72 Commits (fb0e5ea1cef09f435fbe1785ec06dbdbf83a3370)

Author	SHA1	Message	Date
Jim	aaf669a044	fix (API): check attributes missing appropriately. (#2219) ... * fix (API): check attributes missing appropriately.	4 years ago
Jeff Mitchell	c31b8a4383	Fix harmless but nasty-looking error (#2214) ... If a worker starts up and tries to connect to a controller before the controller has a chance for its rotate roots job to run, it'll spit out a nasty-looking error. It's harmless (things just retry and then work) but scary (`tls: internal error`). Rotating at creation time ensures that it's ready by the time a worker is able to perform any connection against the cluster port.	4 years ago
irenarindos	b7120bf88e	bug(workers): Do not update description for status update	4 years ago
Louis Ruch	9671daf6e0	Revert "refactor(user_passsword) change all references of user_password into username_password (#2189)" ... This reverts commit ab58b24142.	4 years ago
Damian Debkowski	ab58b24142	refactor(user_passsword) change all references of user_password into username_password (#2189) ... * (refactor) change all sql references of user_password to username_password * refactor(pkg) renamed pkg userpassword to usernamepassword * refactor(proto) updated protocol buffers to use UsernamePassword * refactor(code) updated references from UserPassword to UsernamePassword in golang files * refactor(test) updated unit tests to reference UsernamePassword changes * refactor(ddtest) updated references in dbtests to use UsernamePassword * chore(sql-test) fixed spelling issue * chore(sql) added and updated comments in migartion & tables. fixed indentations * chore(proto) updated comments to reflect username_password changes * refactor(tests) updated unit tests to replace user-password with username-password * refactor(cmd) updated cmd help text to use username * chore(tests) update test name & comments * fix(cmd) fixed cmd usage definition for credentials update * refactor(tests) removed out of scope changes * fix(sql) incremented sql migration id & updated migration comments	4 years ago
Jeff Mitchell	9a4545e59e	Fix eventing and worker name setup (#2204) ... * Don't automatically create worker names, as this is now invalid for PKI workers * Fix a check in dev that clears out name/description in exactly the wrong cases * Change eventing setup to use a hostname-based ID instead of the name (which could change on every start anyways)	4 years ago
Todd	214ca9a668	Check that WorkerAuthKms is not nil before trying to decrypt with it (#2205)	4 years ago
irenarindos	be0f07cc65	Merge remote-tracking branch 'origin/llb-byow'	4 years ago
Jeff Mitchell	704d68848c	Merge remote-tracking branch 'origin/main' into llb-byow	4 years ago
Louis Ruch	618bcb451e	fix(target): fix type check (#2202)	4 years ago
Jeff Mitchell	bfd9565010	Merge remote-tracking branch 'origin/byow-attrib-consolidation' into llb-byow	4 years ago
Jeff Mitchell	3d42737789	Don't display active connection count if it's not authorized (#2200)	4 years ago
Todd	72d122ef5c	TestUpdate for PKI and KMS workers fixed for worker service. (#2199)	4 years ago
Johan Brandhorst-Satzkorn	d06ac0d370	Propagate plugin execution dir to CreatePlugin (#2183) ... * fix: Propagate plugin options to CreatePlugin Plugin options were previously only applied to the BuildPluginMap call, resulting in the plugin execution_dir variable being ineffective. Also add a test to verify functionality * fix: Support plugin execution_dir for all plugins Previously, only external host plugins would respect the plugin execution dir. Now, all uses of the embedded plugins respect the configuration.	4 years ago
Todd	b3efe0eb3a	Allow TestPkiWorker to be created in an authorized state. (#2198) ... * Allow TestPkiWorker to be created in an authorized state.	4 years ago
Todd	e379234259	Remove CanonicalAddress, GetApiTags(), and NewWorkerForStatus. (#2196) ... Minor testing tweaks are also included.	4 years ago
Jeff Mitchell	11b025c016	Start updates on worker service test (#2195)	4 years ago
Todd	90a999d3fe	Some testing fixes (#2193)	4 years ago
Louis Ruch	68eb6e2bed	chore(targets): remove deprecated credential libraries on target resources (#1533)	4 years ago
Todd	beecbbb8a2	Upsert creates a new KMS and Updates PKI workers (#2187)	4 years ago
Irena Rindos	06d0f99536	bug(workersAPI): do not allow nonprintable or uppercase name or desc (#2186) ... * Send more info on KMS connect (#2182) * Update nodeenrollment to v0.1.0 * bug(workersAPI): do not allow nonprintable or uppercase name or desc * Put checks on create too * Apply printable check to description in DB * chore (worker): address PR feedback Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com> Co-authored-by: Jim <jlambert@hashicorp.com>	4 years ago
Jeff Mitchell	e6f6665bea	Merge remote-tracking branch 'origin/llb-byow' into byow-attrib-consolidation	4 years ago
Jeff Mitchell	8335deb8b6	Update protos, generated code, and service handlers (#2188) ... * Update protos, generated code, and service handlers * Address review feedback	4 years ago
Louis Ruch	4b365db634	feat(target): Add support for static credentials during authorize-session	4 years ago
Louis Ruch	00dfea1244	feat(target): Add support for static credential as target credential sources	4 years ago
Louis Ruch	58d546cdd4	feat(credential): Add static credential store and username_password credential	4 years ago
Jeff Mitchell	8fd663af47	Send more info on KMS connect (#2182)	4 years ago
Damian Debkowski	3441fa0447	(fix) added more context to error details for cli command (#2170) ... * (test) added more context to error details for cli commands * (fix) refactor solution to utilize custom error type casting * (test) added api unit test to validate InvalidArgumentError return message * Update internal/types/subtypes/error.go Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com> * (refactor) rename InvalidArgumentError into UnknownSubtypeIDError Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>	4 years ago
Louis Ruch	b6ca61a7f6	refact(cred-libs): Update user_password to username_password (#2154) ... * refact(cred-libs): Update user_password to username_password	4 years ago
Todd	06a2f4ce9c	Require default ports to be defined for newly created tcp targets. (#2148)	4 years ago
Louis Ruch	9663404f1a	feat(scheduler): Support unlimited job runs (#2173)	4 years ago
Jeff Mitchell	82b4e29d78	Properly fix (for now) the job limit	4 years ago
Jeff Mitchell	cb190c0ea1	Disable session jobs for now so other jobs work right	4 years ago
Jeff Mitchell	5d3facf561	Merge remote-tracking branch 'origin/main' into llb-byow	4 years ago
Louis Ruch	c4285b29cc	fix(target): Correctly return egress credentials assocaited with target (#2167)	4 years ago
Jeff Mitchell	5b978d7fa7	Adjust parameter naming (#2161) ... * Adjust parameter naming for some worker resource fields * Add eventing listener to event when authentication is successful from a downstream worker	4 years ago
Timothy Messier	d741034829	perf(session): Change list behavior around terminated sessions ... It was determined that it is a more common use case for users to request non-terminated sessions (i.e. sessions in `pending`, `active`, or `canceling` when requesting sessions. Notably, end users would need non-terminated sessions to: - Establish a new connection to a session. - Terminate a session So now by default a list request to `/v1/sessions` will *not* include terminated sessions. To still enable use cases where terminated sessions are needed, this adds a new query parameter to include the terminated session: `/v1/sessions?include_terminated=true`. Note that this query parameter is considered experimental and subject to change.	4 years ago
Timothy Messier	32070678dc	perf(session): Remove connections from session list endpoint ... Including the nested connection information in the session list response had a negative impact on performance as it created a significant multiplier on the number of rows that needed to be fetched from the database. It was also determined that this information was used by neither the admin ui nor the desktop client. Note that nested connection information can still be retrieved via a read request for a specific session.	4 years ago
Timothy Messier	f9eab71a4a	feat(session): Add periodic job to delete terminated sessions	4 years ago
Jeff Mitchell	d6362f9e5e	Restrict anonymous user capabilities (#2156)	4 years ago
Jeff Mitchell	9736b79d4e	Remove temporary node authorization functions (#2147)	4 years ago
Todd	1e3c941be1	Add active session count to the worker (#2145)	4 years ago
Jim	0425384b49	feature (events): add TestWithoutEventing(t) (#2137)	4 years ago
Jim	fdf43fc4fe	feature (worker): add CreateWorker(...) service (aka API) (#2143)	4 years ago
Todd	0f7e1ee7fa	Fix canonical tags not getting assigned in the api resource. (#2144)	4 years ago
irenarindos	78150d88d9	feature(WorkerAuth): Create RotateRoots domain and job	4 years ago
Todd	43bcbba47f	Implement UpdateWorker service method (#2133)	4 years ago
Jeff Mitchell	c59d0df611	Add worker creation ACLs (#2138) ... This is a bit more than simply adding the action; we had some checks to ensure that list/create could only happen/not happen in some cases and those had to be modified to account for subactions.	4 years ago
Haotian	1830605a7e	refact(servers) Update api for new worker and controller server tables (#2101) ... * Discontinue support for old Server message in ServerCoordinationService. Split message into ServerWorkerStatus and UpstreamServer (which currently contains controller addresses). Remove unnecessary fields. Modify workerStatusServer to use new fields. Co-authored-by: Todd <github@quaddi.com>	4 years ago
Jeff Mitchell	1987264bc3	Migrate storage to database repo (#2132)	4 years ago