boundary

Commit Graph

Author	SHA1	Message	Date
Sepehr	e278964422	observability(events): Adding telemetry flag and and telemetry sink event type with tests	3 years ago
Jeff Mitchell	b64eadedbf	Fix flaky TestServer_ReloadInitialUpstreams (#3758 ) With the KMS changes this should never have worked at all (because the different databases means the credentials conveyed after the KMS-based authentication would never be valid). However, it was sometimes passing because of a race condition: the worker could be found in the database before the new credentials were returned to the worker, causing the worker to start at the KMS step with the second controller. This changes the test to use the same database for two controllers, but to only ever have one running at a time, and uses a sequence of two changed (or unchanged, depending) status updates from the worker to ensure that the reload was successful.	3 years ago
Jim	0d19892e03	fix (events): convert multierror to stdlib error (#3743 ) * fix (events): convert multierror to stdlib error multierror errors will be converted to a stdlib error (because multierror doesn't support json marshaling). * refact (errors): convert from multierror to stdlib errors.Join(...) * refact: convert from pkg/errors to stdlib error wrapping	3 years ago
Irena Rindos	7bd2d2c913	feat(worker): allow hcp cluster id to be sourced from env var (#3709 ) * feat(worker): allow hcp cluster id to be sourced from env var	3 years ago
Irena Rindos	9733a250fa	refact(event): move observability/event to event (#3704 )	3 years ago
Jim	8ee4f6ead0	feat (auth/ldap): add support for new fields to CLI (#3685 ) Added support for new flags for: max-page-size and deref-aliases	3 years ago
Elim Tsiagbey	d271025863	fix: Flakey upstream connection test (#3689 ) The connectivity state changes for `upstream_connection_state` health field is causing the test to be flakey. Commenting out the field during assertions. `upstream_connection_state` health field is tested in other tests	3 years ago
Johan Brandhorst-Satzkorn	f89515a19c	all: avoid mutating global state in parallel tests (#3687 ) The SetupSuiteTargetFilters globally mutates the function used for logic inside the target handler service. This means that we could get inconsistent logical behavior in certain tests that were run in parallel, since the logic can change at runtime. Ensure tests that make use of this function are never run in parallel with other tests.	3 years ago
Elim Tsiagbey	fabd4093de	feat: Worker Connectivity Health Check (#3650 ) * feat: Worker Connectivity Health Check Add worker upstream connection state. API calls to the worker's ops `/heath?worker_info=1` endpoint should now return a new filed called `upstream_connection_state` ``` { "worker_process_info":{ "state":"active", "active_session_count":0, "upstream_connection_state":"READY" } } ``` The states returned will be GRPC connection states: https://grpc.github.io/grpc/core/md_doc_connectivity-semantics-and-api.html There could be multiple upstream addresses but GRPC manual resolver determines the state of the connection.	3 years ago
Louis Ruch	2235a50a2a	feat(ssh): Add support for ssh to run command on remote host (#3633 )	3 years ago
Irena Rindos	df1e64f412	chore(connect): improve messaging if tofu token already used (#3602 )	3 years ago
hashicorp-copywrite[bot]	29da0bcb92	[COMPLIANCE] License changes (#3567 ) * Adding explicit MPL license for sub-package. This directory and its subdirectories (packages) contain files licensed with the MPLv2 `LICENSE` file in this directory and are intentionally licensed separately from the BSL `LICENSE` file at the root of this repository. * Adding explicit MPL license for sub-package This directory and its subdirectories (packages) contain files licensed with the MPLv2 `LICENSE` file in this directory and are intentionally licensed separately from the BSL `LICENSE` file at the root of this repository. * Updating the license from MPL to Business Source License Going forward, this project will be licensed under the Business Source License v1.1. Please see our blog post for more details at https://hashi.co/bsl-blog, FAQ at www.hashicorp.com/licensing-faq, and details of the license at www.hashicorp.com/bsl. * Update copyright file headers to BUS-1.1 * Rerun make gen This will pick up the last of the license changes * Revert "Rerun make gen" This reverts commit `dbe0968bff`. * Remove copywrite from generation script The current version of copywrite is not sophisticated enough to only apply the copywrite changes to certain subdirectories, so to avoid accidentally relicensing our api and sdk modules, we will stop running the copywrite script until such time that it can do the right thing. * License protobuf API as MPL The protobuf API files are used to generate the SDK, since we want the SDK to be MPL, the protobuf files must also be MPL. This extends to all protobuf files whose sources end up in the SDK directory, including: - internal/proto/controller/api - internal/proto/controller/custom_options - internal/proto/plugin It also includes the generated service directory in internal/gen/controller/api/services, since they are generated from the protobuf sources used for the SDK. * Change website license file name This makes the naming scheme consistent with the rest of the repository. * Add note on licensing to README * Set copywrite license to BUSL * Revert "Add note on licensing to README" This reverts commit `4d865a91a7`. --------- Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	3 years ago
Todd	8d9222bec3	Add credential and libraries to session recording resource (#3374 )	3 years ago
Johan Brandhorst-Satzkorn	2ae007d61e	cmd: fix session recording download flag help (#3351 ) When using an alias, we automatically add a little blurb to the end of the flag help. When not terminating the flag help with a full stop, this looks a bit odd. Add full stops to all the download flags for consistency.	3 years ago
Johan Brandhorst-Satzkorn	9474b373b8	api: remove create from auth-tokens help (#3341 ) The auth-tokens help command included a reference to a non-existent auth-tokens create command. Replace the default help and also add a helpful pointer to the authenticate command.	3 years ago
Jim	723dbdfedf	fix (boundary dev): make the LDAP auth method active-public (#3344 )	3 years ago
Jeff Mitchell	3a9903a836	Don't attempt session teardown if the session is expired (#3312 ) This avoids a situation where teardown results in an error due to the worker not accepting the connection (since the credentials are invalid). Teardown is a best-effort way to avoid sessions that have long lifetimes ending up having to wait for expiration before cleanup, but if we're near expiration it doesn't really matter. Fixes ICU-9633	3 years ago
Jeff Mitchell	8322916fb4	Remove all deprecated Err/Wrap/E calls (#3286 )	3 years ago
Jeff Mitchell	feb3aea38f	Support multiple IDs in grants (#3263 ) This allows specifying multiple IDs in grants via an `ids` field, which will eventually become the normal way to specify IDs. Internally, each grant with multiple IDs turns into multiple ACL grants each with a single ID; to make this distinction clearer and allow for better separation of concerns an AclGrant type has been introduced, so really multiple IDs in a Grant turn into multiple AclGrants. The nice thing about doing it this way is that it becomes purely a parsing concern; no actual validation logic has changed. For backwards compatibility with grants already stored in roles, we do not error out if `id` is specified. However, eventually we will simply not support grants with `id` coming via the API; they will fail API validation, such that new grants will require the use of the updated `ids` field. A follow-on PR will plumb this through the service handlers/API/CLI, but I decided to do it in separate chunks to make reviewing easier, given that they are easily separable into the internal and external aspects of the change. * Add CLI/API checks around using ID in grants (#3264) * Plumb through some contexts to remove a lot of deprecated errors (#3268)	3 years ago
Todd	8980143278	Allow kms purpose "downstream-worker-auth" (#3299 )	3 years ago
Johan Brandhorst-Satzkorn	ebcd6d2828	api: remove connection ID (#3298 ) Removing this until we figure out why it's sometimes missing. May add it back again later.	3 years ago
Jeff Mitchell	1b0330ad8e	Update dev worker auth flag names (#3265 ) This brings it in line with the updated names that have been settled on in light of deprecating the old KMS method.	3 years ago
Louis Ruch	281f217dcc	feat(plugins): Refactor host plugins to boundary plugins (#3262 )	3 years ago
Jim	d4e537c88d	chore: updgrade pgx direct deps to v5 (#3258 )	3 years ago
Timothy Messier	c2da88d2a5	test(cmd/config): Fix test compilation error Refs: `9ae2bdfae`	3 years ago
irenarindos	8c96d3ef9b	fix(cmd): add session recording resource prefixes	3 years ago
Johan Brandhorst-Satzkorn	59f78ac1f8	config: allow wasm execution under UI CSP The wasm-unsafe-eval option is necessary for the asciinema player on the Admin UI	3 years ago
Todd	2359d5b7a5	remove filter flags and options for session recordings	3 years ago
Todd	d1a5f3a2ff	Update attribute fields to be proto struct so generated api becomes map[string]any	3 years ago
irenarindos	4785f2388f	chore(session recording): update cmd typo	3 years ago
Louis Ruch	95398d3b65	fix(dev): Fix panic in controller-only dev mode panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0xb8 pc=0x16626b0] goroutine 1 [running]: github.com/hashicorp/boundary/internal/cmd/commands/dev.(Command).Run(0xc000b90000, {0xc00003e110, 0x1, 0x1}) github.com/hashicorp/boundary/internal/cmd/commands/dev/dev.go:484 +0x490 github.com/mitchellh/cli.(CLI).Run(0xc0003323c0) github.com/mitchellh/cli@v1.1.5/cli.go:262 +0x5f8 github.com/hashicorp/boundary/internal/cmd.RunCustom({0xc00003e100?, 0x60?, 0x0?}, 0x0?) github.com/hashicorp/boundary/internal/cmd/main.go:189 +0xa16 github.com/hashicorp/boundary/internal/cmd.Run(...) github.com/hashicorp/boundary/internal/cmd/main.go:95 main.main() github.com/hashicorp/boundary/cmd/boundary/main.go:16 +0xc7	3 years ago
Jim	468c58836b	feat(recordings/cli): more read detail info	3 years ago
Jim	d49fde2299	feat(cli/session-recordings): add download cmd	3 years ago
Johan Brandhorst-Satzkorn	98e0b9db98	commands: add created, updated to recordings	3 years ago
Louis Ruch	7207353066	docs(ssh): Update docs to reflect ssh default port is not required	3 years ago
Louis Ruch	78ca8beb77	fix(cli): Update storage CLI gen and help text	3 years ago
Johan Brandhorst-Satzkorn	15524f3408	api: add created, updated times to recordings	3 years ago
Jim	35a2296092	feat(cli): add session recordings: read and list cmds	3 years ago
Johan Brandhorst-Satzkorn	281989e595	regenerate API files	3 years ago
Louis Ruch	ba0dd857f3	feat(target): Add CLI support for storage bucket association	3 years ago
Louis Ruch	7ab3c66544	feat(storage): Add support for Storage Bucket CLI	3 years ago
Danielle Miu	a4a14fc7fc	merged commit for plugin rework, storage bucket sql and proto, storage bucket secret rewrapping, storage bucket repository	3 years ago
Louis Ruch	798a1f952a	feat(storage): Add support for storage plugins	3 years ago
Louis Ruch	351444f1bd	refact(plugin): Move host loopback plugin into internal/plugin/loopback	3 years ago
Jim	20cf521cc0	feat(bsr): add bsr kms support in config, dev and tests	3 years ago
Louis Ruch	52fbc6410c	feat(storage): Add interface, options and errors	3 years ago
Michael Milton	9ae2bdfae6	feat: license util config (#3248 ) * feat: license util config * address comments * introduce census job * add job * fix import groups * remove pointers	3 years ago
Jim	4d08c52afd	feat (authenticate/oidc): support outputting auth url (#3247 )	3 years ago
Jeff Mitchell	769a7c9e1c	Remove cleanup calls for test controller/worker (#3245 ) A previous commit added a call to t.Cleanup in the NewTestController/NewTestWorker commands; as a result these statements are no longer needed.	3 years ago
Jeff Mitchell	e8559d142a	Fix worker auth rotation test (#3243 ) Most of the changes here are changes or enhancements that are useful for tests. The crux of the issue was that I had pulled up one var to the package level so it could be read from tests, but that var was not being reset between tests. It's not even used in tests anymore, so I put it back to function-local.	3 years ago

1 2 3 4 5 ...

611 Commits (ee7c17d2dc216b60446c6f69ddcd531335c8aecc)