Commit Graph
21 Commits
Author SHA1 Message Date
Elim Tsiagbey 7076cd0bad fix: filter building (#17)
- update filter building for `dryRunValidation` to append with `AND`
- Add test coverage for filter building and dryRunValidation
2024-11-06 12:43:06 -05:00
Elim Tsiagbey 0d5cc5d444 feat: add miss license header (#18) 2024-11-06 12:42:28 -05:00
Elim Tsiagbey 89c8ee2d6d feat: Set default GCP Scope (#16)
* feat: Set default GCP Scope

Update the GCP credential configuration to include a default scope for GCP access. The default scope is set to `https://www.googleapis.com/auth/cloud-platform` as recommended by [GCP's Best Practice](https://cloud.google.com/compute/docs/access/service-accounts#scopes_best_practice). This allows controlling the service account's access by granting it IAM roles.
2024-10-30 13:58:45 -04:00
Elim Tsiagbey a75b9bd310 feat: Docs (#15)
* feat: Docs

- Add docs for GCP Dynamic Host Plugin
- Remove references of instances group since we do not currently support this
2024-10-29 12:52:56 -04:00
Elim Tsiagbey 779d383a24 feat: OnUpdateSet (#13) & ListHosts (#14)
* feat: OnUpdateSet

Add support for OnUpdateSet with validation. OnUpdateSet will validate he attributes passed to it and run a dryRunValidation with the new set

* feat: ListHosts (#14)

- Update list hosts to only support listing instances
- Update host client to support Instances API
- Add reading IPV6 Address by `Ipv6AccessConfigs`
- Add internal DNS which is the hostname
2024-10-28 13:10:44 -04:00
Elim Tsiagbey e4099a5f64 feat: onCreateSet
Add support for onCreateSet with validation.
- If a filter is not provided or a status is not set, a default filter of `status = running` is used.
- update `filters` field to be a slice instead of a string
- add dryRunValidation call to validate fields
2024-10-28 13:09:23 -04:00
Elim Tsiagbey beaa93d3d8 feat: NormalizeSetData (#11)
* feat: NormalizeSetData & NormalizeCatalogData

- Add support for always normalizing host set filters as an array. This implementation follows exactly what we do for AWS as well for consistency
- No-op for NormalizeCatalogData
2024-10-28 11:02:12 -04:00
Elim Tsiagbey ba53ae16b2 feat: OnDeleteCatalog (#10)
* feat: OnDeleteCatalog

Delete managed creds (creds we rotated previously) when a host catalog is deleted
2024-10-28 11:00:14 -04:00
Elim Tsiagbey 08fd6e5b01 feat: OnUpdate Host Catalog (#9)
* feat: OnUpdate Host Catalog

Add support for onUpdate host catalog
2024-10-28 10:48:26 -04:00
Elim Tsiagbey 6b917b170d feat: OnCreateCatalog (#8)
* feat: OnCreateCatalog

- Update onCreateCatalog to support credential rotation. Service authentication type creds will be rotated since we will have the credentials for the base service account without sufficient permissions.
- `onCreateCatalog` will also do a dry run validation to validate the credentials.
- The secrets and last rotated time will be returned
2024-10-21 10:47:06 -04:00
Elim Tsiagbey 636432f2fb feat: Rotate Service Account Key (#7)
* feat: Rotate Service Account Key

- Add support for rotating service account key
- Add a check to validate the permissions for the newly created service account key
- Remove `GetClient` for GCP config since HTTPClient is not an accepted form of authentication for all clients. Switching to using Google Credentials instead for authentication
2024-10-18 11:11:10 -04:00
Elim Tsiagbey be892acbd9 feat: GCP authentication (#5)
* feat: GCP authentication

Add authentication support for:
- authentication with service account key
- authentication with impersonating service account key
- authentication with application default credentials which are read from the environment

A HTTP client with a token set will be returned and used for authentication with all clients. for example
```
gcpClient, err := gcpConfig.GetClient(ctx)
if err != nil {
	log.Fatalf("Failed to get client: %v", err)
}

client, err := computeCloud.NewInstancesRESTClient(ctx, option.WithHTTPClient(gcpClient))
if err != nil {
	log.Fatalf("Failed to create client: %v", err)
}
```
2024-09-22 23:21:58 -04:00
Elim Tsiagbey eec01f7d69 feat: add attributes (#6)
add support for google host attributes:
- project_id (Required): The project ID associated with the service account
- zone (Required): The deployment area within a region
disable_credential_rotation (Optional): Disables credential rotation by the plugin
- client_email (Optional): The email address associated with the service account. The email address used to uniquely identify the service account. It is required for authentication and authorization. If it is not set, authentication will fail.
- target_service_account_id (Optional): The unique identifier for the service account that will be impersonated.
- disable_credential_rotation (Optional): Disable the rotation of google service account key associated with the plugin
2024-09-17 10:50:10 -04:00
Elim Tsiagbey 6588e10934 feat: package structure (#2)
Update structure to match other Boundary plugins which groups packages by service
2024-09-16 14:28:54 -04:00
Elim Tsiagbey cd73a74e1e feat: rename repository (#4)
Rename repository from `boundary-plugin-google` to `boundary-plugin-gcp`
2024-09-16 12:20:08 -04:00
Elim Tsiagbey b09755d302 Merge pull request #1 from hashicorp/initial-review
Initial commit of Google Cloud dynamic host catalog plugin
2024-09-12 16:24:14 -04:00
Rosemary Wang 9e63aea3ec Add more tests and comments for Godoc 2024-08-06 11:51:00 -04:00
Louis Ruch 714c26721d test: Run unit tests on push
s
2024-07-23 19:37:46 -07:00
Rosemary Wang cb6a2b5350 Fix imports after moving repository 2024-07-22 09:51:42 -04:00
Rosemary Wang e3daac2ce8 Initial commit 2024-07-11 11:15:47 -04:00
Rosemary Wang 2a9356fc04 Initial commit 2024-07-11 11:09:06 -04:00