boundary

Commit Graph

Author	SHA1	Message	Date
Jim	ebea283421	fix (kms): Add kms.ReconcileKeys(...) to fix missing audit DEK scenario (#1711 ) This fix addresses the situation where an existing boundary database doesn't have the audit DEKs in the global scope.	4 years ago
Thor	7fa2cd2526	rename migration from 01-09 after bad merge (#1709 ) * rename migration from 01-09 after bad merge	4 years ago
Thor	ad31b6d6c3	repo: Return connection informat in Session response object (#1690 ) Add connections to the Session object * db: creat new session_list view * repo: session use new session_list view	4 years ago
Jeff Mitchell	8cd8453113	Update dev loopback host plugin flag name	4 years ago
Jeff Mitchell	8110e0eab3	Increment version of host during updates (#1707 ) Currently host does not use a version, which means it's not protected against race conditions of either itself or its value objects. This adds and plumbs through version to ensure that if a host or its value objects change that they are not going to be affected by a race condition.	4 years ago
Jim	1b6c9a25c8	Add more opts when using Create + WithOnConflict (#1706 )	5 years ago
Jeff Mitchell	b3fd23863f	Add external ID to host output (#1705 ) This also fixes a bug if no hosts were returned where the job would run over and over in a loop, and some other cleanup.	5 years ago
Todd	46a1edcb3b	Add DNS Names and IP Addresses to the CLI output. (#1701 )	5 years ago
Todd	78dc6cf370	OnConflict constraints for adding host ip and dns names in upsertHosts (#1700 ) * Ignore constraint violations when adding ip addresses and dns addresses that already exist.	5 years ago
Jim	c6d79bc911	feature (db): Add WithOnConflict support to CreateItems(...) (#1699 )	5 years ago
Todd	5d2b0e94aa	Update sync interval seconds field. (#1698 ) * Update sync interval seconds field. * If the sync interval was updated, schedule the next sync job wakeup immediately. * Calculate the next sync time for the scheduler should wake up if we only updated the sync interval.	5 years ago
Todd Knight	5850001a07	Rename file to match others in directory and remove TODO.	5 years ago
Todd	b16ce175e5	Fix secrets clearing bug in update. Changes to update count behavior for catalogs (#1691 ) * Fix secret clearing bug in update. Always return 1 catalog updated if we can find a catalog w/ a matching version.	5 years ago
Todd	5cfcc41f00	Fix bug for adding preferred endpoint when non existed prior. (#1692 )	5 years ago
Todd Knight	f41bceda83	Merge from main and `make gen`	5 years ago
Todd Knight	884e1f2d18	Merge branch 'main' into plugin-hostcatalogs # Conflicts: # go.mod # sdk/go.mod	5 years ago
Jim	f46803d808	feature (authmethod): Add managed grps perms to auth collection actions (#1695 )	5 years ago
Todd	61f9d1f6af	Add update set handler and sdk functionality (#1684 )	5 years ago
Jim	1ac151100e	docs (internal/db): Add docs Update/Delete operations using WithWhere (#1687 )	5 years ago
Todd	29b4537d3b	Reference PreferredEndpoints by top level struct name (#1688 ) * Reference PreferredEndpoints by top level struct name instead of embedded proto GetPreferredEndpoint method. Reorganize the sql files a little. * Make PreferredEndpoints replayable. Test refactoring to remove variables that persist across test calls. DeleteItems instead of trying to use WithWhere.	5 years ago
Jeff Mitchell	30e9f944a2	Add sync interval to host sets (#1680 ) This adds a parameter to host sets allowing the sync interval to be user-specified on a per-host-set basis. A value of -1 disables syncing; a value of null uses the current default.	5 years ago
Todd Knight	dba7c6b531	Fix value of op constant for syncSets	5 years ago
Chris Marchesi	c2cd6febca	internal/host/plugin: add UpdateSet (#1686 ) * internal/host/plugin: add UpdateSet This adds the UpdateSet repository function. UpdateSet runs the OnUpdateSet plugin call within the transaction as per the changes in #1683. The plugin call returns the updated set, the hosts in the set, the rows updated, and any error. * Ensure that attributes can be cleared by supplying a full null * move version increment to the end and track perferred endpoint update separately * move plugin call to end of transaction * only clone returned set once, and move host fetch call out of transaction * Request a sync when attributes are updated * Add test to assert that old preferred endpoints are being removed correctly	5 years ago
Todd	2229d1a819	Call OnCreate or OnUpdate on the plugin after db constraints are checked (#1683 ) * Only call the Plugin at create/update time after the db has been partially updated. This allows more constraints to be checked prior to calling the plugin.	5 years ago
Todd	050553ffcf	Add update catalog support for plugin based catalogs in handler and go sdk (#1673 ) * Create catalog service handler for updating plugin. Add tests for handler and run make fmt. Silently drop attributes where the value is nil when creating the catalog or set.	5 years ago
Jim	c047c4d89d	refactor (db): Remove the internal/db test tables from the migrations (#1675 )	5 years ago
Jim	048fceaf54	feature (workers): Add audit events for worker requests (#1681 ) * feature (audit events): Add interceptor for auditing worker requests * feature (events): Add default deny filter for worker status events * feature (worker audit events): Add tags to SessionService req/resp	5 years ago
Jim	b96f57ec4e	fix (events): Only "sign" audit events (#1677 ) * chore: Update eventlogger dependency. We need the latest version, so we can limit the type of events that are signed. * fix (events): Only "sign" audit events	5 years ago
Jeff Mitchell	48ac8b8f0b	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jim	eecd878b36	feature: Add signing (hmac-sha256) of audit entries (#1666 )	5 years ago
Chris Marchesi	157f1a091b	internal/host/plugin: add update catalog test for empty/same description (#1672 ) This is to mainly get coverage on the empty description case, but it follows the same logic as the "update name to same" test.	5 years ago
Timothy Messier	242e353f18	fix(schema): Prevent duplicate versions per edition (#1670 ) This should help prevent issues like the one fixed in `f2ad4de554`. A version for a particular edition should only exist once, previously which ever file was read last for a version would be included, which would lead to some migrations not running.	5 years ago
Chris Marchesi	0670e272e3	internal/host/plugin: Add UpdateCatalog (#1634 ) * internal/host/plugin: Add UpdateCatalog This adds support for updating plugin-based host catalogs. The workflow is: * The existing catalog is fetched. * Any attribute changes are patched against it, along with other changes such as name and description. * Both the existing catalog, and the state of the catalog as it will exist post-update, along with any persisted secrets, are sent to the plugin via an OnUpdateCatalog request. Upon success, the following is done: * The record is updated if non-secret updates need to be made. * Secrets are updated if they still exist. * If an empty secret set was sent back, secrets are instead deleted. * If the secrets field was instead null, secret update is skipped altogether. There has also been a lot of helper code added to the tests to help make the update tests more readable and reduce boilerplate. While the create tests have not been updated to use these new helpers, it might be a good idea to do so for consistency. * move secret/persisted state closer to plugin call * Update internal/host/plugin/repository_host_catalog.go Co-authored-by: Todd <T.Alan.Knight@gmail.com> * Update internal/host/plugin/repository_host_catalog_test.go Co-authored-by: Todd <T.Alan.Knight@gmail.com> * move all test helpers for UpdateCatalog inline * WIP - transparent attributes struct/wire conversion * Revert "WIP - transparent attributes struct/wire conversion" This reverts commit `31af1b1b7e`. * deal with multiple attribute masks * Note TODO for upsertQuery for HostCatalogSecret * add version check guard * Update internal/host/plugin/host_catalog_secret.go Co-authored-by: Todd <T.Alan.Knight@gmail.com> * remove redundant JIRA reference * don't separate number of updated catalogs and secrets * increment version when secrets is the only thing being updated * add another test for updating both catalog and secrets at once * correct comment for mock plugin manager section * add first-part path matching for secrets * update plugin lookup error to return errors.Internal * only add name/description to plugin request if they are non-empty * update duplicate tests to use two project scopes * remove unused test checks * return plugin record along with host catalog in update * move away from using passed in catalog after patching newCatalog * use t.Cleanup() instead of defer Co-authored-by: Todd <T.Alan.Knight@gmail.com>	5 years ago
Jim	b6ad76e4d2	fix (db): Clean up tests a bit (#1669 )	5 years ago
Chris Marchesi	165cc5ef1b	fix ineffectual assignment to err in DeleteCatalog (#1664 ) Was being caught by my linters. Looks like the error wasn't being checked after getCatalog.	5 years ago
Jim	f2ad4de554	fix (migrations): Adjust migration numbers to remove dups (#1667 )	5 years ago
Todd	54bccf3674	Mask manager can now include mask paths w/ a specified prefix which would be filtered otherwise (#1654 ) * Update the mask manager to always allow fields containing a prefix which matchs a passedThroughPrefix. This will be useful when updating plugin based host catalog and sets since attributes and secrets cannot be contained in the mask manager mapping.	5 years ago
Jim	f63ca1313c	feature (kms/audit): Add base audit key type (#1651 ) * feature (db): Add the ability to enable debug output for a connection * refactor: Use scope.Global instead of "global" * feature (db/migrations): Add kms audit keys Add schema changes to support a new DEK for audit crypto operations. * feature (kms/audit): Add audit key type All the bits required to define a new DEK concrete type for operating on audit entries. * refactor (db): Remove deprecated migration unit tests. We added a new audit DEK to kms.CreateKeysTx(...). Unfortunately, unit tests like TestMigrations_UserDimension, Test_PrimaryAuthMethodChanges and TestMigrations_CredentialDimension have an indirect dependency on a specific historical set of DEKs via an indirect call kms.CreateKeysTx. This of course fails because the new DEK's tables is not a part of pinned migration versions that these tests depend on.	5 years ago
Jeff Mitchell	80d41b9044	Merge branch 'main' into plugin-hostcatalogs	5 years ago
Jim	dd2c3807cd	refactor: Move functions from kms pkg to new libs/crypto pkg (#1650 )	5 years ago
Chris Marchesi	1bc9a07316	populate correct field for host catalog secret (#1661 )	5 years ago
Jeff Mitchell	03de1c4b21	Pass namespace to the Vault client (#1660 ) The namespace was plumbed all the way through the API but isn't actually set on the client when it is created. Fixes #1597	5 years ago
Jim	4df3b40def	feature (db): Add support for multi-column PKs (#1658 )	5 years ago
Jeff Mitchell	b9269ce93c	Update available actions for host resource (#1659 )	5 years ago
Todd	1ff2968409	Warehouse contains "Unsupported" host_address for plugin based hosts (#1656 ) * Populating the warehouse with the host_address from a plugin basd host is unsupported. * Adding test for plugin hosts in the datawarehouse.	5 years ago
Timothy Messier	1a24a0fc2f	feat(sqltest): Make container name configurable	5 years ago
Todd	808b986834	Read and List Plugin based Hosts (#1655 ) * Add ability to read and list hosts. Tests to follow. * Add tests for reading and listing as well as validation checks to not modify hosts. * Add IpAddress and DnsNames to the api resource. Populate the plugin info. * Adding go sdk tests for reading and listing hosts and ensuring update and deleting is disallowed.	5 years ago
Timothy Messier	decc3ec2cf	test(targets): Change test to not depend on response order (#1653 ) This test started failing when the order of the list response changed. Since the order does not matter, this test was updated to not depend on the order.	5 years ago
Timothy Messier	7d7d8af694	feat(cli): Add support for egress credentials for targets command	5 years ago
Timothy Messier	1da403a2d2	feat(api): Add support for egress credentials for targets endpoint	5 years ago

1 2 3 4 5 ...

983 Commits (ebea283421d596d541cb7e9e6cce6a11c0b2df07)