boundary

Commit Graph

Author	SHA1	Message	Date
Dan Heath	e7c8d2ffc6	docs: Add feature matrix (#3993 )	2 years ago
Jim	61ef033fb6	chore (deps): update gldap dependency (#3989 )	2 years ago
Michael Gaffney	d638378d57	fix(vault): Set the Vault TLS client options if specified Two Vault client settings were not being properly used when constructing a Vault client. The `TLS Skip Verify` setting was only being set if a `CA Cert` was also configured. This fix sets the `TLS Skip Verify` when configured regardless of other settings. Closes #3961. The `TLS Server Name` setting was never being set. Bad programmers. This fix now sets it on the Vault client if the Vault Credential Store has been configured to use a value for this setting. Closes #3962.	2 years ago
Jeff Mitchell	a9e372930d	Revert `0bf60996c5` (#3990 ) Post-merge some issues were discovered with the ways typing is used for proto reflection. This will be reworked without moving the subtypes around.	2 years ago
Elim Tsiagbey	4239f6d4a9	Update changelog (#3944 ) * chore: Update changelog for 0.14.2 release	3 years ago
Jeff Mitchell	d98523be9f	Fix failing test (#3984 )	3 years ago
Jeff Mitchell	66c0f152d9	Revert "test(globals): Fix failing tests" (#3983 ) This reverts commit `274aca755f`.	3 years ago
Michael Gaffney	274aca755f	test(globals): Fix failing tests This fixes test failures introduced in a recent refactoring. Blame: `0bf60996c5`	3 years ago
Jeff Mitchell	9e07609560	Add node update due to EOL node version (#3975 )	3 years ago
dependabot[bot]	bfea91b0a0	chore(deps): bump hashicorp/setup-terraform from 2.0.3 to 3.0.0 (#3963 ) Bumps [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) from 2.0.3 to 3.0.0. - [Release notes](https://github.com/hashicorp/setup-terraform/releases) - [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md) - [Commits](`633666f66e...a1502cd9e7`) --- updated-dependencies: - dependency-name: hashicorp/setup-terraform dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Sarah Thompson	c5407919b0	update linux package license to BUSL-1.1 (#3577 )	3 years ago
guangwu	8bb6632512	chore: remove refs to deprecated io/ioutil (#3811 ) Signed-off-by: guoguangwu <guoguangwu@magic-shield.com>	3 years ago
PPacent	70118882a0	Update README.md (#3734 ) Adding link to "What is Boundary?" in the README Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	3 years ago
Sorawis Nilparuk (Bo)	45eb3b7b51	support remote-dev format for cluster ID (#3637 )	3 years ago
Vivek Kumar	6f26bcd22c	fix:typo error in CONTRIBUTING.md (#3965 )	3 years ago
Jeff Mitchell	48082535e5	Bump plugin deps (#3976 )	3 years ago
Jeff Mitchell	0bf60996c5	Add generic read/update/delete commands (#3967 ) * Add generic read/update/delete commands This adds three generic commands that use the resource prefix to determine the subcommand to run and pass through args over to that subcommand. Since this occurs very early on and to avoid loading essentially every internal resource package, I moved subtype definitions to globals. * Update main.go Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * Update changelog and remove another deprecated command --------- Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	3 years ago
Jeff Mitchell	de4ce93931	Update main module deps (#3971 )	3 years ago
Jeff Mitchell	34b558fdc0	Update api deps (#3970 )	3 years ago
Jeff Mitchell	a6c8057244	Update sdk deps (#3969 ) * Update sdk deps * Use main eventlogger versions	3 years ago
hashicorp-tsccr[bot]	b5ae6f0ceb	Result of tsccr-helper -log-level=info -pin-all-workflows . (#3968 ) Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>	3 years ago
Michael Li	466b5e20ea	test(e2e): Add support for `-additional-valid-principals` test (#3966 ) * test(e2e): Remove unnecessary error checks * test(e2e): Install docker cli in test runner	3 years ago
Michael Gaffney	90276b5e91	tests: Set a default job run interval based on the test deadline The Vault Credential Store only accepts Vault tokens that have a TTL greater than the internal job scheduler's run frequency. This prevents a Vault Credential Store from being created with a Vault token that will expire before Boundary can renew it. The Vault test server, by default, creates Vault tokens with a TTL equal to the duration of time remaining until `t.Deadline()` is reached. This change sets the test controller's default job scheduler duration to be half of time remaining until `t.Deadline()`. The default job scheduler duration can still be overridden by setting a duration on `TestConrollerOpts.SchedulerRunJobInterval`. This change fixes the error received when running: go test -timeout 30s \ -tags devlicense \ -run '^TestList$' \ github.com/hashicorp/boundary/internal/tests/api/credentialstores Which returned this error: {"kind":"Internal", "message":"credentialstores.(Service).createInRepo: unable to create credential store: vault.(Repository).CreateCredentialStore: unknown, unknown: error #0: scheduler interval must be greater than token ttl. scheduler jobs interval value: 1m0s"}	3 years ago
Sepehr	4dce290aeb	telemetry(observations): fix the details flag check (#3960 ) * telemetry(observations): fix the details flag check * telemetry(observations): fix the test names	3 years ago
Jeff Mitchell	b000aa3068	Fix dev key generation (#3951 ) In #2076 the refactor changed the position of a parenthesis, causing the dev key to truncate the base64 representation instead of specifying which bytes to base64 encode. We don't need this slicing anymore anyways since we now do individual key generation calls so just remove it.	3 years ago
Mark Collao	22d400674a	turn on osv scanning (#3954 )	3 years ago
Jim	75cef86a34	feat (authmethod/password): add additional telmemetry for passwd acct authen (#3958 )	3 years ago
dependabot[bot]	b528696325	chore(deps): bump github.com/docker/docker (#3949 ) Bumps [github.com/docker/docker](https://github.com/docker/docker) from 23.0.3+incompatible to 24.0.7+incompatible. - [Release notes](https://github.com/docker/docker/releases) - [Commits](https://github.com/docker/docker/compare/v23.0.3...v24.0.7) --- updated-dependencies: - dependency-name: github.com/docker/docker dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Johan Brandhorst-Satzkorn	6081b6c58d	internal/credential: simplify TestObject test helper (#3899 ) The TestObject test helper previously returned an error, but it's easier to have it perform the error check itself, as it conventionally done with test helpers.	3 years ago
Sepehr	f9dee55e4d	Telemetry(observations): add oidc and ldap observation events (#3945 ) * telemetry(observations): Add observations for oidc and ldap authentications * telemetry(observations): Add tests ldap and oidc observation events	3 years ago
Michael Li	f0a4bce17c	test(e2e): Add test for controller-led worker registration (#3882 ) * test(e2e): Add test for controller led worker registration * chore(e2e): Rename log files to ensure uniqueness This updates the log files to be based on the scenario name instead of just the test package in case some scenarios run the same test package	3 years ago
Dan Heath	c93edfb612	docs: Document additional valid principals (#3914 )	3 years ago
Johan Brandhorst-Satzkorn	940eb61282	sqltest: fix typo (#3886 )	3 years ago
Johan Brandhorst-Satzkorn	894927ffd2	internal/host: fix inconsistent receiver (#3894 ) This is a lint error but wasn't caught because it was a historic problem. It's appearing again now because we're adding another method to this type as part of the pagination workflow.	3 years ago
Jim	9e6ebdddc6	chore: add changelog for ldap fix PR #3929 (#3934 )	3 years ago
Jim	83e0e9b3f7	fix (auth/ldap): fix encoding of mTLS client key (#3929 ) We need to encode the key as a PEM before initializing cap's ldap client	3 years ago
mickael-hc	fe948942c2	security-scan: temporarily pin semgrep to 1.45.0 (#3931 )	3 years ago
Michael Li	752f20fa27	test(e2e): Wait until target ec2 instance is ready to be used (#3910 )	3 years ago
Timothy Messier	d865ff16a4	ci(schema-diff): Fix error with large diffs (#3909 ) When generating the JSON for submitting the github comment, if the message was too large, the workflow would fail with the following error: /usr/bin/jq: Argument list too long This fix switches to using the `--rawfile`, which allows jq to process the large comment.	3 years ago
dani	c89777de41	Expose Valid Principals for Vault SSH Signed Certs (#3791 ) * allow additional valid principals when creating vault ssh signed cert cred lib * add additional_valid_principals field to credential libraries documentation page	3 years ago
Elim Tsiagbey	c95081dde9	chore: Update changelog for bug fix (#3904 ) Update the changelog details for High CPU Utilization bug fix: https://github.com/hashicorp/boundary/pull/3884	3 years ago
Elim Tsiagbey	5741807b4a	fix: monitorUpstreamConnectionState CPU consumption (#3884 ) * fix: monitorUpstreamConnectionState CPU consumption `monitorUpstreamConnectionState()` is a goroutine that listens for GRPC client connection changes using GRPC's `WaitForStateChange` method. `monitorUpstreamConnectionState()` was consuming the a lot of CPU. It was continuously running and not actually waiting for state changes. The `state` for `monitorUpstreamConnectionState()` was not getting correctly updated which caused the loop to continuously run instead of waiting for new state changes. Update GRPC `WaitForStateChange` method to use the same `state` that gets updated.	3 years ago
Jim	1c330543a7	fix (oplog keys): fix issue with migration of oplog keys to new tables (#3868 ) We inadvertently used kms.GetWrapper(ctx, am.ScopeId, kms.KeyPurposeDatabase) which resulted in the use of a database key for an oplog entry. See: https://github.com/hashicorp/boundary/pull/3665/files#diff-bcf83b5283886c98fc45b6435fdc94d87d545b2768c6beac8acd14eb9d6b13f1 This fixes the issue with the missing "Database" purpose key when we converted the oplog keys into their own tables. We chosen to truncate the existing oplog entries to eliminate any references to a Database kms key in existing oplog entries.	3 years ago
Jeff Mitchell	fb4a5a98dc	Add some target fields and move some things around (#3879 ) In preparation for putting proxy code in the api package this creates some necessary fields in the target output and it pre-moves credential parsing and proxy handshake code to their new places. This will make the diff for the actual proxy code move quite a bit smaller. Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	3 years ago
Michael Li	82b3f202c0	chore(e2e): Add GetUserPolicy permission to service user (#3877 )	3 years ago
Jeff Mitchell	20ac42c851	Add some useful dev flags (#3865 )	3 years ago
Michael Li	29a4d8c4d9	test(e2e): Change deadlock timeout to default (#3874 ) This was occasionally causing some flaky behavior in tests. Removing this setting to use the default timeout value.	3 years ago
Michael Li	e089aa219d	test(bats): Add `list` tests for other resource types (#3869 )	3 years ago
Michael Li	cad044926f	chore(e2e): Add always condition (#3866 )	3 years ago
Michael Li	7d581abac7	test(e2e): Add check for vault worker filters (#3859 )	3 years ago

1 2 3 4 5 ...

3503 Commits (e7c8d2ffc619ddd1989fdf51b0a3f6632148dd7b) All Branches Search

3503 Commits (e7c8d2ffc619ddd1989fdf51b0a3f6632148dd7b)

All Branches