boundary

Commit Graph

Author	SHA1	Message	Date
Sepehr	fcb29ed919	observation(event): add req/resp to observations and recursively scan observation tags	3 years ago
Sepehr	e278964422	observability(events): Adding telemetry flag and and telemetry sink event type with tests	3 years ago
Sepehr	16d86d601a	Add additional observation tags, remove from version and authorized_action	3 years ago
April Ayres	23c969ed39	Add observability tags to plugin protobuf.	3 years ago
Sepehr	14af8e8cd7	observation tags proto messages	3 years ago
Jeff Mitchell	b64eadedbf	Fix flaky TestServer_ReloadInitialUpstreams (#3758 ) With the KMS changes this should never have worked at all (because the different databases means the credentials conveyed after the KMS-based authentication would never be valid). However, it was sometimes passing because of a race condition: the worker could be found in the database before the new credentials were returned to the worker, causing the worker to start at the KMS step with the second controller. This changes the test to use the same database for two controllers, but to only ever have one running at a time, and uses a sequence of two changed (or unchanged, depending) status updates from the worker to ensure that the reload was successful.	3 years ago
Louis Ruch	d158c1475b	chore: Update changelog (#3643 )	3 years ago
Michael Li	12c12f378a	chore(enos): Move `terraform-enos-aws-infra` to `boundary` (#3745 ) * chore(enos): Move terraform-enos-aws-infra to boundary The terraform-enos-aws-infra repo was a terraform module to set up the base aws infrastructure. Vault made some local updates that might mitigate flakiness we've been seeing ("can't delete due to dependencies" error). We are replacing our usage of that module Vault's local copy. * chore(enos): Modify service user to allow DeleteRoute * fixup! chore(enos): Move terraform-enos-aws-infra to boundary * chore(enos): Rename variable for clarity	3 years ago
Irena Rindos	8a0b8d84d8	feat(event): remove node on pipeline failure (#3736 )	3 years ago
Jim	6c54988e58	chore: update cap/ldap dep (#3748 ) cap/ldap updated it's upstream dep on go-ldap	3 years ago
Johan Brandhorst-Satzkorn	2e0587bff0	credential: fix lint errors (#3746 ) The existing pattern was subject to a bug whereby a lock value was copied every time the value was passed around. This was happening because of the use of an embedded protobuf type. To avoid copying a mutex, use a pointer type in the embedding. Also fixes a few linter warnings complaining about the use of unkeyed literals.	3 years ago
Adam Bouhmad	35a8fa62cf	Update Vault Credential Library Docs with additional options (#3739 ) * Update Vault Credential Library Docs with additional Options * Update credential-libraries.mdx * docs: Minor copy edits --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Jim	0d19892e03	fix (events): convert multierror to stdlib error (#3743 ) * fix (events): convert multierror to stdlib error multierror errors will be converted to a stdlib error (because multierror doesn't support json marshaling). * refact (errors): convert from multierror to stdlib errors.Join(...) * refact: convert from pkg/errors to stdlib error wrapping	3 years ago
Michael Li	98f8383a2b	test: Add option for logging in test controller (#3738 )	3 years ago
Irena Rindos	c3d3000a3e	chore: update go-eventlogger (#3735 )	3 years ago
Irena Rindos	bf595f8599	feat(events): add deregister pipeline (#3729 ) * feat(events): add deregister pipeline	3 years ago
Dan Heath	b29438427a	docs: Update What is Boundary video (#3731 )	3 years ago
Michael Li	94dd9e84fe	test(e2e): Refactor vault setup method (#3724 ) * refact(e2e): Pass in boundary-controller-policy to method This allows any boundary-enterprise specific test packages to point to their own testdata directory * test(e2e): Fix assertion statement * refact(e2e): Move method call for clarity	3 years ago
Damian Debkowski	e3e848d847	feat(event): new storage event type (#3719 )	3 years ago
Danny Knights	0f05b19e04	SSH and TCP definition for Targets (#3513 ) * Added detail to targets.mdx around target type in relation to whether using injected credentials, i.e. setting type to ssh or tcp * Update website/content/docs/concepts/domain-model/targets.mdx * Update website/content/docs/concepts/domain-model/targets.mdx * docs: Update target type info, add requirements * docs: Revise SSH credential text * docs: Clarify reference to SSH --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Irena Rindos	6161635f65	feat(event): add register pipeline (#3714 )	3 years ago
Michael Li	72efe74f24	test(e2e): Add worker health check when setting up infra (#3708 ) * test(e2e): Add worker health check when setting up infra * test(e2e): Set limits on postgres container This was done to potentially reduce some load on runners	3 years ago
Michael Li	e552b12f22	test(e2e): Add missing proxy listener to config file (#3715 )	3 years ago
Yoko Hyakuna	ad5ad69d54	[Assembly] Boundary Commands (CLI) docs (#3411 ) * Add 'Commands (CLI)' docs * Update index.mdx Added Environment variables section * Add 'connect' sub-folder structure * Adding listen address and port environment variables * add connect to the docs navigation * docs: Add Florin's update to index * docs: Fix links and typo * Add front-matter to resolve the PR check issue * Update postgres.mdx Boundary helper for POSTGRES * Completed 'boundary accounts' command docs * Draft connection option documentatino for kube, http, and rdp (#3455) * Style updates for consistency * Clean up using partials * Add 'ssh' doc & updated style for consistency * Fix paste error * Fix the format issue on 'connect ssh' doc * Add 'auth-methods' command doc (#3520) * Add the docs for 'logout', 'server', and 'dev' commands (#3524) * Add the docs for 'logout', 'server', and 'dev' commands * Update the front matter * Add auth-tokens and authenticate command docs (#3575) * Add config command docs (#3576) * updates to the ssh helper command docs (#3523) * updates to the ssh helper command docs * docs: Fix code block * docs: Add minor copy edits --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * docs: Add worker commands * docs: Update workers subcommands (#3598) * docs: Update worker subcommands * docs: Update certificate-authority subcommand * doc: Fix syntax for code refererences * docs: Add `users` commands (#3599) * docs: Add `users` commands * docs: Add more subcommands * docs: Add `target` commands (#3608) * Add command docs for 'credential-libraries' (#3610) * Add 'credential-stores' command docs (#3611) * Add 'credential-stores' command docs * Add the output message * Fix a typo * Fix a typo * Update the dummy token value * docs: Add `storage-bucket` commands - update (#3615) * docs: Add `sessions` commands (#3616) * docs: Add `session-recordings` commands (#3617) * Add 'credentials' command docs (#3619) * Add 'credentials' command docs * Fix typos * docs: Add `scopes` commands (#3620) * docs: Add `scopes` commands * docs: Fix typos * docs: Add `roles` commands (#3621) * docs: Add `roles` commands * docs: Add remaining subcommands * Add 'database' command docs (#3628) * Add 'database' command docs * Update the format inconsistency * docs: Add `managed-groups` commands (#3626) * docs: Add `managed-groups` commands * docs: Clarify description * docs: Add `hosts` commands (#3629) * docs: Add `host-sets` commands (#3630) * docs: Add `host-sets` commands * docs: Copy edits * docs: Add `host-catalogs` commands (#3632) * Add 'boundary groups' command docs (#3636) --------- Co-authored-by: kevin-loehfelm <37027455+kevin-loehfelm@users.noreply.github.com> Co-authored-by: kevin-loehfelm <kevin.loehfelm@hashicorp.com> Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Co-authored-by: Florin Cătălin Țiucra-Popa <106736683+FlorinTP@users.noreply.github.com> Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>	3 years ago
Jim	457b618f6e	chore: update azurevaultkey wrapper dependency. (#3706 ) This update brings in PR #155 which adds support for azure workload identity authentication	3 years ago
Irena Rindos	7bd2d2c913	feat(worker): allow hcp cluster id to be sourced from env var (#3709 ) * feat(worker): allow hcp cluster id to be sourced from env var	3 years ago
Irena Rindos	6f10a0ac87	chore: update go-eventlogger (#3707 ) * chore: update go-eventlogger	3 years ago
Irena Rindos	9733a250fa	refact(event): move observability/event to event (#3704 )	3 years ago
Jim	dbda7e3e7a	docs (auth/ldap): add new fields maximum_page_size, dereference_aliases (#3700 ) Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>	3 years ago
Michael Li	ff34cb629e	test(e2e): Add a test for a single-hop worker (#3690 ) * refact(e2e): Add env for workers * test(e2e): Add test for single-hop worker * fixup! refact(e2e): Add env for workers * fixup! test(e2e): Add test for single-hop worker * fixup! test(e2e): Add test for single-hop worker * fixup! test(e2e): Add test for single-hop worker * fixup! test(e2e): Add test for single-hop worker	3 years ago
Jim	5f66f2fa8e	chore: update cap/ldap dependency (#3699 )	3 years ago
Elim Tsiagbey	955f14d730	chore: update changelog with new worker upstream connection status (#3693 ) Add missing changelog entry for https://github.com/hashicorp/boundary/pull/3650	3 years ago
Jim	8ee4f6ead0	feat (auth/ldap): add support for new fields to CLI (#3685 ) Added support for new flags for: max-page-size and deref-aliases	3 years ago
Elim Tsiagbey	d271025863	fix: Flakey upstream connection test (#3689 ) The connectivity state changes for `upstream_connection_state` health field is causing the test to be flakey. Commenting out the field during assertions. `upstream_connection_state` health field is tested in other tests	3 years ago
Johan Brandhorst-Satzkorn	f89515a19c	all: avoid mutating global state in parallel tests (#3687 ) The SetupSuiteTargetFilters globally mutates the function used for logic inside the target handler service. This means that we could get inconsistent logical behavior in certain tests that were run in parallel, since the logic can change at runtime. Ensure tests that make use of this function are never run in parallel with other tests.	3 years ago
Johan Brandhorst-Satzkorn	4789c00177	ui: bump UI commit (#3688 ) The old commit artifact has expired.	3 years ago
Michael Gaffney	0af36d3d8a	refactor(sql): Consolidate changes to oplog_entry into one migration	3 years ago
Michael Gaffney	3befccffd7	refactor(sql): Reorder and rename oplog kms migrations	3 years ago
Michael Gaffney	d8393e5793	style(sql): fix indenting and remove trailing whitespace	3 years ago
Jim	a16033b73a	fix (kms): move oplog DEK into its own internal kms (#3665 ) * fix (auth/ldap): fix which DEK is used for oplog during authenticate * chore: update go-kms-wrapping dep for new extras/kms changes The latest version supports setting a table name prefix for a kms which is needed to fix our oplog DEK problem * chore: update extras/kms dep This latest version supports an optional TableNamePrefix which is required to fix our existing oplog DEK issue. * fix (oplog): schema oplog DEK fix These changes will allow use to store the oplog DEK in it's own set of tables, so they won't get deleted when a scope is deleted * fix (kms): move oplog DEK into its own internal kms * tests: update tests to be compatible with oplog fix * tests: remove migration tests which are incompatible with oplog fix These tests no longer work because they are missing the required schema changes for the oplog fix	3 years ago
Michael Li	9a6b0d26cb	test(e2e): Add test for `boundary connect postgres` (#3671 ) * refact(e2e): Rename env * test(e2e): Add test for `connect postgres` * fixup! test(e2e): Add test for `connect postgres`	3 years ago
Johan Brandhorst-Satzkorn	78161c0187	Revert "Revert "Upgrade Go version (#3677 )"" (#3681 ) This reverts commit `10837ab195`. M E T A	3 years ago
Jim	dc89ca28a1	feat: add API support for additional LDAP auth method fields. (#3679 ) * feat (auth/ldap): add Repo support for max page size and deref aliases (#3670) * chore: update cap/ldap dependency This latest version of cap/ldap adds support for MaxPageSize and DerefAliases * feat (auth/ldap): add MaxPageSize and DerefAliases to storage proto * feat (api/authmethods): add new ldap fields. Add support for maximum_page_size and dereference_aliases * feat (auth/ldap): schema changes to support new LDAP attributes * feat (auth/ldap): add Repo support for max page size and deref aliases * feat (handlers/ldap): add support for new fields (#3674) Added API support for new ldap fields: MaximumPageSize and DereferenceAliases * chore: add CHANGELOG entry for new api auth ldap fields	3 years ago
Johan Brandhorst-Satzkorn	b2c0300dac	Revert "Upgrade Go version (#3677 )" (#3680 ) This reverts commit `2b2eada393`. The change breaks out integration tests because the new Docker image is not available yet. We'll revert this change once it is.	3 years ago
Johan Brandhorst-Satzkorn	2b2eada393	Upgrade Go version (#3677 ) This avoids an RCE in the Go tooling and fixes some JS escaping in html/template. See https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM?pli=1 for more information.	3 years ago
Johan Brandhorst-Satzkorn	a73db844fe	internal/perms: Fix grant parser bugs (#3660 ) * internal/perms: Fix grant parser bugs This fixes two bugs in the grant parser: 1. The parser would accept "," as an output field when parsing from JSON. This would then make it into the canonical string, which would make it look like we had a trailing comma. Disallow the use of a comma as an output field. 2. The parser would accept empty IDs when parsing from JSON. Make this behavior consistent with the text behavior. * internal/perms: also handle empty IDs in text form * internal/perms: disallow any commas Commas anywhere in ids or output fields corrupt the canonical output string. * internal/perms: disallow any reserved characters id, ids and actions could all contain one of the reserved characters ",", "=" or ";" when used with JSON.	3 years ago
Jeff Mitchell	69bafbd4e0	Mention that SIGHUP affects the database URL (#3612 )	3 years ago
Jim	d5411a26f6	chore: update protobuf dep (#3669 )	3 years ago
Elim Tsiagbey	fabd4093de	feat: Worker Connectivity Health Check (#3650 ) * feat: Worker Connectivity Health Check Add worker upstream connection state. API calls to the worker's ops `/heath?worker_info=1` endpoint should now return a new filed called `upstream_connection_state` ``` { "worker_process_info":{ "state":"active", "active_session_count":0, "upstream_connection_state":"READY" } } ``` The states returned will be GRPC connection states: https://grpc.github.io/grpc/core/md_doc_connectivity-semantics-and-api.html There could be multiple upstream addresses but GRPC manual resolver determines the state of the connection.	3 years ago
hashicorp-tsccr[bot]	c55df52d44	Result of tsccr-helper -log-level=info -pin-all-workflows . (#3658 ) Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>	3 years ago

1 2 3 4 5 ...

3383 Commits (fcb29ed919b63f253f90f0703bc2b23405c7fca6) All Branches Search

3383 Commits (fcb29ed919b63f253f90f0703bc2b23405c7fca6)

All Branches