411 Commits (ecbeab9035cfcff8ec0de74db12f3a69fa2dfe3d)

Author	SHA1	Message	Date
Louis Ruch	61fe77572e	chore: make tools & make gen	4 years ago
Louis Ruch	c4506ec743	feat(scheduler): Add support for run now option	4 years ago
Louis Ruch	a90f1f4eb1	feat(target): Decode based on credential type	4 years ago
Jim	591ec476e7	refactor: Update internal/db and oplog to use go-dbw package for database operations. (#1785) ... * chore: Add new dbw dependency * refactor: Convert to use dbw.DB * refactor (db): Change GetTicket(...) signature * feature (db tests): Added TestDeleteWhere(...) Adding this allows us to eliminate a leak of the gorm library * refactor: Add ctx to ScanRows(...) signature This is required to refactor all the deprecated errors pkg calls. This refactor required adding a context to quite a few call chains and in particular the job scheduler bits * feature (db/tests): Add support for test opt: WithTestLogLevel(...) This test only option allows callers to specify a log level for the underlying db package (where supported/applicable) when calling TestSetup(...) * refactor (db): Simplify Db type Only store the underlying *DB and create the *RW on demand when needed. * refactor (oplog): Port to using dbw pkg for db operations * refactor (db): Remove gormDB(...) func * tests (db): Add unit tests for TestDeleteWhere(...) * chore: make fmt changes to formatting	4 years ago
Louis Ruch	425a56179f	feat(worker): Implement egress credentials ... Egress credentials Issued during AuthorizeSession are stored in the session repo. These credentials are retrieved and stored in-memory on the worker during the LookupSession call. Each proxy handler will need to handle the credentials as required.	4 years ago
Timothy Messier	27ebfa1125	Merge pull request #1796 from hashicorp/llb-credential-type-mapping ... This allows users to set the type of credential that a credential library will provide. A User Password credential type and an Unspecified credential type are included with the expectation that additional credential types will be added in the future. This change also adds the credential type attribute to existing credential libraries and sets it to Unspecified. The credential type can only be set when a credential library is created. The vault credential library includes functionality for converting a Vault Secret into a User Password Credential. This mapping is enabled by default, however, the user can override the attributes used for this mapping.	4 years ago
Louis Ruch	d46daa573f	feat(server): Add grpc_middleware recovery interceptor	4 years ago
Louis Ruch	e75f1d2f73	feat(credential): Add mapping override update for API/SDK/CLI ... This change adds support for updating a credential mapping override on a credential library.	4 years ago
Louis Ruch	1cc35fb0df	feat: Credential library mapping API/SDK/CLI on create path ... * feat(sdk): Add fields to credential library proto Adds CredentialType and CredentialMappingOverrides to credential library SDK. * feat(api): Add fields to credenttial library service Adds support for CredentialType and CredentialMappingOverrides to the credential library service (API) * feat(cli): Add feilds for credential library cmd Adds support for CredentialType and CredentialMappingOverrides to the credential library cmd command.	4 years ago
Louis Ruch	72a15b8d2d	bug(target): Add *-host-sources actions to target service (#1794)	4 years ago
Jim	baa1d88f1f	feature: Add client ip to inbound request information (#1678) ... * feature: Add client ip to inbound request information * feature (workers): Add the user's client IP to a session's connection information (#1749)	4 years ago
Thor	8c842df8a8	Remove public_id and session id from Connection api (#1767) ... * removed public_id and session_id from Connection msg	4 years ago
Timothy Messier	0cfd8279b0	fix(controller/targets): Fix creation of credential libraries ... The arg order was incorrect for ingress/egress credentials. Ref: 2cc58ff901 Blame: 36f1ae75f7	4 years ago
Timothy Messier	533b434d1a	refact(controller/targets): Move tcp functionality into subpackage ... This follows a similar pattern as the target domain package, providing a subpackage for the tcp target functionality, allowing this to be pluggable.	4 years ago
Timothy Messier	c9b99306e1	refact(target): Add NewFunc to registry ... This adds a new requirement onto subtypes to register a NewFunc. Previously the subtypes where implementing this function anyway, but the target package was not including them in the registry. This resulted in packages that use the target package needing to import the subtypes directly, which we want to avoid. This refactor will require the subtypes to register their NewFunc which can then be used by `target.New` so packages that need to create targets can do so by only using the target package. This also updates the tcp subpackage to register a NewFunc.	4 years ago
Thor	9f7c650101	api: Returns connections as part of sessions (#1714) ... * session.proto: added connections to Session message * make proto * handler: convert connections on toProto * updated unit test to check connections	4 years ago
Jeff Mitchell	5417cc5cb0	Fix setting nil attributes on host sets (#1746) ... This is the analogue of #1743 but for host sets	4 years ago
Jeff Mitchell	269fb94885	Add test controller option to not use a templated database	4 years ago
Jeff Mitchell	1c39691023	Fix setting host catalog attributes to nil (#1743) ... Internally attributes are not allowed to be the null value. However, as currently implemented, this then breaks our normal model of sending an explicit `null` in the JSON to reset/clear a field. This is a problem because the CLI doesn't have a way to say "set this but to empty" without a lot of hoops, and causes some issues for API users and TF as well. This changes PatchBytes and PatchStruct to return an empty value (or marshaled empty value in the case of PatchBytes) if the source is null or empty. In the host catalog update function we then always set this value if it's in the db mask (removing the nil check). Together this means a null value ends up coming out as an empty value (and thus valid for the DB) from PatchStruct/PatchBytes, and our API translation function already returns nothing for attributes if the length of the fields are zero.	4 years ago
Louis Ruch	9bec68f32c	refact(servers): Cleanup redundant if else (#1741)	4 years ago
Jeff Mitchell	95568ef07f	Fix tests using multiple controllers (#1734) ... The previous PR only initialized plugins if they were required, which meant that there may not actually be a plugin manager running because a second node would not actually create the dev database, which is where the plugin was being added. The assumption that a plugin manager is running is still a fine one at the moment, but we just need to make sure it's running in _all_ cases.	4 years ago
Jeff Mitchell	5559cf54d3	Don't always assume plugins should be activated (#1732)	4 years ago
Jeff Mitchell	3b83184700	Add missing read only check on secrets hmac field in handler (#1729)	4 years ago
Todd	056e72491d	Attempt to fix the ci error. (#1723)	4 years ago
Louis Ruch	0cf9573f24	chore: make fmt	4 years ago
Louis Ruch	c33efbf223	chore: make fmt (#1721)	4 years ago
Todd	1417e17909	Fix nil pointer error when listing by non existing host catalog. (#1720) ... * Fix nil pointer error when listing hosts from nonexisting host catalog.	4 years ago
Todd	b1c53951d5	Use the correct collection actions response when updating host catalogs. (#1718)	4 years ago
Jeff Mitchell	866bfceefc	Add secrets_hmac to host catalog output (#1712) ... Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Jim	ebea283421	fix (kms): Add kms.ReconcileKeys(...) to fix missing audit DEK scenario (#1711) ... This fix addresses the situation where an existing boundary database doesn't have the audit DEKs in the global scope.	4 years ago
Jeff Mitchell	8110e0eab3	Increment version of host during updates (#1707) ... Currently host does not use a version, which means it's not protected against race conditions of either itself or its value objects. This adds and plumbs through version to ensure that if a host or its value objects change that they are not going to be affected by a race condition.	4 years ago
Jeff Mitchell	b3fd23863f	Add external ID to host output (#1705) ... This also fixes a bug if no hosts were returned where the job would run over and over in a loop, and some other cleanup.	4 years ago
Todd	5d2b0e94aa	Update sync interval seconds field. (#1698) ... * Update sync interval seconds field. * If the sync interval was updated, schedule the next sync job wakeup immediately. * Calculate the next sync time for the scheduler should wake up if we only updated the sync interval.	4 years ago
Todd	b16ce175e5	Fix secrets clearing bug in update. Changes to update count behavior for catalogs (#1691) ... * Fix secret clearing bug in update. Always return 1 catalog updated if we can find a catalog w/ a matching version.	4 years ago
Todd Knight	f41bceda83	Merge from main and `make gen`	4 years ago
Todd Knight	884e1f2d18	Merge branch 'main' into plugin-hostcatalogs ... # Conflicts: # go.mod # sdk/go.mod	4 years ago
Jim	f46803d808	feature (authmethod): Add managed grps perms to auth collection actions (#1695)	4 years ago
Todd	61f9d1f6af	Add update set handler and sdk functionality (#1684)	4 years ago
Jeff Mitchell	30e9f944a2	Add sync interval to host sets (#1680) ... This adds a parameter to host sets allowing the sync interval to be user-specified on a per-host-set basis. A value of -1 disables syncing; a value of null uses the current default.	4 years ago
Todd	050553ffcf	Add update catalog support for plugin based catalogs in handler and go sdk (#1673) ... * Create catalog service handler for updating plugin. Add tests for handler and run make fmt. Silently drop attributes where the value is nil when creating the catalog or set.	4 years ago
Jim	048fceaf54	feature (workers): Add audit events for worker requests (#1681) ... * feature (audit events): Add interceptor for auditing worker requests * feature (events): Add default deny filter for worker status events * feature (worker audit events): Add tags to SessionService req/resp	4 years ago
Jeff Mitchell	48ac8b8f0b	Merge branch 'main' into plugin-hostcatalogs	4 years ago
Jim	eecd878b36	feature: Add signing (hmac-sha256) of audit entries (#1666)	4 years ago
Todd	54bccf3674	Mask manager can now include mask paths w/ a specified prefix which would be filtered otherwise (#1654) ... * Update the mask manager to always allow fields containing a prefix which matchs a passedThroughPrefix. This will be useful when updating plugin based host catalog and sets since attributes and secrets cannot be contained in the mask manager mapping.	4 years ago
Jim	f63ca1313c	feature (kms/audit): Add base audit key type (#1651) ... * feature (db): Add the ability to enable debug output for a connection * refactor: Use scope.Global instead of "global" * feature (db/migrations): Add kms audit keys Add schema changes to support a new DEK for audit crypto operations. * feature (kms/audit): Add audit key type All the bits required to define a new DEK concrete type for operating on audit entries. * refactor (db): Remove deprecated migration unit tests. We added a new audit DEK to kms.CreateKeysTx(...). Unfortunately, unit tests like TestMigrations_UserDimension, Test_PrimaryAuthMethodChanges and TestMigrations_CredentialDimension have an indirect dependency on a specific historical set of DEKs via an indirect call kms.CreateKeysTx. This of course fails because the new DEK's tables is not a part of pinned migration versions that these tests depend on.	4 years ago
Jeff Mitchell	80d41b9044	Merge branch 'main' into plugin-hostcatalogs	4 years ago
Jeff Mitchell	b9269ce93c	Update available actions for host resource (#1659)	4 years ago
Todd	808b986834	Read and List Plugin based Hosts (#1655) ... * Add ability to read and list hosts. Tests to follow. * Add tests for reading and listing as well as validation checks to not modify hosts. * Add IpAddress and DnsNames to the api resource. Populate the plugin info. * Adding go sdk tests for reading and listing hosts and ensuring update and deleting is disallowed.	4 years ago
Timothy Messier	decc3ec2cf	test(targets): Change test to not depend on response order (#1653) ... This test started failing when the order of the list response changed. Since the order does not matter, this test was updated to not depend on the order.	4 years ago
Timothy Messier	36f1ae75f7	feat(sdk): Add support for egress credentials to target service	4 years ago