423 Commits (e596daf34d444872f072de49a4ee2d16caa965eb)

Author	SHA1	Message	Date
Jeff Mitchell	e596daf34d	Add hclog adapter and gating to eventer (#1915) ... This contains to related things: 1. An adapter allowing an hclog interface to take in information and send them to the eventer 2. A gate on the eventer, which is the analogue to the behavior prior to eventing where we'd ensure logs were not printed prior to the startup information. Without this, plugin logs using the hclog adapter will start showing up too early.	4 years ago
Jeff Mitchell	7eb29261b2	Update to go-kms-wrapping version 2, and plugin-based KMS (#1901)	4 years ago
Timothy Messier	9aa2d4cd84	test(session): Speed up some tests around dead worker cleanup ... This removes or reduces the time that is waited in a number of tests by allowing the grace period time be a configuration option on the connection repository.	4 years ago
Timothy Messier	79670180a7	refact(session): Move domain logic of Worker Status into domain service ... This creates a domain service function `session.WorkerStatusReport`. The service performs two functions: 1. Checks the status for all of the reported sessions, returning a report of the sessions that are in a "non-active" state, i.e. "cacneling" or "terminated". 2. Looks for any "orphaned" session connections, i.e. connections that are active but were not reported by the worker. These connections are marked as closed. This also removes the "ShouldCloseConnectionsOnWorker" logic, as this was determined to not be a possible state, and was unnecessary.	4 years ago
Timothy Messier	cdb035f5fc	test(worker_service): Add baseline tests for Status ... This adds tests for the Status method of the WorkerService grpc service that is exposed by controller.	4 years ago
irenarindos	32132d6bc1	refactor(session connections): Refactor connection closure	4 years ago
irenarindos	3482f91a17	refactor(connections): Move connect connect to the Connection repo	4 years ago
Irena Rindos	5a2c0db586	fix(session connections): Create session connection repository	4 years ago
Louis Ruch	f8b27645d9	fix(scheduler): Update job run query to not error on running conflict (#1914)	4 years ago
Todd	3242d3936e	Add test coverage for dns names on a host when authorizing a session in target_service_test.go. Add the recent fixes to the changelog. (#1854)	4 years ago
Justen Walker	bd30ff4140	fix(controller/targets): authorize-session should allow h_ ids (#1853) ... * fix(controller/targets): authorize-session should allow h_ ids The targets controller previously only allowed hosts from a static catalog since it checked for the ID subtype from the static package. This change validates host ids with the plugin.Subtype as well Fixes: #1850 * test: cover authorize-session with host id Add a regression test to cover the case where an explicit host ID was given when calling AuthorizeSession	4 years ago
Haotian	fa00a06bef	feat(host): Add host set information to static host (#1828) ... * feat(host): Add host set information to static host Updates LookupHost and ListHost API to include sets a static host is part of, as like with plugin hosts. * test: updated TestList_Plugin and TestCrud to be more consistent under race conditions	4 years ago
Louis Ruch	61fe77572e	chore: make tools & make gen	4 years ago
Louis Ruch	c4506ec743	feat(scheduler): Add support for run now option	4 years ago
Louis Ruch	a90f1f4eb1	feat(target): Decode based on credential type	4 years ago
Jim	591ec476e7	refactor: Update internal/db and oplog to use go-dbw package for database operations. (#1785) ... * chore: Add new dbw dependency * refactor: Convert to use dbw.DB * refactor (db): Change GetTicket(...) signature * feature (db tests): Added TestDeleteWhere(...) Adding this allows us to eliminate a leak of the gorm library * refactor: Add ctx to ScanRows(...) signature This is required to refactor all the deprecated errors pkg calls. This refactor required adding a context to quite a few call chains and in particular the job scheduler bits * feature (db/tests): Add support for test opt: WithTestLogLevel(...) This test only option allows callers to specify a log level for the underlying db package (where supported/applicable) when calling TestSetup(...) * refactor (db): Simplify Db type Only store the underlying *DB and create the *RW on demand when needed. * refactor (oplog): Port to using dbw pkg for db operations * refactor (db): Remove gormDB(...) func * tests (db): Add unit tests for TestDeleteWhere(...) * chore: make fmt changes to formatting	4 years ago
Louis Ruch	425a56179f	feat(worker): Implement egress credentials ... Egress credentials Issued during AuthorizeSession are stored in the session repo. These credentials are retrieved and stored in-memory on the worker during the LookupSession call. Each proxy handler will need to handle the credentials as required.	4 years ago
Timothy Messier	27ebfa1125	Merge pull request #1796 from hashicorp/llb-credential-type-mapping ... This allows users to set the type of credential that a credential library will provide. A User Password credential type and an Unspecified credential type are included with the expectation that additional credential types will be added in the future. This change also adds the credential type attribute to existing credential libraries and sets it to Unspecified. The credential type can only be set when a credential library is created. The vault credential library includes functionality for converting a Vault Secret into a User Password Credential. This mapping is enabled by default, however, the user can override the attributes used for this mapping.	4 years ago
Louis Ruch	d46daa573f	feat(server): Add grpc_middleware recovery interceptor	4 years ago
Louis Ruch	e75f1d2f73	feat(credential): Add mapping override update for API/SDK/CLI ... This change adds support for updating a credential mapping override on a credential library.	4 years ago
Louis Ruch	1cc35fb0df	feat: Credential library mapping API/SDK/CLI on create path ... * feat(sdk): Add fields to credential library proto Adds CredentialType and CredentialMappingOverrides to credential library SDK. * feat(api): Add fields to credenttial library service Adds support for CredentialType and CredentialMappingOverrides to the credential library service (API) * feat(cli): Add feilds for credential library cmd Adds support for CredentialType and CredentialMappingOverrides to the credential library cmd command.	4 years ago
Louis Ruch	72a15b8d2d	bug(target): Add *-host-sources actions to target service (#1794)	4 years ago
Jim	baa1d88f1f	feature: Add client ip to inbound request information (#1678) ... * feature: Add client ip to inbound request information * feature (workers): Add the user's client IP to a session's connection information (#1749)	4 years ago
Thor	8c842df8a8	Remove public_id and session id from Connection api (#1767) ... * removed public_id and session_id from Connection msg	4 years ago
Timothy Messier	0cfd8279b0	fix(controller/targets): Fix creation of credential libraries ... The arg order was incorrect for ingress/egress credentials. Ref: 2cc58ff901 Blame: 36f1ae75f7	4 years ago
Timothy Messier	533b434d1a	refact(controller/targets): Move tcp functionality into subpackage ... This follows a similar pattern as the target domain package, providing a subpackage for the tcp target functionality, allowing this to be pluggable.	4 years ago
Timothy Messier	c9b99306e1	refact(target): Add NewFunc to registry ... This adds a new requirement onto subtypes to register a NewFunc. Previously the subtypes where implementing this function anyway, but the target package was not including them in the registry. This resulted in packages that use the target package needing to import the subtypes directly, which we want to avoid. This refactor will require the subtypes to register their NewFunc which can then be used by `target.New` so packages that need to create targets can do so by only using the target package. This also updates the tcp subpackage to register a NewFunc.	4 years ago
Thor	9f7c650101	api: Returns connections as part of sessions (#1714) ... * session.proto: added connections to Session message * make proto * handler: convert connections on toProto * updated unit test to check connections	4 years ago
Jeff Mitchell	5417cc5cb0	Fix setting nil attributes on host sets (#1746) ... This is the analogue of #1743 but for host sets	4 years ago
Jeff Mitchell	269fb94885	Add test controller option to not use a templated database	4 years ago
Jeff Mitchell	1c39691023	Fix setting host catalog attributes to nil (#1743) ... Internally attributes are not allowed to be the null value. However, as currently implemented, this then breaks our normal model of sending an explicit `null` in the JSON to reset/clear a field. This is a problem because the CLI doesn't have a way to say "set this but to empty" without a lot of hoops, and causes some issues for API users and TF as well. This changes PatchBytes and PatchStruct to return an empty value (or marshaled empty value in the case of PatchBytes) if the source is null or empty. In the host catalog update function we then always set this value if it's in the db mask (removing the nil check). Together this means a null value ends up coming out as an empty value (and thus valid for the DB) from PatchStruct/PatchBytes, and our API translation function already returns nothing for attributes if the length of the fields are zero.	4 years ago
Louis Ruch	9bec68f32c	refact(servers): Cleanup redundant if else (#1741)	4 years ago
Jeff Mitchell	95568ef07f	Fix tests using multiple controllers (#1734) ... The previous PR only initialized plugins if they were required, which meant that there may not actually be a plugin manager running because a second node would not actually create the dev database, which is where the plugin was being added. The assumption that a plugin manager is running is still a fine one at the moment, but we just need to make sure it's running in _all_ cases.	4 years ago
Jeff Mitchell	5559cf54d3	Don't always assume plugins should be activated (#1732)	4 years ago
Jeff Mitchell	3b83184700	Add missing read only check on secrets hmac field in handler (#1729)	4 years ago
Todd	056e72491d	Attempt to fix the ci error. (#1723)	4 years ago
Louis Ruch	0cf9573f24	chore: make fmt	4 years ago
Louis Ruch	c33efbf223	chore: make fmt (#1721)	4 years ago
Todd	1417e17909	Fix nil pointer error when listing by non existing host catalog. (#1720) ... * Fix nil pointer error when listing hosts from nonexisting host catalog.	4 years ago
Todd	b1c53951d5	Use the correct collection actions response when updating host catalogs. (#1718)	4 years ago
Jeff Mitchell	866bfceefc	Add secrets_hmac to host catalog output (#1712) ... Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Jim	ebea283421	fix (kms): Add kms.ReconcileKeys(...) to fix missing audit DEK scenario (#1711) ... This fix addresses the situation where an existing boundary database doesn't have the audit DEKs in the global scope.	4 years ago
Jeff Mitchell	8110e0eab3	Increment version of host during updates (#1707) ... Currently host does not use a version, which means it's not protected against race conditions of either itself or its value objects. This adds and plumbs through version to ensure that if a host or its value objects change that they are not going to be affected by a race condition.	4 years ago
Jeff Mitchell	b3fd23863f	Add external ID to host output (#1705) ... This also fixes a bug if no hosts were returned where the job would run over and over in a loop, and some other cleanup.	4 years ago
Todd	5d2b0e94aa	Update sync interval seconds field. (#1698) ... * Update sync interval seconds field. * If the sync interval was updated, schedule the next sync job wakeup immediately. * Calculate the next sync time for the scheduler should wake up if we only updated the sync interval.	4 years ago
Todd	b16ce175e5	Fix secrets clearing bug in update. Changes to update count behavior for catalogs (#1691) ... * Fix secret clearing bug in update. Always return 1 catalog updated if we can find a catalog w/ a matching version.	4 years ago
Todd Knight	f41bceda83	Merge from main and `make gen`	4 years ago
Todd Knight	884e1f2d18	Merge branch 'main' into plugin-hostcatalogs ... # Conflicts: # go.mod # sdk/go.mod	4 years ago
Jim	f46803d808	feature (authmethod): Add managed grps perms to auth collection actions (#1695)	4 years ago
Todd	61f9d1f6af	Add update set handler and sdk functionality (#1684)	4 years ago