247 Commits (fe2ee7ef4a7e58f8e60c2f840ce84c1912dc38b3)

Author	SHA1	Message	Date
Jeff Mitchell	fe2ee7ef4a	Change behavior of `-token` and `-password` to support env/file only (#2327) ... * Revert "Remove `-token` flag (#2303)" This reverts commit 65cff995d7. * Change behavior of -token * Add use of MustParsePath * Update changelog * Use errors.Is	4 years ago
Jeff Mitchell	8800ec9c94	Reorganize logic to allow a poison pill (#2317)	4 years ago
Jim	d269ebc630	chore: update go-kms-wrapping dependency (#2300) ... Updated this dependency to fix a panic in boundary which occurred when vault (transit) was unreachable. It was fixed in the pkg in this commit: f70fdac27c	4 years ago
Jeff Mitchell	5fccc5a0b8	Update nodeenrollment dep	4 years ago
Jeff Mitchell	d44b8e7747	Pull in most recent nodeenrollment release	4 years ago
Jeff Mitchell	c9f081fb83	Pull in most recent nodeenrollment release	4 years ago
Jeff Mitchell	8f2ef45a01	Update against new version of nodeenrollment split listener (#2280)	4 years ago
Jeff Mitchell	011e2e7425	Add ssh private key type and add type to static store (#2262) ... Co-authored-by: Louis Ruch <louisruch@gmail.com>	4 years ago
Jim	3da78aa7e4	refactor (kms): Update dependency required a small refactor (#2253)	4 years ago
Jeff Mitchell	81af61ae7d	Add client next protos to KMS connection info (#2246) ... This builds on the previous change in the nodeenrollment library to allow KMS connections to store incoming ALPN NextProto information.	4 years ago
Jeff Mitchell	1596ff3d1c	Update against new nodee conn type (#2245)	4 years ago
Danielle Miu	15f8f63b2d	chore: Prep for 0.9.1 release	4 years ago
Johan Brandhorst-Satzkorn	ed406e2853	fix: Upgrade configutil dependency (#2239) ... Fixes https://discuss.hashicorp.com/t/latest-boundary-versions-ignoring-plugins-execution-dir/41281 See: bf6d78ef5b	4 years ago
Jeff Mitchell	77c3ce1cd2	Update nodeenrollment to v0.1.4	4 years ago
Jeff Mitchell	90c6b1bad8	Update nodeenrollment dep to 0.1.3	4 years ago
Jeff Mitchell	6ffef1e4b5	Update nodeenrollment dep	4 years ago
Louis Ruch	26bc992f38	chore(release): Update API and SDK deps	4 years ago
Jeff Mitchell	32d04b9ce7	Allow a worker to use KMS auth but accept PKI for proxy (#2206) ... This essentially worked for non-dev mode before but would create storage directories that weren't actually used or needed, and it didn't work in dev mode because it made assumptions about the presence of a worker auth kms or not. This fixes those behaviors.	4 years ago
Jeff Mitchell	cca044d8cb	Update nodeenrollment to v0.1.0	4 years ago
Jim	f6c4e3c896	feature (worker): add worker events around authentication (#2157)	4 years ago
Jeff Mitchell	d1b3b2441f	Add node rotation (#2142)	4 years ago
Jeff Mitchell	4117841cf9	Use persistent storage for worker auth credentials (#2139)	4 years ago
Jeff Mitchell	caf19f867e	Rename some variables to remove Nodee	4 years ago
Jeff Mitchell	cd9b10721f	Pull in new nodeenrollment lib to fix some bugs	4 years ago
Jeff Mitchell	1ee2c0dde0	Switch nodeenrollment to staging branch	4 years ago
Jeff Mitchell	46e97a2b91	Update to new nodee lib bits (#2120)	4 years ago
Jim	70c5da1048	feature (workers): add repository CreateWorker(...) (#2105)	4 years ago
Jeff Mitchell	f6ef708466	Update against new nodeenrollment registration cache	4 years ago
Jeff Mitchell	1f550722a2	Sync against current library state	4 years ago
Jeff Mitchell	0581e164f1	Update nodeenrollment dep	4 years ago
Jeff Mitchell	2f06513a3a	Merge branch 'main' into llb-byow	4 years ago
Jeff Mitchell	e84a2e639f	Revert downgrade of go-kms-wrapping	4 years ago
Jim	785241237e	refactor (kms): adopt the go-kms-wrapping/extras/kms package (#2027) ... * feature (db): add Db.UnderlyingDB() This is needed to allow for integration with bits that need a *dbw.DB * feature (kms): add new go-kms-wrapping/extras/kms dependency * refactor (kms): schema changes required to adopt extras/kms pkg * refactor (kms/iam): rename to DeprecateCreateKeysTx(...) * refactor (kms): remove deprecated test * refactor (kms): refactor Kms type This refactor includes renaming the existing type to DeprecatedKms and then refactoring the Kms type to become a wrapper of go-kms-wrapping/extras/kms * refactor (kms): delete all the unneeded bits All this stuff is not needed now that we're using go-kms-wrapping/extras/kms * refactor (db): fixup tests after kms refactor * refactor (kms/tests): use testing.TB for test helpers Our test helper packages were not possible to use with benchmarks. This refactor switches to testing.TB to allow both tests and benchmarks to use the helpers. * tests (session benchmarks): refactor to use new Kms type * refactor (schema): rm test which relies on deprecated Kms code * refactor (kms): post rebase on main changes required * chore (kms refactor): re-add unit test from main * refactor (kms): uses migrations that don't include KMS schema changes	4 years ago
Jeff Mitchell	00e57db60f	Adapt to library changes	4 years ago
Jeff Mitchell	837eb9e6f1	Update nodeenrollment dep against new dev branch	4 years ago
Jeff Mitchell	ab4d542fad	Add multihop auth support (#32)	4 years ago
Jeff Mitchell	f748af7b02	Initial BYOW auth PoC (#29)	4 years ago
Jeff Mitchell	957fe19846	Bump to Go 1.18 (#2036)	4 years ago
Johan Brandhorst-Satzkorn	f39553abb3	chore: Release prep for v0.8.0	4 years ago
Johan Brandhorst-Satzkorn	e864652b33	feat(sessions): Add list benchmarks ... The list benchmark tests uses pre-created database dumps to run its benchmarks. This benchmark will be used to guide optimizations around listing of sessions. Fixes https://hashicorp.atlassian.net/browse/ICU-4042	4 years ago
Johan Brandhorst-Satzkorn	6a37bd9710	Upgrade grpc-gateway version to v2.10.0 (#1954) ... This new version will let us hide fields from the OpenAPI output	4 years ago
Jim	addbfee593	chore: upgrade gofumpt to v0.3.1 (#2028)	4 years ago
Johan Brandhorst-Satzkorn	b1d6a1da9a	Switch to buf for protobuf generation (#1944) ... * Install buf with go install This reduces the impact of using buf on our dependency closure, which was significant. It also avoids potential issues with building buf given our own internal dependency constraints. This has caused issues (including crashes!) in the past. See https://github.com/cockroachdb/cockroach/issues/67216#issuecomment-874176186 for more discussion on using tool dependencies generally, and https://github.com/bufbuild/buf/issues/52 for an example of where this sort of thing caused an issue for a user. * Upgrade buf version We should migrate to v1 sooner rather than later, as it has some breaking changes from v0. * Change buf lint/breaking commands These commands were moved up one level for v1 * Migrate to buf.yaml to v1 * Remove unused imports These were uncovered by using "buf lint". * Use buf v1.3.1 * Depend on googleapis and grpc-gateway via BSR * Switch to buf for proto generation * Remove third party dependency * Remove unused tools and scripts * Move local protos up one level * Temporarily don't fail on breaking changes * Generate CI config * Fix generation of controller.json * Replace use of deprecated flag * Remove unused import, regenerate files * Remove temporary skipping over breaking check	4 years ago
Jeff Mitchell	58a448fc6a	Put session ID in ALPN (#1966) ... This allows us to use SNI for actual host (e.g. routing) information. We don't have the client cert yet so we can't look at that, so this provides a way for us to convey the information needed to look up that session's TLS stack. Using SNI for hosts means we also run into the fact that we don't have automatic agreement in terms of SANs. So when generating the certs we now also pass worker address information to the function to be encoded in the cert. Finally, there is a change in how the websocket dialing happens, because http.RoundTripper tries to be too clever for its own good and overwrites NextProtos on a whim.	4 years ago
Todd	3eb22b073a	Defines the controller api metrics and registers them at controller startup (#1917) ... Co-authored-by: Hugo Vieira <hugoamvieira@users.noreply.github.com>	4 years ago
Johan Brandhorst-Satzkorn	803d916279	Update zalando/go-keyring with freebsd fix (#1938)	4 years ago
Johan Brandhorst-Satzkorn	9dc8c45634	Revert version upgrade of dbus and go-keyring (#1936) ... * Revert version upgrade of dbus and go-keyring The combination of these versions were causing build errors on freebsd * Only revert zalando/go-keyring	4 years ago
Jeff Mitchell	c99907c6c5	Update keyring deps to remove deprecation warnings (#1924)	4 years ago
Jeff Mitchell	20011021ee	Update against tagged sdk/api versions	4 years ago
Jeff Mitchell	7eb29261b2	Update to go-kms-wrapping version 2, and plugin-based KMS (#1901)	4 years ago