234 Commits (fb0e5ea1cef09f435fbe1785ec06dbdbf83a3370)

Author	SHA1	Message	Date
Jeff Mitchell	77c3ce1cd2	Update nodeenrollment to v0.1.4	4 years ago
Jeff Mitchell	90c6b1bad8	Update nodeenrollment dep to 0.1.3	4 years ago
Jeff Mitchell	6ffef1e4b5	Update nodeenrollment dep	4 years ago
Louis Ruch	26bc992f38	chore(release): Update API and SDK deps	4 years ago
Jeff Mitchell	32d04b9ce7	Allow a worker to use KMS auth but accept PKI for proxy (#2206) ... This essentially worked for non-dev mode before but would create storage directories that weren't actually used or needed, and it didn't work in dev mode because it made assumptions about the presence of a worker auth kms or not. This fixes those behaviors.	4 years ago
Jeff Mitchell	cca044d8cb	Update nodeenrollment to v0.1.0	4 years ago
Jim	f6c4e3c896	feature (worker): add worker events around authentication (#2157)	4 years ago
Jeff Mitchell	d1b3b2441f	Add node rotation (#2142)	4 years ago
Jeff Mitchell	4117841cf9	Use persistent storage for worker auth credentials (#2139)	4 years ago
Jeff Mitchell	caf19f867e	Rename some variables to remove Nodee	4 years ago
Jeff Mitchell	cd9b10721f	Pull in new nodeenrollment lib to fix some bugs	4 years ago
Jeff Mitchell	1ee2c0dde0	Switch nodeenrollment to staging branch	4 years ago
Jeff Mitchell	46e97a2b91	Update to new nodee lib bits (#2120)	4 years ago
Jim	70c5da1048	feature (workers): add repository CreateWorker(...) (#2105)	4 years ago
Jeff Mitchell	f6ef708466	Update against new nodeenrollment registration cache	4 years ago
Jeff Mitchell	1f550722a2	Sync against current library state	4 years ago
Jeff Mitchell	0581e164f1	Update nodeenrollment dep	4 years ago
Jeff Mitchell	2f06513a3a	Merge branch 'main' into llb-byow	4 years ago
Jeff Mitchell	e84a2e639f	Revert downgrade of go-kms-wrapping	4 years ago
Jim	785241237e	refactor (kms): adopt the go-kms-wrapping/extras/kms package (#2027) ... * feature (db): add Db.UnderlyingDB() This is needed to allow for integration with bits that need a *dbw.DB * feature (kms): add new go-kms-wrapping/extras/kms dependency * refactor (kms): schema changes required to adopt extras/kms pkg * refactor (kms/iam): rename to DeprecateCreateKeysTx(...) * refactor (kms): remove deprecated test * refactor (kms): refactor Kms type This refactor includes renaming the existing type to DeprecatedKms and then refactoring the Kms type to become a wrapper of go-kms-wrapping/extras/kms * refactor (kms): delete all the unneeded bits All this stuff is not needed now that we're using go-kms-wrapping/extras/kms * refactor (db): fixup tests after kms refactor * refactor (kms/tests): use testing.TB for test helpers Our test helper packages were not possible to use with benchmarks. This refactor switches to testing.TB to allow both tests and benchmarks to use the helpers. * tests (session benchmarks): refactor to use new Kms type * refactor (schema): rm test which relies on deprecated Kms code * refactor (kms): post rebase on main changes required * chore (kms refactor): re-add unit test from main * refactor (kms): uses migrations that don't include KMS schema changes	4 years ago
Jeff Mitchell	00e57db60f	Adapt to library changes	4 years ago
Jeff Mitchell	837eb9e6f1	Update nodeenrollment dep against new dev branch	4 years ago
Jeff Mitchell	ab4d542fad	Add multihop auth support (#32)	4 years ago
Jeff Mitchell	f748af7b02	Initial BYOW auth PoC (#29)	4 years ago
Jeff Mitchell	957fe19846	Bump to Go 1.18 (#2036)	4 years ago
Johan Brandhorst-Satzkorn	f39553abb3	chore: Release prep for v0.8.0	4 years ago
Johan Brandhorst-Satzkorn	e864652b33	feat(sessions): Add list benchmarks ... The list benchmark tests uses pre-created database dumps to run its benchmarks. This benchmark will be used to guide optimizations around listing of sessions. Fixes https://hashicorp.atlassian.net/browse/ICU-4042	4 years ago
Johan Brandhorst-Satzkorn	6a37bd9710	Upgrade grpc-gateway version to v2.10.0 (#1954) ... This new version will let us hide fields from the OpenAPI output	4 years ago
Jim	addbfee593	chore: upgrade gofumpt to v0.3.1 (#2028)	4 years ago
Johan Brandhorst-Satzkorn	b1d6a1da9a	Switch to buf for protobuf generation (#1944) ... * Install buf with go install This reduces the impact of using buf on our dependency closure, which was significant. It also avoids potential issues with building buf given our own internal dependency constraints. This has caused issues (including crashes!) in the past. See https://github.com/cockroachdb/cockroach/issues/67216#issuecomment-874176186 for more discussion on using tool dependencies generally, and https://github.com/bufbuild/buf/issues/52 for an example of where this sort of thing caused an issue for a user. * Upgrade buf version We should migrate to v1 sooner rather than later, as it has some breaking changes from v0. * Change buf lint/breaking commands These commands were moved up one level for v1 * Migrate to buf.yaml to v1 * Remove unused imports These were uncovered by using "buf lint". * Use buf v1.3.1 * Depend on googleapis and grpc-gateway via BSR * Switch to buf for proto generation * Remove third party dependency * Remove unused tools and scripts * Move local protos up one level * Temporarily don't fail on breaking changes * Generate CI config * Fix generation of controller.json * Replace use of deprecated flag * Remove unused import, regenerate files * Remove temporary skipping over breaking check	4 years ago
Jeff Mitchell	58a448fc6a	Put session ID in ALPN (#1966) ... This allows us to use SNI for actual host (e.g. routing) information. We don't have the client cert yet so we can't look at that, so this provides a way for us to convey the information needed to look up that session's TLS stack. Using SNI for hosts means we also run into the fact that we don't have automatic agreement in terms of SANs. So when generating the certs we now also pass worker address information to the function to be encoded in the cert. Finally, there is a change in how the websocket dialing happens, because http.RoundTripper tries to be too clever for its own good and overwrites NextProtos on a whim.	4 years ago
Todd	3eb22b073a	Defines the controller api metrics and registers them at controller startup (#1917) ... Co-authored-by: Hugo Vieira <hugoamvieira@users.noreply.github.com>	4 years ago
Johan Brandhorst-Satzkorn	803d916279	Update zalando/go-keyring with freebsd fix (#1938)	4 years ago
Johan Brandhorst-Satzkorn	9dc8c45634	Revert version upgrade of dbus and go-keyring (#1936) ... * Revert version upgrade of dbus and go-keyring The combination of these versions were causing build errors on freebsd * Only revert zalando/go-keyring	4 years ago
Jeff Mitchell	c99907c6c5	Update keyring deps to remove deprecation warnings (#1924)	4 years ago
Jeff Mitchell	20011021ee	Update against tagged sdk/api versions	4 years ago
Jeff Mitchell	7eb29261b2	Update to go-kms-wrapping version 2, and plugin-based KMS (#1901)	4 years ago
Louis Ruch	64fd93e088	chore(release): Bump API version and changelog for 0.7.5	4 years ago
Louis Ruch	ecbeab9035	chore(release): bump api/sdk versions	4 years ago
Jim	591ec476e7	refactor: Update internal/db and oplog to use go-dbw package for database operations. (#1785) ... * chore: Add new dbw dependency * refactor: Convert to use dbw.DB * refactor (db): Change GetTicket(...) signature * feature (db tests): Added TestDeleteWhere(...) Adding this allows us to eliminate a leak of the gorm library * refactor: Add ctx to ScanRows(...) signature This is required to refactor all the deprecated errors pkg calls. This refactor required adding a context to quite a few call chains and in particular the job scheduler bits * feature (db/tests): Add support for test opt: WithTestLogLevel(...) This test only option allows callers to specify a log level for the underlying db package (where supported/applicable) when calling TestSetup(...) * refactor (db): Simplify Db type Only store the underlying *DB and create the *RW on demand when needed. * refactor (oplog): Port to using dbw pkg for db operations * refactor (db): Remove gormDB(...) func * tests (db): Add unit tests for TestDeleteWhere(...) * chore: make fmt changes to formatting	4 years ago
Jim	baa1d88f1f	feature: Add client ip to inbound request information (#1678) ... * feature: Add client ip to inbound request information * feature (workers): Add the user's client IP to a session's connection information (#1749)	4 years ago
Hugo Vieira	f1063a62a0	feature(config): add sockaddr template support	4 years ago
Jim	dba5bc88a0	chore: Upgrade gorm deps (#1747)	4 years ago
Louis Ruch	bc0e23bdf1	chore: bump api/sdk versions	4 years ago
Jeff Mitchell	4bf86e6394	Update SDK/API versions to main branches after merge	4 years ago
Todd Knight	884e1f2d18	Merge branch 'main' into plugin-hostcatalogs ... # Conflicts: # go.mod # sdk/go.mod	4 years ago
Jeff Mitchell	962c9463fd	Update SDK/API modules	4 years ago
Jim	b96f57ec4e	fix (events): Only "sign" audit events (#1677) ... * chore: Update eventlogger dependency. We need the latest version, so we can limit the type of events that are signed. * fix (events): Only "sign" audit events	4 years ago
Jeff Mitchell	48ac8b8f0b	Merge branch 'main' into plugin-hostcatalogs	4 years ago
Jim	eecd878b36	feature: Add signing (hmac-sha256) of audit entries (#1666)	4 years ago