boundary

Commit Graph

Author	SHA1	Message	Date
Cameron Perera	c8ee312ae2	docs: update view session recordings in ui steps (#3421 ) * docs: update view session recordings in ui steps * docs: add more admin console details * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Johan Brandhorst-Satzkorn	5ea25ccf2a	docs: add code blocks to LDAP auth method docs (#3437 ) * docs: add code blocks to LDAP auth method docs The code blocks make it much clearer what is and isn't an example. * adds user_filter parameter code syntax style --------- Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>	3 years ago
Elim Tsiagbey	b10a93d0e8	docs: Session Recording Requirements for Workers (#3414 ) * docs: Session Recording Requirements for Workers Clarify the requirements for Boundary workers used for session recording	3 years ago
Dharini Jeeva	78f81af438	docs: install boundary amazon linux instruction (#3416 ) * docs: install boundary amazon linux instruction * docs: install boundary amazon linux instruction * Update website/content/docs/install-boundary/install.mdx Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com> --------- Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>	3 years ago
Dharini Jeeva	45c8a670f3	docs: Update enable session recording on a target (#3412 ) * docs: enable session recording on a target * docs: Minor copy edit to make sentence singular --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Dan Heath	bf3605b346	docs: Fix a capitalization error in the TOC (#3401 )	3 years ago
Dan Heath	3f4cd53d16	docs: Update headings for new style rule (#3396 ) * docs: Update headings for new style rule * docs: Fix headings - Get started * docs: Fix headings - Install * docs: Fix headings - Concepts * docs: Fix typos * docs: Fix headings - Configuration * docs: Fix headings - Operations * docs: Fix headings - Troubleshoot * docs: Fix headings - Clients and Develop * docs: Fix headings - HCP and ENT * docs: Fix headings - Release notes * docs: Fix typos * docs: Fix capitalization in TOC	3 years ago
edorion	eb63a339f0	Update enable-session-recording.mdx to link bsr controler config to bsr kms key doc (#3382 ) * Update enable-session-recording.mdx * docs: Minor copy edit --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
edorion	f22abbb567	Update create-storage-bucket.mdx PKI worker to session recording config (#3381 ) link PKI worker link to session recoding config	3 years ago
edorion	e4e06e63d9	Update SSH target attributes url typo (#3380 ) https://developer.hashicorp.com/boundary/docs/concepts/docmain-model/targets#ssh-target-attributes-hcp-ent should be https://developer.hashicorp.com/boundary/docs/concepts/domain-model/targets#ssh-target-attributes-hcp-ent (domain not docmain)	3 years ago
Dan Heath	02c1b74551	docs: Update HCP only references (#3383 )	3 years ago
Dan Heath	aeda1d0d2e	docs: Rename service discovery (#3375 ) * docs: Rename service discovery * docs: Fix level 2 heading	3 years ago
Irena Rindos	b2266b69d4	chore: fix mlock typo in docs (#3371 ) * chore: fix mlock typo in docs * docs: Fix other typo --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Dan Heath	01ed90e916	docs: Add default client port to domain model (#3367 ) * docs: Add default client port to domain model * docs: Minor edit * docs: Consolidate overlapping attributes * docs: Make connections generic, add ENT/HCP	3 years ago
Irena Rindos	7f1d20ff3a	docs: remove recovery crash scenario from 0.13.0 release notes (#3364 )	3 years ago
Dan Heath	461427adbc	docs: Fix display issue with bullets and code (#3333 )	3 years ago
Dan Heath	8acc73dc6e	docs: Add bsr key to requirements (#3330 ) * docs: Add bsr key to requirements * docs: Rewrite for clarity * docs: Add bsr key definition to security page	3 years ago
PPacent	d15f3cec88	Update system-requirements.mdx (#3327 ) Clarify Postgres version recommendation	3 years ago
Irena Rindos	c0538bd074	docs: Update storage bucket worker requirement (#3320 ) * docs: Update storage bucket worker requirement * docs: Minor copy edits --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Dan Heath	2e8cd853a5	docs: Fix display issue with code blocks (#3314 )	3 years ago
PPacent	4db4fae949	Updates to 'what is Boundary?' (#3315 ) * Updates to 'what is Boundary?' * Typo fixes * simplifying edits * Update website/content/docs/overview/what-is-boundary.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/overview/what-is-boundary.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/overview/what-is-boundary.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/overview/what-is-boundary.mdx Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Robin Beck	2179af63cb	Hashidays Docs (#3313 ) docs: add 0.13 feature docs --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Jeff Malnick <malnick@gmail.com> Co-authored-by: Michael Li <michael.li@hashicorp.com> Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com> Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	3 years ago
XingLu Wang	2ebae57b9e	IAM New Docs (#3201 ) * IAM docs * added diagram * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Apply suggestions from code review * Apply suggestions from code review * Updates to IAM docs * Update iam.mdx * docs: Markdown syntax fixes * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
XingLu Wang	4fc872fc15	Restructuring and addition to permissions docs (#3270 ) * docs: Create grants topic * Update grants * Restructuring of permissions docs * Fixing links Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update website/content/docs/concepts/security/permissions/index.mdx * Update website/content/docs/concepts/security/permissions/index.mdx * Update website/content/docs/concepts/security/permissions/advanced.mdx * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * docs: Add redirect for deleted file --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Johan Brandhorst-Satzkorn	888349c99f	website: add separate note about worker tags (#3306 ) Using worker tags in expressions can be confusing, this adds a note to make it clear how to match values in tags.	3 years ago
XingLu Wang	1628fcf01f	Worker docs cleanup for 0.13 (#3292 ) * Worker docs cleanup * Apply suggestions from code review Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * Update pki-worker.mdx * Update website/content/docs/configuration/worker/pki-worker.mdx --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Johan Brandhorst-Satzkorn	97977f1995	update perms table for session recordings and storage buckets (#3253 )	3 years ago
Johan Brandhorst-Satzkorn	59f78ac1f8	config: allow wasm execution under UI CSP The wasm-unsafe-eval option is necessary for the asciinema player on the Admin UI	3 years ago
Louis Ruch	7207353066	docs(ssh): Update docs to reflect ssh default port is not required	3 years ago
Dan Heath	d49b7ae629	docs: Restructure table of contents (#3230 ) * docs: Restructure table of contents * docs: Copy edits to Develop/Get started sections * docs: Add index to HCP Boundary section * docs: Move OSS/Install section to top-level * docs: Move Concepts above Configuration	3 years ago
Irena Rindos	736cde3584	Update references to deprecated controllers field (#3212 )	3 years ago
Hugo	22ecf95449	docs: Explain -format json behaviour on boundary authenticate cmd (#3202 )	3 years ago
XingLu Wang	9d50db4c44	doc: Fix typo (#3185 )	3 years ago
Jeff Mitchell	413ec67ace	Fix description of port to not be optional	3 years ago
Dan Heath	6db6cc18e2	docs: Credential management documentation (#3147 ) * docs: Create credential management documentation * docs: Copy edits * docs: Update graphics * docs: Additional copy edits * docs: Fix typos * docs: Reduce size of graphics * docs: Fix pixel density in brokering graphic * docs: Increase size of graphics * docs: Fix pixel density in brokering graphic * docs: Fix issue with brokering image size * docs: Adjust cred brokering image width * docs: Adjust width of brokering graphic * docs: Specify width for gifs * docs: Undo width settings on gifs * docs: Test brokering gif at 75% * doc: Test resized images in preview deployment * docs: Resize gifs smaller * docs: Resize gifs a bit larger * doc: Cleanup extra graphics, test zoomable link * docs: Test gif loop with original * docs: Update gif with loop, fix legacy link * docs: Clean up file names, add updated graphics * docs: Increase size of terminal gif * docs: Update terminal graphic * docs: Update with larger terminal graphic * docs: Move large graphics to DatoCMS	3 years ago
Irena Rindos	b4a8032649	docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour (#3140 ) * docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Bryce Kalow	5e43976947	chore: update dependency (#3138 )	3 years ago
Jeff Mitchell	163ce184b8	KMS-PKI Workers (#3101 ) This adds a new mechanism for worker authentication that uses the third-party arbitration of the original KMS flow by leveraging recently-added capabilities in nodeenrollment to support a registration wrapper. This allows for workers to be registered to the system with just a name and a matching wrapper, while at the same time allowing these workers to be used for private Vault access and multi-hop as they contain per-worker encryption keys and support rotation. Nodes using this mode will generate and rotate credentials in-memory (using another recently added nodeenrollment capability) so will have a new set of keys on every startup. This has the side effect of ensuring that there is never a conflict or re-use of these credentials. Note that the normal test worker flow was using the now-deprecated KMS method; there is still a test that uses this (explicitly) but all other tests using test workers that did not specify a specific PKI flow now actually use this mechanism. This means there is fairly decent test coverage in a general sense, plus the specific tests updated/added for this feature. This also adds a new KMS type that can be used to have distinct KMSes for upstream authentication vs. accepting from downstream.	3 years ago
Conor McCullough	8b0f149882	Replace broken link (#3119 ) Link to the old URL for the dynamic host catalog page removed, added the current valid path.	3 years ago
Dan Heath	d1e30af9ce	docs: Add links to new tutorials (#3106 ) * docs: Add links to new tutorials * docs: Make heading plural * docs: Small rewrite to force a commit	3 years ago
Dan Heath	e6e666443d	docs: Update FAQs with IAM role answer (#3093 ) * docs: Update FAQs with IAM role answer * docs: Cut first sentence after review * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> * Update website/content/docs/troubleshoot/faq.mdx Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>	3 years ago
Dan Heath	fd1140236e	docs: Update what is Boundary (#3033 )	3 years ago
dependabot[bot]	ef37369c2b	chore(deps): bump json5 from 2.2.0 to 2.2.3 in /website (#2802 ) Bumps [json5](https://github.com/json5/json5) from 2.2.0 to 2.2.3. - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](https://github.com/json5/json5/compare/v2.2.0...v2.2.3) --- updated-dependencies: - dependency-name: json5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	a711189337	chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 in /website (#2682 ) Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2) --- updated-dependencies: - dependency-name: decode-uri-component dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	8ef32cf46d	chore(deps): bump semver-regex from 3.1.3 to 3.1.4 in /website (#2136 ) Bumps [semver-regex](https://github.com/sindresorhus/semver-regex) from 3.1.3 to 3.1.4. - [Release notes](https://github.com/sindresorhus/semver-regex/releases) - [Commits](https://github.com/sindresorhus/semver-regex/commits/v3.1.4) --- updated-dependencies: - dependency-name: semver-regex dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Jim	86192f75eb	feature (auth/ldap): add LDAP auth method along with associated accounts and managed groups (#2912 ) * feature (auth): required schema changes for auth ldap method (#2669) chore (auth/ldap): move schema changes to next avail migration number * feature (auth/ldap): define AuthMethod and all its value objects (#2703) * feature (auth/ldap): storage protos * feature (auth/ldap): define AuthMethod and all its value objects * feature (auth/ldap): add repo and reading an auth method (#2718) * feature (auth/ldap): add Repository.CreateAuthMethod(...) and Repository.DeleteAuthMethod(...) (#2724) * feature (auth/ldap): add Repository.UpdateAuthMethod(...) (#2739) * feature (auth/ldap): add Account * feature (auth/ldap): add AuthMethod.EnableGroups * fix (auth/ldap): refactor AuthMethod.oplog to enforce proper constraints * feature (auth/ldap): add Account repo functions * refactor (auth/ldap): remove entry attributes from account Realized the entry attributes could have absolutely anything in them (including binary data) and since we absolutely don't have to have them there's just no reason to take on the risk. * feature (auth/ldap): add AuthMethod.UseTokenGroups * feature (auth/ldap): add Authenticate(...) * refactor (auth/ldap): ensure options take a context as the 1st parameter * feature (auth/ldap): add Account attribute maps * chore (auth/ldap): make fmt deltas * feature (auth/ldap): add managed groups (#2760) * tests (auth/ldap): add missing unit test to Repository.DeleteAccount(...) Add bits to test the delete operation when you're not able to generate oplog metadata * feature (auth/ldap): add managed groups fixup! feature (auth/ldap): add managed groups (#2760) * feature (auth/ldap): service proto definition (#2761) * feature (handlers/authmethods): add handlers for ldap auth method operations (#2794) * feature (auth/ldap): add Account attribute maps * chore (auth/ldap): update cap/ldap to latest version * feature (auth/ldap): add ldap api generation definitions * feature (authmethods): add ldap repo NewService(...) * feature (authmethods/ldap): add proper mask_mapping to protobufs * feature (authmethods): add support to get an ldap auth method * refactor (auth/ldap): export TestGenerateCA(...) * feature (authmethods): add support to create an ldap auth method * feature (authmethods): add support to delete an ldap auth method * feature (authmethods): add support to list ldap auth methods * refactor (auth/ldap): make urls optional for NewAuthMethod(...) * refactor (auth/ldap): export ldap.TestInvalidPem * chore: make fmt changes * fix (auth/ldap): properly handle group search config Add constraints and tests to ensure when an ldap AuthMethod.EnableGroups is true, and UseTokenGroups is false; that there's a GroupDn configured for finding a user's associated groups * feature (authmethods): add support to update an ldap auth methods * chore (db/ldap): tmp mv migrations so there's no conflict with ongoing work * feature (verifier): add ldap auth method to verifier bits * fix (controller): prevent panic when controller stops when there's no listener * feature (authmethods): add support to authenticate via ldap auth methods * chore (migrations): fix whitespace in stmt * chore: fmt fixup * tests (auth/ldap): invalid err msg * feature (cli/authmethods): add support for ldap auth-methods CRUD and authenticate (#2810) * feature (authmethods): add CLI support for ldap auth methods CRUD * tests (api/auth): ldap auth method classification tests * feature (authmethods): add CLI support for ldap auth authenticate * feature (auth/ldap): set request timeouts for ldap server connections * feature (handlers/authmethods): handle u_anon listing properly. * feature (account/handers): ldap account and managed group CRUDL APIs (#2852) * feature (auth/ldap) add repository Listing of ManagedGroupMemberAccount * feature (controller/handlers): add ldapRepoFn to accounts service * feature (auth/ldap) register ldap managed group subtype * feature (account/handlers): ldap account CRUDL APIs * feature (controller/handlers): add ldapRepo to managed groups service * feature (account/handlers): ldap managed group CRUDL APIs * docs (domain): add LDAP accounts, auth-methods and managed groups (#2857) * feature (ldap/cli) add ldap accounts and managed groups CRUDL commands (#2856) * fix (handlers/authmethods): fix ldap authorized actions (#2892) * feature (cli/ldap/authenticate): use primary auth method if none is provided (#2890) * fix (auth/ldap): support setting the state attribute * feature (cli/ldap/authenticate): use primary auth method if none is provided * feature (wh/ldap) add tests for new ldap auth method and accounts (#2919) * refactor (migrations/ldap): mv to correct directory * chore: add copyright headers * fix (api/authmethods/ldap): renumber new LdapAuthMethodAttributes field * fix (auth/ldap): allow the auth method state to be updated (#2951) * chore: update sdk and api versions for llb - this is tmp until merging * tests (managed groups): add required errContains for new test	3 years ago
XingLu Wang	ad5c6d836e	Update service-discovery.mdx (#2995 )	3 years ago
Dan Heath	d7049e4e79	docs: Update main branch with 0.12.0 revisions (#2975 ) * docs: Add HCP only to heading * docs: Add worker requirements * docs: Fix heading format and hierarchy * docs: Fix headings format * docs: Update feature name using "sessions" * docs: Fix heading hierarchy * docs: Fix headings format * docs: Fix spacing in title	3 years ago
Dan Heath	260b0ec51e	docs: Update 0.12.0 release notes with HCP links (#2955 )	3 years ago
Dan Heath	fc2bf00838	docs: Update Getting Started guide, direct address (#2855 ) * docs: Update Getting Started guide, direct address * docs: Delete unused image * docs: Resize image * docs: Resize image	3 years ago

1 2 3 4 5 ...

539 Commits (e460187508c869ece6fa1f8ba03bb0c91f2d7255)