1374 Commits (ecdcf72e0e61496beb68dfa8d428ea3de3df1ba5)

 

All Branches   

Search

Author	SHA1	Message	Date
Timothy Messier	ecdcf72e0e	ci: Update Makefile with new targets for testing ... This updates the test-ci target to startup the test database container first, wait for it to be ready, and then start running the tests. It also creates some new targets for local devs. Prior to running any tests either via `make test` or `go test`, the database should be started with: make test-database-up It can take a few seconds for the database to fully initialize, the status can be checked with: docker logs -f boundary-sql-tests This database can be stopped and destroyed with: make test-database-down In general it should only need to be restarted when new migrations are added. But it might also be necessary to restart if some tests fail in an unexpected way and fail to do cleanup steps.	5 years ago
Timothy Messier	75388f727a	test: Refactor to use dbtest package instead of docker ... This swaps the test initialization to use the dbtest package so each test will get a fresh database created from a template database, instead of a completely new docker container.	5 years ago
Timothy Messier	af5d1af568	test: Add dbtest package ... This is modeled after the internal/docker package to make it easy to use as a replacement. Instead of creating a new docker container for each test, it will create a new database in an existing database container, using a template database as a source. This assumes that the template database exists and already has the schema migrations run against it. The default template is `boundary_template` which should already have all migrations applied. However, some tests require an empty database to test the migration code. In these cases the `template1` template database should be used, ie: dbtest.StartWithTemplate("postgres", dbtest.WithTemplate("template1"))	5 years ago
Timothy Messier	c6cb7c8512	chore: Define custom docker image for tests ... This images is built from the official postgres docker image, but with updates to optimize the test execution: - A config file for postgres to increase the performance of the test server. - An initialization script to create a template database with all migrations run against it. There are new make targets to build and publish this docker image. The image can be pulled with: docker pull hashicorpboundary/postgres:13-alpine To use this image for tests start the container: make -C internal/db/docker database-up	5 years ago
Susmitha Girumala	811d0b63fd	Bump doc download versions to latest (#1517)	5 years ago
Randall Morey	7746916d59	chore: bump UI version for release (#1514) ... Co-authored-by: Susmitha Girumala <susmitha@hashicorp.com>	5 years ago
Jeff Mitchell	68867ef01e	Update api/sdk tags	5 years ago
Jeff Mitchell	e9a8ede0d6	Move wrapper package back to SDK (#1511) ... TF uses this, so SDK is a decent place for it. It doesn't create dependencies between it and API.	5 years ago
Jeff Mitchell	d7a990b62b	Bump api/sdk in main module	5 years ago
Jeff Mitchell	8d8290b83e	Remove unneeded replace directive	5 years ago
Jeff Mitchell	081de3cf79	Migrate sdk/recovery to api/ and sdk/wrapper to internal (#1507) ... * `recovery` is only used by the API (and the main module, for decryption) * `wrapper` is only used by the CLI right now Moving these brings them closer to the code that uses them, and makes the SDK package a bit more clear in terms of functionality.	5 years ago
Kevin Wang	3fc2cf4df5	chore(website): add `next-remote-watch` (#1499) ... - this enables auto-reloading on specified file changes	5 years ago
Randall Morey	700ed0b138	chore: bump ui (#1508)	5 years ago
Louis Ruch	61722659d1	test(scheduler) Remove un-needed test causing intermittent failures (#1501)	5 years ago
Jim	02c0764e11	chore: update product version and make packages	5 years ago
Randall Morey	ffc01b141d	chore: bump UI version and add UI changelog (#1503)	5 years ago
Jim	6ad8333b97	chore: update sdk and api deps	5 years ago
Jim	48c6195829	chore (api): update sdk dep	5 years ago
Jim	5fe40bc7bd	style (events): add changes from `make fmt` in prep for release.	5 years ago
Louis Ruch	4cdce29a84	fix(connect): Remove erroneous event error message (#1500) ... When a session is terminated by the user, the cancel session path is triggered, in this path the websocket connection is closed. If the connection is already closed, an EOF is returned. In this situation an EOF is expected and should not be logged to the user. Example log line: { "id": "ezqk6w9dOQ", "source": "https://hashicorp.com/boundary/dev-controller/boundary-dev", "specversion": "1.0", "type": "error", "data": { "error": "failed to close WebSocket: failed to read frame header: EOF", "error_fields": {}, "id": "e_n60YPsDkaj", "version": "v0.1", "op": "worker.(Worker).handleProxy", "info": { "msg": "error closing client connection" } }, "datacontentype": "text/plain", "time": "2021-09-02T10:05:46.587513-07:00" }	5 years ago
Jeff Mitchell	2c61bd4963	Fix recursive listing when the ingress scope lacks permissions (#1478) ... The existing logic was to ignore Forbidden errors when recursively listing in favor of looking for downstream scopes with appropriate permissions. The problem is that when there is actually no authentication token at all, what comes back is an Unauthenticated error. Therefore if you didn't have permissions on the ingress scope (e.g. the default of `global`) but did downstream for the anonymous user, you'd get back an error. I don't think there's any security issue with doing this; the user could always have simply started the search at a downstream scope to begin with so nothing more is being revealed, this just fixes behavior to match expectations in this case. A test was added for one of the services; the code is exactly the same across them. The reason that the existing tests that were added with the output fields testing didn't catch this is that even though they were specifying `u_anon` as the user, the disabled test context skipped the logic that would return a 401 in this case. It turns out that fixing this is very complicated because we don't have a great way in most tests of defining grants to put onto the generated scopes, so even if a true anonymous context was added each test would require the anonymous user to have list permissions on whatever resource was under test, requiring a lot of role and grant and principal finagling. This is probably a good longer-term TODO but not one that seemed worth it for this fix. Fixes ICU-2301	5 years ago
Jeff Mitchell	781871c30d	Properly accept grant format type=<type>;output_fields=<of> (#1474) ... Although we document that this is allowed, and the ACL code handles it, some of the validation code did not. This would cause a semi intermittent problem because that validation code is used only in some code paths; specifically we skip it (for now) to avoid erroring out on some deprecated grant string formats when reading grants from the DB, but we use it to error out when validating incoming grants.	5 years ago
Louis Ruch	030c09c6b9	bug(targets): Fix panic in authorize-session (#1496) ... When renaming credential libraries -> credential sources the target service added the credential library information to the SessionCredential response, while the target cmd was parsing the credential source. This prevents a panic like the following: boundary targets authorize-session -id ttcp_5PS2dktESb panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x30 pc=0x1f99a31] goroutine 1 [running]: github.com/hashicorp/boundary/internal/cmd/commands/targetscmd.printCustomActionOutputImpl(0xc00046c0a0) /Users/louisruch/boundary/internal/cmd/commands/targetscmd/funcs.go:822 +0x9d1 github.com/hashicorp/boundary/internal/cmd/commands/targetscmd.(*Command).Run(0xc00046c0a0, {0xc000134030, 0x2, 0x2}) /Users/louisruch/boundary/internal/cmd/commands/targetscmd/targets.gen.go:324 +0x188b github.com/mitchellh/cli.(*CLI).Run(0xc0001c6500) /Users/louisruch/go/pkg/mod/github.com/mitchellh/cli@v1.1.2/cli.go:262 +0x5f8 github.com/hashicorp/boundary/internal/cmd.RunCustom({0xc000134010, 0x60, 0x0}, 0x0) /Users/louisruch/boundary/internal/cmd/main.go:186 +0x9d6 github.com/hashicorp/boundary/internal/cmd.Run(...) /Users/louisruch/boundary/internal/cmd/main.go:92 main.main() /Users/louisruch/boundary/cmd/boundary/main.go:13 +0xc9 Fixes #1488	5 years ago
Louis Ruch	db8e9bb0c6	refactor(worker): refactors the proxy handler to use endpoint scheme (#1491)	5 years ago
Rolf Sommerhalder	b599bb5eb2	Adjust syntax in example (#1476)	5 years ago
Jim	5f46207e76	Events: add redact/encrypt node for audit events to Eventer (#1490) ... * feat (events): Add new options needed for AuditConfig WithAuditWrapper and WithFilterOperations all for optional paramters when creating AuditConfig types. * refactor (event): Change EventerConfig.Sinks to a ptr We need to modify the SinkConfig.AuditConfig during the NewEventer factory, so we have to use a ptr not a ref. * feat (events): Add audit configuration types * feat (events): add audit config to sink configuration. * feat (events): add redact/encrypt node for audit events to Eventer Integrate the encrypt.Filter node from the eventlogger into the event.Eventer, so audit events can be redacted/encrypted based on data classifications. * test (events) Add test protobufs for events Add test protobufs along with a test service for testing the audit event encrypt node	5 years ago
Timothy Messier	06ce257cb8	Merge branch 'tmessi/wh-refactors'	5 years ago
Timothy Messier	90e2c871f0	refactor(wh): Remove host prefix from wh_user_dimension org fields ... These fields are being refactored so they conform with the new wh_credential_dimension. This will inform Business Intelligence tools that these attributes conform across dimensions.	5 years ago
Timothy Messier	026f09a9a8	refactor(wh): Rename primary and foreign key columns ... The tables in the operational part of the Boundary database (meaning non-warehouse tables) suffix primary key columns and foreign key columns with `_id`. Many of these columns appear in the warehouse dimension and fact tables as normal attributes, not primary keys or foreign keys. To disambiguate ID columns from operational tables, the primary key column for dimension tables will be renamed from `id` to `key` and the foreign key columns in the fact tables will be renamed to change the suffix from `_id` to `_key`.	5 years ago
Timothy Messier	c8bf1917f5	db: Refactor test setup for pre-populated data ... Now when initializing the test database for sql tests, it will load the colors persona data into the database. This will provide a data set that tests can use without needing to call `wtt_load`. The main motivation is to allow for a separation of setup and test execution that requires crossing a transaction boundary. The pgTap tests are required to exectue as a single transaction, so that the rollback can reset the state, and each test can be isolated. However, can cause issues with some test senarios, particuarly with the use of some times releated functions like `current_timestamp` and `now` which return the time that the current transaction started. This creates an issue if a test relies on some setup that sets a time via `now`, then an update that expects a new time via `now`. See: https://www.postgresql.org/docs/13/functions-datetime.html#FUNCTIONS-DATETIME-CURRENT	5 years ago
Pamela Bortnick	8e42b04b04	Update social share image (#1487) ... * Update image for social share * Remove Icon file	5 years ago
Jeff Mitchell	2649d1b966	Move protooptions to sdk/pbs (#1486) ... This prevents a reverse dependency from sdk on the main module.	5 years ago
Jeff Mitchell	b13975cb6a	Move API resource pbs to new location (#1484) ... This moves the generated pb files to the `sdk` module. This allows third parties to make use of them if desired (e.g. in upcoming plugins) and moves away from the `gen` nomenclature in the directory, since we are going to be adding some extra interface functions to the messages.	5 years ago
Mike Wickett	40b1e873f3	chore: update alert banner (#1452)	5 years ago
Zachary Shilton	6e435a8141	Upgrade global styles (#1418) ... * website: bump packages for global style upgrades * website: backfill missing type styles * website: upgrade security page to use markdown-page * website: upgrade g-container to g-grid-container * website: upgrade community page * website: hide alert-banner on mobile * website: fix mismatched border colour on downloads page * website: fix incorrect className * website: bump to fix issue with typography on OpenAPI pages	5 years ago
Jeff Mitchell	7aba3b16a4	Add WIP KMS plugin assets to .gitignore	5 years ago
Todd Knight	1cacd8ee35	Update website VERSION export to 0.5.1	5 years ago
Michael Gaffney	5f88243ddc	Fix db migration that adds support for OIDC in the data warehouse (#1471) ... Four new columns were added to the `wh_user_dimension` table to support OIDC. The data type for the columns was originally `wh_dim_text` which is a domain type with a `not null` restriction. Adding the new columns caused the migration to fail if the `wh_user_dimension` table had any rows in it because the existing rows would violate the `not null` restriction. Closes #1469	5 years ago
Jeff Mitchell	b0dbd0182e	Add support for additional awskms parameters (#1468) ... This updates to the latest go-kms-wrapping tag to support these parameters and documents them.	5 years ago
Louis Ruch	31af49e76d	refactor(worker): Move tcp_proxy into its own package (#1458) ... * refactor(worker): Move tcp_proxy into its own package This refactors: - the tcp_proxy.go into worker/proxy/tcp - add a missing unit test for the HandleTcpProxyV1 - refactors session.go into worker/session, needed to avoid import cycle - adds a baseline for a mock controller session client - go lint fixes * Add sleep between spinning listener goroutine and dialing Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>	5 years ago
Todd Knight	c79daab68c	Update to version 0.5.1	5 years ago
Jeff Mitchell	2fe9fd60f2	Bump Go to 1.16.7 (#1464)	5 years ago
Michael Gaffney	ef051135b2	Add data warehouse changes for OIDC to the Changelog (#1465)	5 years ago
Jim	4d70c049c2	fix: Stop trying to re-write the resp header on event flush errors (#1463)	5 years ago
Timothy Messier	0f19009cea	feat(wh): Add oidc related columns to wh_user_dimension (#1455) ... This adds new columns to the wh_user_dimension to provide additional data from OIDC that does not apply to Password Auth. Note: Given the specifics of the data, it is possible these columns may be used by other auth methods in the future, hence the lack of `oidc` in the column names. The specific columns are: - auth_method_external_id For OIDC this is the Issuer - auth_account_external_id For OIDC this is the Subject - auth_account_full_name For OIDC this is the account's Full Name, and can be `None`. - auth_account_email For OIDC this is the account's Email, and can be `None`. For all of these new columns, they will be `Not Applicable` if the auth method is Password.	5 years ago
Jeff Mitchell	f7894811f5	Update go-bexpr to allow colons in paths; add a test (#1453)	5 years ago
Jim	3bd6a209a4	prevent panic when hclog_formatter_node is operating on a struct (#1456)	5 years ago
Timothy Messier	624bdbf0c2	test(db): Add baseline tests for wh_user_dimension (#1454) ... This sets up the configuration for running a new suite of tests that are written in sql, to test the sql logic implemented in plpgsql functions and triggers. It is primarily designed to provides tests for the data warehouse functionality that is implemented purely in sql. The infrastructure to run these tests leverages docker. It creates one docker container using the `library/postgres` image and provisions the database with the boundary sql migrations and test helper functions. A separate docker container is run that has the pgtap extension and pg_prove cli to execute the tests. As noted, pgtap is used for the tests. This postgresql extension provides a number of helpful assertion functions to make writing sql tests easier. It also, along with the pg_prove cli, provides readable test output. Along with the new testing infrastructure this commit establishes a baseline of tests for the wh_user_dimension: - Unit tests for individual views and functions: - whx_user_dimension_source - whx_user_dimension_target - wh_upsert_user - Integration tests for that verify that the wh_user_dimension gets populated correctly when sessions are inserted or updated. This ensures that: - the trigger runs on session insert - the trigger results in the correct changes to the wh_user_dimension. This commit provides a `Makefile` to run the tests locally that provides support for: - Setting the postgres docker image to easily test multiple versions. - Passing through options to pg_prove - Passing the test list to run individual tests - Additional targets to separately startup the database image to quickly re-run tests while developing new tests. Lastly configures circleci to run this test suite as a matrix build in parallel with the other tests. The matrix build tests multiple versions of postgres: - latest - 13-alpine - 12-alpine - 11-alpine See: https://pgtap.org/	5 years ago
Taylor Dolezal	248e1f36b5	Update next steps in connect to target documentation (#1439)	5 years ago
Susmitha Girumala	ba85a3bc3f	docs: Update desktop client download version (#1450)	5 years ago