a	Standardize on one spelling of "canceled" (#399)	6 years ago
Todd Knight	21f5cc274f	Don't return nil, nil for API service methods. Add tests for updating w/ wrong version. (#396)	6 years ago
Jeff Mitchell	27d728875c	Cleanup session state enum (#394) ... It's up to the worker to understand what a change in state means, so there was no functional difference between simply sending a state change request and a cancel request.	6 years ago
Jeff Mitchell	fcdaf129a3	Add missing continue in close function	6 years ago
Jeff Mitchell	33b0021547	Add Sessions CLI command and add session cleanup to worker (#388)	6 years ago
Jeff Mitchell	bb6ece69b6	Remove unused struct member	6 years ago
Jeff Mitchell	9cbc7b5c3d	Add connection close call from worker to controller (#387)	6 years ago
Jeff Mitchell	7ff4b7f106	Send connected RPC to controller (#386)	6 years ago
Jeff Mitchell	4669c95999	Pass more session info around, make proxy UX nicer (#385)	6 years ago
Jeff Mitchell	f7e48ec836	Plumb connection limit to proxy and output it (#384)	6 years ago
Jeff Mitchell	5214f14105	Work on connection authorization (#381)	6 years ago
Jeff Mitchell	ee7cdde7de	Add trace code for when we add port to controller address	6 years ago
Jeff Mitchell	e002326293	Plumb timeouts to worker and set appropriate deadlines (#378)	6 years ago
Jeff Mitchell	07a7e9750a	Tie together the database-driven session handling with the worker and add relevant CLI comands (#370)	6 years ago
Todd Knight	33e7b4538e	WorkerCoordination and GetSession API refactoring (#354) ... * Possible api changes. * Worker API update. * Updating import alias name. * Moving session down a level as a member of the GetSessionResponse. * Marshal the auth flag into the GetSessionResponse proto instead of the session.	6 years ago
Jeff Mitchell	c689af4306	Implement a TOFU mechanism on auth to worker (#348) ... This sets us up to better support multiple connections per session at some future point.	6 years ago
Jeff Mitchell	23156afa11	Add in most of the proxy flow (#326)	6 years ago
Jeff Mitchell	b47cca0329	Add (non-db aspects of) the recovery key workflow (#286)	6 years ago
Jim	9570897032	basic keys mgmt repo (#264)	6 years ago
Jeff Mitchell	5d104a7a01	Migrate off Vault's internalshared folder to the separated-out repo	6 years ago
Jeff Mitchell	203e2b5dc2	Initial worker porting steps (#232)	6 years ago
Jeff Mitchell	6661117d4c	The name. The name. The name!	6 years ago
Todd Knight	28dbcd84bd	Authenticate Handler API and SDK, and much more (#183)	6 years ago
Jeff Mitchell	4d1b916348	Remove AllLoggers (#39) ... This was copied from Vault code but shouldn't be necessary any more as a change in hclog a while back meant that derived loggers share the log level of the parent.	6 years ago
Jeff Mitchell	5e82db8a2d	Minor bugfixes and cleanup	6 years ago
Jeff Mitchell	cad3c24f54	Add auth over ALPN (#5)	6 years ago
Jeff Mitchell	5acda6a0b1	Begin purpose-based listener refactoring (#4)	6 years ago
Jeff Mitchell	07032f6908	Refactoring and the worker is more distinct now (#3)	6 years ago
Jeff Mitchell	1645c3106e	Migrate a bunch of stuff around to prep for worker command (#2) ... Right now it's essentially a copy; it needs some updating, integration into dev, and so on.	6 years ago