+1





![hashicorp-copywrite[bot]](/avatar/120e964899bc27ee3737fc0cc3585755e19422fe9bff82b60b4b0c13d481706c?size=40)

![dependabot[bot]](/avatar/bd5a8d6c673b738d52b0ac42a110045f3f964b3ebfc1d60ea805af743b1dc0e6?size=40)
2d5323b07a
* fix: 🐛 add model hook to host route for dynamic host catalogs (#1659) * fix: 🐛 add model hook to host route for dynamic host catalogs ✅ Closes: ICU-8594 * refactor: 💡 remove page formatting for host route * [COMPLIANCE] Add Copyright and License Headers (#1660) Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Carlos Alcaide Corvo <ccorvo@hashicorp.com> * chore(deps-dev): bump webpack from 5.59.1 to 5.76.0 (#1654) Bumps [webpack](https://github.com/webpack/webpack) from 5.59.1 to 5.76.0. - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](https://github.com/webpack/webpack/compare/v5.59.1...v5.76.0) --- updated-dependencies: - dependency-name: webpack dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Randall Morey <randall@randallmorey.com> Co-authored-by: Carlos Alcaide Corvo <ccorvo@hashicorp.com> * Feature metadata (#1661) * feat: 🎸 load edition from controller-metadata.json * refactor: 💡 rename edition and add licensed features support * chore: 🤖 support dev toggling of licensed features * chore: 🤖 rename ent edition * Update ui/admin/app/services/feature-edition.js * Update ui/admin/app/instance-initializers/feature-edition.js Co-authored-by: Zhihe Li <zhihe.li@hashicorp.com> * chore: 🤖 cleanup * chore: 🤖 feature edition disabled in tests / fix test cases * test: 💍 remove feature disable calls in tests * test: 💍 fix broken tests * fix: 🐛 fix config bug * fix: 🐛 fix broken test due to feature flags --------- Co-authored-by: Zhihe Li <zhihe.li@hashicorp.com> * fix: 🐛 Fix missing translation (#1662) Fix missing translation on the toggle color theme selector * Resolutions audit: Delete 3 oldest resolutions (#1663) * Delete bl from resolutions * Delete tough-cookie from resolutions * Delete npm from resolutions * chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 (#1665) Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics) from 4.1.0 to 4.1.1. - [Release notes](https://github.com/kornelski/http-cache-semantics/releases) - [Commits](https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1) --- updated-dependencies: - dependency-name: http-cache-semantics dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: 🤖 Update electron-forge/* packages (#1666) Update electron-forge/* packages * feat: 🎸 Add support to display external name for dynamic hosts (#1664) * feat: 🎸 Add support to display external name for dynamic hosts ✅ Closes: ICU-8795 * test(admin/e2e): Add create target with address test (#1667) * chore: 🤖 update design system package (#1668) * test(admin/e2e): Define expected private key for vault credential store test (#1671) * test: 💍 (admin-e2e): Add test to create different credentials (#1670) * chore: 🤖 add json5 to resolutions per dependabot alerts (#1672) * chore: 🤖 add json5 to resolutions per dependabot alerts * fix: 🐛 remove unecessary resolutions * chore: 🤖 upgrade @storybook/ember-cli-storybook to 0.6.0 (#1669) * chore: 🤖 update @storybook/ember-cli-storybook to 0.6.0 ✅ Closes: ICU-6588 * chore: 🤖 remove css-what from resolutions * refactor: 💡 update selector for delete storage bucket test * chore: 🤖 fix yarn.lock --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: lisbet-alvarez <107949262+lisbet-alvarez@users.noreply.github.com> Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Carlos Alcaide Corvo <ccorvo@hashicorp.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Randall Morey <randall@randallmorey.com> Co-authored-by: Zhihe Li <zhihe.li@hashicorp.com> Co-authored-by: github-team-secure-boundary <hc-github-team-secure-boundary@hashicorp.com> Co-authored-by: hc-github-team-secure-boundary <82989682+hc-github-team-secure-boundary@users.noreply.github.com> Co-authored-by: Stan Ryzhov <60649800+stasryzhov@users.noreply.github.com> Co-authored-by: Dharini Jeeva <dharini@hashicorp.com>
176 lines
6.0 KiB
YAML
176 lines
6.0 KiB
YAML
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
|
|
id:
|
|
label: ID
|
|
external_id:
|
|
label: External ID
|
|
help: A read-only ID given by the plugin host catalog provider
|
|
name:
|
|
label: Name
|
|
help: Name for identification purposes
|
|
external_name:
|
|
label: External Name
|
|
help: A read-only name given by the plugin host catalog provider
|
|
description:
|
|
label: Description
|
|
help: Description for identification purposes
|
|
type:
|
|
label: Type
|
|
help: The type of the resource, to help differentiate schemas
|
|
login_name:
|
|
label: Login Name
|
|
username:
|
|
label: Username
|
|
set_password:
|
|
label: Password
|
|
help: Create a new password
|
|
password:
|
|
label: Password
|
|
grant:
|
|
label: Grant
|
|
help: A permissions grant string for a role
|
|
address:
|
|
label: Address
|
|
help: An IP, host name, or other routable address
|
|
default_port:
|
|
label: Default Port
|
|
help: The default port on which to connect
|
|
current_password:
|
|
label: Current Password
|
|
new_password:
|
|
label: New Password
|
|
started:
|
|
label: Started
|
|
status:
|
|
label: Status
|
|
session_max_seconds:
|
|
label: Maximum Duration
|
|
help: The maximum duration of a session, in seconds.
|
|
session_connection_limit:
|
|
label: Maximum Connections
|
|
help: The maximum number of connections allowed per session. For unlimited, specify "-1".
|
|
worker_release_version:
|
|
label: Release Version
|
|
help: The version of the Boundary binary the worker is running.
|
|
worker_authorized_actions:
|
|
label: Authorized Actions
|
|
worker_last_seen:
|
|
label: Last Seen
|
|
help: Last time the worker reported status.
|
|
worker_address:
|
|
help: URL and port for this worker.
|
|
worker_type:
|
|
help: Type of worker
|
|
host_set:
|
|
label: Host Set
|
|
grant_scope:
|
|
label: Grant Scope
|
|
help: Specify the scope to which this role applies.
|
|
cluster-url:
|
|
label: Cluster URL
|
|
description: The Boundary URL to which to connect (e.g. protocol://host:port)
|
|
proxy:
|
|
label: Proxy
|
|
issuer:
|
|
label: Issuer
|
|
help: The issuer URL. Boundary expects only the schema, host, and port and will strip off ".well-known/openid-configuration" if present. This will be used for configuration discovery as well as for validation of the "iss" claim.
|
|
client_id:
|
|
label: Client ID
|
|
help: An OAuth 2.0 Client Identifier valid at the Authorization Server.
|
|
client_secret:
|
|
label: Client Secret
|
|
help: The client secret is set-only and may not be unset.
|
|
client_secret_hmac:
|
|
label: Client Secret HMAC
|
|
max_age:
|
|
label: Maximum Age
|
|
help: The OIDC "max_age" parameter sent to the Authorization Server indicating a maximum acceptable time in seconds since the user's last authentication before requiring the user to reauthenticate. 0 indicates an immediate need to reauthenticate.
|
|
api_url_prefix:
|
|
label: API URL Prefix
|
|
help: The prefix that should be used for any URLs needed during the authentication flow. This includes the callback URL, the token retrieval URL, and the redirection URL used by the OIDC Authorization Server.
|
|
disable_discovered_config_validation:
|
|
label: Disable discovered config validation
|
|
help: >
|
|
If the Authorization Server's discovered configuration contains values that do not match the configuration set on this auth method, this can be set to force the local configuration to override the discovered values. This is useful in the case of slow-changing or incorrect values announced by the Authorization Server. NOTE: For safety, not providing this value will be treated the same as "false"; that is, every time the method is updated or the state is changed, this value must be set to "true" or it will be disabled.
|
|
idp_ca_certs:
|
|
label: Certificates
|
|
help: Optional PEM-encoded X.509 CA certificates that can be used as trust anchors when connecting to an OIDC provider.
|
|
certificate:
|
|
label: Certificate
|
|
allowed_audiences:
|
|
label: Allowed Audiences
|
|
help: Allowed audience claims for this auth method.
|
|
claim:
|
|
label: Claim
|
|
claims_scopes:
|
|
label: Claims Scopes
|
|
help: Optional claims scopes that will be requested during authentication.
|
|
claims_scope:
|
|
label: Claims Scope
|
|
account_claim_maps:
|
|
label: Account Claim Maps
|
|
help: >
|
|
Optional claim maps from custom claims to the standard claims of sub, name and email. These maps are represented as key=value where the key equals the from_claim and the value equals the to_claim. For example "oid=sub".
|
|
account_claim_map:
|
|
label: Account Claim Map
|
|
from_claim:
|
|
label: From Claim
|
|
to_claim:
|
|
label: To Claim
|
|
signing_algorithms:
|
|
label: Signing Algorithms
|
|
help: The signing algorithms allowed for the auth method.
|
|
algorithm:
|
|
label: Algorithm
|
|
subject:
|
|
label: Subject
|
|
email:
|
|
label: Email
|
|
full_name:
|
|
label: Full Name
|
|
key:
|
|
label: Key
|
|
value:
|
|
label: Value
|
|
callback_url:
|
|
label: Callback URL
|
|
help: The URL to which the third-party provider sends the authentication response. Paste this into the provider configuration.
|
|
filter:
|
|
label: Filter
|
|
help: A boolean expression defining a filter run against the provided information.
|
|
tenant_id:
|
|
label: Tenant/Directory ID
|
|
help: The tenant (directory) ID for your Azure Active Directory application.
|
|
subscription_id:
|
|
label: Subscription ID
|
|
help: The subscription ID for the subscription with read access.
|
|
access_key_id:
|
|
label: Access Key ID
|
|
help: The access key ID generated by AWS for the IAM user to use with this host catalog.
|
|
secret_access_key:
|
|
label: Secret Access Key
|
|
help: The secret access key generated by AWS for the IAM user to use with this host catalog.
|
|
secret:
|
|
label: Client Secret Value
|
|
help: The client secret value generated by Azure for Boundary to use for authentication.
|
|
disable_credential_rotation:
|
|
label: Disable credential rotation
|
|
help: Azure host catalogs do not yet support credential rotation.
|
|
dns_names:
|
|
label: Latest DNS Names
|
|
help: Read-only DNS names given by the plugin host catalog provider
|
|
host:
|
|
label: Host
|
|
ip_addresses:
|
|
label: Latest IP Addresses
|
|
help: Read-only public and private IP addresses given by the plugin host catalog provider
|
|
sync-interval:
|
|
label: Sync Interval
|
|
help: Optional. Number of seconds between the time Boundary syncs hosts in this set.
|
|
tags:
|
|
label: Tags
|
|
secret-editor:
|
|
details: This secret is saved but won't be displayed
|
|
edit: Click to replace this secret
|