2604 Commits (fe129b4268abe24dc3b1338536282d28383affb6)

Author	SHA1	Message	Date
Timothy Messier	fe129b4268	fix(metrics): Fix matching logic for authorize session endpoint (#5121) ... The target authorize session endpoint allows for alternative target identifiers besides the public id. For this to function correctly, the grpc gateway path definition for the endpoint deviates from the common pattern used for other endpoints that include ids. When this change was done, it was not accounted for in the logic used to capture the prometheus metrics for api requests to this particular endpoint, resulting in the metrics never incrementing for the authorize session endpoint. This fix updates the matching logic used for the metrics to ensure that the metrics are incremented for this endpoint. See: c149bc4a79	2 years ago
dani	1b24cab932	update bsr tests to use ::1 (#5120)	2 years ago
Damian Debkowski	9576ed40dc	test: improve test to ensure ipv6 compatability (#5113)	2 years ago
David Bond	61c1544446	Fix panic in credential renewal job (#5116) ... This commit modifies the credential renewal job to handle a case where the `renewLease` method can return `nil, nil`. Currently, a panic is caused by usage of the `renewedCred` variable in this scenario. This commit adds a nil check and returns an error if the `renewedCred` variable is returned as `nil`. Signed-off-by: David Bond <davidsbond93@gmail.com>	2 years ago
Jeff Mitchell	b120a03f43	Fix tests (#5114)	2 years ago
Ryan Derr	913e6d755f	ICU-11661 Add scope name in options slice for authorized-sessions (#5108)	2 years ago
Damian Debkowski	390fca3306	test(server): validate ipv6 address for upsert worker status (#5079)	2 years ago
Damian Debkowski	26a07c1418	fix(sbc): ensure secrets cannot be empty & add unit tests (#5102)	2 years ago
Johan Brandhorst-Satzkorn	41de35f2b1	internal/daemon/controller+worker: propagate downstream timeout (#5083) ... Propagate the downstream worker timeout into the downstream receiver and downstream ticker so we have a configurable consistent timeout value to use for worker to worker interactions. Also change the atomic.Pointer to an atomic.Int64 for consistency with other values.	2 years ago
Irena Rindos	83b61275d5	(cmd): unhide client agent commands (#5097)	2 years ago
Johan Brandhorst-Satzkorn	a830892fec	Some test fixes (#5084) ... * internal/session: update variable name in test This was missed in #5071 * internal/tests/cluster: skip failing tests These tests will need to be fixed or removed. It is not clear why they are failing, but they are always failing. * Makefile: try upgrading golangci-lint * internal/host/plugin: fix flaky test Hosts contain IP addresses in string form, whose order is not defined.	2 years ago
Damian Debkowski	89c9a309ce	test(host): validate ipv6 address for hosts (#5052)	2 years ago
Damian Debkowski	bd03c99f89	test(target): validate ipv6 address for tcp targets (#5076)	2 years ago
dani	557591967a	add tests for sql ip address columns to ensure ipv6 capabiltiy (#5062)	2 years ago
Jeff Mitchell	66af7dba98	Allow reloading some server timings (#5071) ... Allows changing grace period and a few other things timing-related via HUP instead of just a restart. Tested manually via config changes and HUP.	2 years ago
Jeff Mitchell	35d1df7388	Two fixes in our Go API code: (#5066) ... * Replace `interface{}` with `any` * For options that are bools, don't always set true; set to the actual value passed in (some options already behaved this way, but they all should)	2 years ago
David Bond	660e2063a4	Return HTTP 400 status for inactive OIDC auth methods (#5048) ... This commit modifies the OIDC authentication start method to return a 400 (Bad Request) error if a client attempts to start the authentication flow against an OIDC auth method that is set to inactive. This is something we noticed in our error logs in HCP Boundary that is impacting our SLOs. Previously this returned its own error code which is mapped to a 500 response. Tests have been updated to catch this new scenario. Signed-off-by: David Bond <davidsbond93@gmail.com>	2 years ago
Elim Tsiagbey	306c722750	feat: Add support for capturing URL actions in request info (#5044) ... * feat: Add support for capturing URL actions in request info - Pass request context to services to validate actions. - Validate actions for auth methods during authentication. `/v1/auth-methods/{{AUTH_METHOD_ID}}:authenticate:callback` is currently only supported on `OIDC` auth methods. An error is thrown if `:callback` is not supported	2 years ago
Johan Brandhorst-Satzkorn	4a031d9910	api: remove items deleted during refresh pagination (#5056) ... The API automatically paginates to the end of a pagination, and would take into account any items updated and subsequently removed since the last pagination. It now also removes any items removed during the current pagination.	2 years ago
Elim Tsiagbey	84707c04cb	feat: Disable path length fallback (#5050) ... Add `WithDisablePathLengthFallback()` runtime option to the grpc-gateway mux HTTP server. This prevents the issue where the request method can be overridden with a `X-HTTP-Method-Override` header.	2 years ago
Johan Brandhorst-Satzkorn	96688b36d5	internal/daemon: simplify time update tests (#5041) ... Using time.After makes the intent clearer	2 years ago
Elim Tsiagbey	123286cf94	feat: Validate LDAP URL port number (#5046) ... Add validation for the port number in LDAP URLs. If a port number is provided, it is checked to ensure it is a valid integer and within the valid range. This validation helps prevent errors when configuring LDAP authentication.	2 years ago
Elim Tsiagbey	e6d355b65a	fix: constant-time comparison of grpc-gateway tickets (#5031) ... Update GRPC Gateway tickets to compare tickets in constant-time	2 years ago
Hugo	1c62470ba6	chore(cmd): Move FlagClientAgentPort and flagTargetDefaultPort to uint16	2 years ago
Hugo	3e3f2153c0	feat(cmd): New Uint16 flag type	2 years ago
Hugo	bf9dbd818e	chore(cmd): Remove IntVar and move to Int64Var	2 years ago
Hugo	3195dcba4e	chore(cmd): Remove UintVar and move to Uint64Var	2 years ago
Hugo	abb2d50494	fix(worker): Use 16-bit int parsing for TCP port	2 years ago
Louis Ruch	a3788ab978	fix(policy): Cascade delete policy when scope is deleted (#5014)	2 years ago
Sorawis Nilparuk (Bo)	350ac90a57	implement configurable getDownstreamWorker timeout (#5007) ... * implement configurable getDownstreamWorker timeout * add parsing test * typos * fix tests * fix worker tests * 0 is a valid value	2 years ago
Hugo	903039e885	fix(daemon): Return 404 if alias interceptor ResolveRequestIds fails (#5006)	2 years ago
Johan Brandhorst-Satzkorn	a77769fdb6	internal/server: only use non-nil tags (#4996)	2 years ago
Damian Debkowski	5707a64b20	fix(db): remove storage_plugin_storage_bucket_secret-rewrapping-job table (#4993)	2 years ago
Jim	28b465e4b8	refact: to use go-dbw CreateItems, DeleteItems (#4974) ... * refact: to use go-dbw CreateItems, DeleteItems Latest version of go-dbw updated the signature of CreateItems(...) and DeleteItems(...) on a happy note this latest version of go-dbw actually does batch inserts and updates for this functions. * all: regenerate protos with new protoc-gen-go version	2 years ago
Dan Heath	bbbe971ed1	docs: Move permissions to config for usage docs (#4962) ... * docs: Move permissions to config for usage docs * docs: Update permissions concepts (#4970) * docs: Update permissions concepts * docs: Delete comments * docs: Structural edits and adding workflow * docs: Fix wording * docs: Change guide name, add resource table * Rab manage roles refactor (#4980) * refreshes the manage-roles docs * adds href for common-workflows/manage-roles to configuration/identity-access-management * docs: Fix a couple typos * docs: Style updates * docs: Fix image links, update alt text * docs: Add more info/next steps sections * docs: Remove number for single instruction * fixes screenshot --------- Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> * updates path to resource-table.mdx * sets aliases scope to Global * updates aliases scope in resource table * clarifies assigned scope id * Update website/redirects.js Co-authored-by: Michael Li <michael.li@hashicorp.com> --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com> Co-authored-by: Robin Beck <stellarsquall@protonmail.ch> Co-authored-by: Michael Li <michael.li@hashicorp.com>	2 years ago
Damian Debkowski	85b9adea81	feat(loopback): support dynamic credentials (#4982)	2 years ago
Lisbet Alvarez	126c4f55a0	chore: update ui commit to 219eba6 (#4969)	2 years ago
Irena Rindos	2191aa1d03	refact(session connection): remove session connection state table (#4617) ... * refact(session connection): remove session connection state table	2 years ago
Lisbet Alvarez	eb6e1b558d	chore: bump ui commit to 25a99a4 (#4957)	2 years ago
Lisbet Alvarez	bf41d23dbe	chore: bump ui commit to 10c128e (#4950)	2 years ago
Damian Debkowski	1be0e5d413	fix: pass along storage bucket credential id for sb update job (#4947)	2 years ago
Lisbet Alvarez	59d5f854cb	chore: bump ui commit to 03376f0 (#4946)	2 years ago
Danielle Miu	603719aa9b	make gen for version 0.17.0	2 years ago
Lisbet Alvarez	184b1bf043	update ui commit to 96b6486 (#4942)	2 years ago
Guy J Grigsby	3316ef5228	Update attributes description for AuthenticateRequest to match proto (#4937) ... update attributes description for AuthenticateRequest to match proto and generate updated code.	2 years ago
Damian Debkowski	a20aae9879	update persisted storage bucket credential states from worker status	2 years ago
Damian Debkowski	4131c4b324	feat(cmd): display remote storage states for workers	2 years ago
Damian Debkowski	c0cf5c4e1b	feat(api): return remote storage states for worker	2 years ago
Elim Tsiagbey	11272b6c2a	feat: update storage to support dependency calls	2 years ago
Damian Debkowski	00e4c5448b	feat: workers filtered by sbc state	2 years ago