2020-09-24 10:17:22 -07:00
|
|
|
# Boundary CHANGELOG
|
|
|
|
|
|
2020-10-09 16:11:48 -07:00
|
|
|
Canonical reference for changes, improvements, and bugfixes for Boundary.
|
2020-09-24 10:17:22 -07:00
|
|
|
|
2021-02-02 20:51:44 -05:00
|
|
|
## Next
|
|
|
|
|
|
2021-02-05 12:39:55 -05:00
|
|
|
### Changes/Deprecations
|
|
|
|
|
|
|
|
|
|
* permissions: Update some errors to make them more descriptive, and disallow
|
|
|
|
|
permissions in some forms where they will never take effect, preventing
|
|
|
|
|
possible confusion (existing grants already saved to the database will not be
|
|
|
|
|
affected as this is only filtered when grants are added/set on a role):
|
|
|
|
|
* `id=<some_id>;actions=<some_actions>` where one of the actions is `create`
|
|
|
|
|
or `list`. By definition this format operates only on individual resources
|
|
|
|
|
so `create` and `list` will never work
|
|
|
|
|
* `type=<some_type>;actions=<some_actions>` where one of the actions is _not_
|
|
|
|
|
`create` or `list`. This format operates only on collections so assigning
|
|
|
|
|
more actions this way will never work
|
|
|
|
|
|
2021-02-03 08:58:42 -05:00
|
|
|
### New and Improved
|
|
|
|
|
|
|
|
|
|
* server: When running single-server mode and `controllers` is not specified in
|
|
|
|
|
the `worker` block, use `public_cluster_addr` if given
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/904))
|
2021-02-05 09:41:48 -08:00
|
|
|
* server: Add `read` action to default scope grant
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/913))
|
2021-02-03 08:58:42 -05:00
|
|
|
|
2021-02-02 20:51:44 -05:00
|
|
|
### Bug Fixes
|
|
|
|
|
|
|
|
|
|
* api: Fix nil pointer panic that could occur when using TLS
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/pull/902),
|
|
|
|
|
[PR](https://github.com/hashicorp/boundary/pull/901))
|
2021-02-03 09:03:12 -05:00
|
|
|
|
2021-01-29 18:36:14 -05:00
|
|
|
## 0.1.5 (2021/01/29)
|
|
|
|
|
|
|
|
|
|
*NOTE*: This version requires a database migration via the new `boundary
|
|
|
|
|
database migrate` command.
|
2021-01-06 10:41:38 -08:00
|
|
|
|
2021-01-20 12:09:55 -05:00
|
|
|
### Security
|
|
|
|
|
|
2021-01-21 16:27:20 -05:00
|
|
|
* Boundary now uses Go's new execabs package for execution of binaries in
|
|
|
|
|
`boundary connect`. This is for defense-in-depth rather than a specific
|
|
|
|
|
issue. See the [Go blog post](https://blog.golang.org/path-security) for more
|
2021-01-25 19:37:40 -05:00
|
|
|
details. ([PR](https://github.com/hashicorp/boundary/pull/873))
|
2021-01-21 16:27:20 -05:00
|
|
|
|
|
|
|
|
### Changes/Deprecations
|
|
|
|
|
|
|
|
|
|
* controller/worker: Require names to be all lowercase. This removes ambiguity
|
|
|
|
|
or accidental mismatching when using upcoming filtering features.
|
2021-02-05 09:41:48 -08:00
|
|
|
* api/cli: Due to visibility changes on collection listing, a list
|
|
|
|
|
will not include any resources if the user only has `list` as an authorized action.
|
|
|
|
|
As a result `scope list`, which is used by the UI to populate the login scope dropdown,
|
|
|
|
|
will be empty if the role granting the `u_anon` user `list` privileges is not updated to also contain a `read` action
|
2021-01-20 12:09:55 -05:00
|
|
|
|
2021-01-12 08:50:19 -08:00
|
|
|
### New and Improved
|
|
|
|
|
|
2021-01-21 16:27:20 -05:00
|
|
|
* targets: You can now specify a Boolean-expression filter against worker tags
|
|
|
|
|
to control which workers are allowed to handle any given target's sessions
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/862))
|
2021-01-20 10:53:01 -05:00
|
|
|
* api/cli: On listing/reading, return a list of actions the user is authorized
|
2021-01-21 16:27:20 -05:00
|
|
|
to perform on the identified resources or their associated collections
|
2021-01-20 10:53:01 -05:00
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/870))
|
2021-01-25 19:37:40 -05:00
|
|
|
* api/cli: Most resource types now support recursive listing, allowing listing
|
|
|
|
|
to occur down a scope tree
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/885))
|
2021-01-25 14:43:50 -07:00
|
|
|
* cli: Add a `database migrate` command which updates a database's schema to
|
|
|
|
|
the version supported by the boundary binary ([PR](https://github.com/hashicorp/boundary/pull/872)).
|
2021-01-20 12:09:55 -05:00
|
|
|
|
2021-01-06 10:41:38 -08:00
|
|
|
### Bug Fixes
|
|
|
|
|
|
2021-01-25 14:43:50 -07:00
|
|
|
* controller/db: Correctly check if db init previously completed successfully
|
|
|
|
|
when starting a controller or when running `database init`
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/805))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/842))
|
2021-01-08 17:30:41 -05:00
|
|
|
* cli: When `output-curl-string` is used with `update` or `add-/remove-/set-`
|
|
|
|
|
commands and automatic versioning is being used (that is, no `-version` flag
|
|
|
|
|
is given), it will now display the final call instead of the `GET` that
|
|
|
|
|
fetches the current version
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/856))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/858))
|
2021-01-06 10:41:38 -08:00
|
|
|
* db: Fix panic in `database init` when controller config block is missing
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/819))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/851))
|
|
|
|
|
|
2021-01-05 09:26:21 -05:00
|
|
|
## 0.1.4 (2021/01/05)
|
2020-12-21 10:07:34 -08:00
|
|
|
|
|
|
|
|
### New and Improved
|
|
|
|
|
|
2020-12-23 11:00:00 -08:00
|
|
|
* controller: Improved error handling in iam repo
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/841))
|
2020-12-21 10:07:34 -08:00
|
|
|
* controller: Improved error handling in db
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/815))
|
|
|
|
|
|
|
|
|
|
### Bug Fixes
|
2021-01-02 19:49:39 -05:00
|
|
|
|
|
|
|
|
* servers: Fix erronious global unicast check that disallowed valid addresses
|
|
|
|
|
from being assigned ([PR](https://github.com/hashicorp/boundary/pull/845))
|
2021-01-05 09:26:21 -05:00
|
|
|
* cli: Fix (hopefully) panic some users experience depending on their Linux
|
|
|
|
|
setup when running the binary
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/830))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/846))
|
2021-01-20 12:09:55 -05:00
|
|
|
|
2021-01-05 09:26:21 -05:00
|
|
|
## 0.1.3 (2020/12/18)
|
2020-11-20 09:27:44 -08:00
|
|
|
|
2020-12-09 16:05:48 -05:00
|
|
|
### Changes/Deprecations
|
|
|
|
|
|
|
|
|
|
* controller: Switch the session connection limit for dev mode and the initial
|
|
|
|
|
target when doing database initialization to `-1`. This makes it easier for
|
|
|
|
|
people to start understanding Boundary while not hitting issues related to
|
|
|
|
|
some programs/protocols needing multiple connections as they may not be easy
|
|
|
|
|
for new users to understand.
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/814))
|
|
|
|
|
|
2020-12-02 09:56:19 -08:00
|
|
|
### New and Improved
|
|
|
|
|
|
2020-12-16 17:14:47 -05:00
|
|
|
* controller, worker, cli: When the client quits before the session time is
|
|
|
|
|
over, but in a manner where the TOFU token will be locked, attempt canceling
|
|
|
|
|
the session rather than leaving it open to time out
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/831))
|
2020-12-09 10:15:41 -08:00
|
|
|
* controller: Improved error handling in hosts, host catalog and host set
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/786))
|
2020-12-02 09:56:19 -08:00
|
|
|
* controller: Relax account login name constraints to allow dash as valid character
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/759))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/806))
|
2020-12-09 14:45:53 -05:00
|
|
|
* cli/connect/http: Pass endpoint address through to allow setting TLS server
|
|
|
|
|
name directly in most cases
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/811))
|
2020-12-14 16:55:13 -05:00
|
|
|
* cli/connect/kube: New `kube` subcommand for `boundary connect` that makes it
|
|
|
|
|
easy to route `kubectl` commands through Boundary, including when using
|
|
|
|
|
`kubectl proxy` ([PR](https://github.com/hashicorp/boundary/pull/816))
|
2020-12-18 12:12:25 -05:00
|
|
|
* cli/server: Add some extra checks around valid/invalid combinations of
|
|
|
|
|
addresses to avoid hard-to-understand runtime issues
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/838))
|
2020-12-02 09:56:19 -08:00
|
|
|
|
2020-11-20 09:27:44 -08:00
|
|
|
### Bug Fixes
|
|
|
|
|
|
|
|
|
|
* cli: Ensure errors print to stderr when token is not found
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/791))
|
2020-12-02 09:56:19 -08:00
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/799))
|
2020-12-18 13:25:28 -05:00
|
|
|
* controller: Fix grant IDs being lowercased when being read back (and when
|
|
|
|
|
being used for permission evaluation)
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/794))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/839))
|
2020-11-20 09:27:44 -08:00
|
|
|
|
2021-01-06 10:41:38 -08:00
|
|
|
## 0.1.2 (2020/11/17)
|
2020-10-27 10:43:50 -04:00
|
|
|
|
2020-10-29 08:44:57 -07:00
|
|
|
### New and Improved
|
|
|
|
|
|
|
|
|
|
* docker: Official Docker image for `hashicorp/boundary`
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/755))
|
2020-10-30 16:54:53 -04:00
|
|
|
* controller: Add ability to set public address for cluster purposes
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/pull/758))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/761))
|
2020-11-05 19:22:40 -05:00
|
|
|
* ui: Improve scope awareness and navigation, including IAM for global scope
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary-ui/pull/355))
|
|
|
|
|
* ui: Add dark mode toggle
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/719))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary-ui/pull/358))
|
|
|
|
|
* ui: Add scope grants to roles
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary-ui/pull/357))
|
|
|
|
|
* ui: Add IAM resources to global scope
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary-ui/pull/351))
|
2020-10-29 08:44:57 -07:00
|
|
|
|
2020-10-27 10:43:50 -04:00
|
|
|
### Bug Fixes
|
|
|
|
|
|
|
|
|
|
* controller, worker: Fix IPv4-only check so `0.0.0.0` specified without a port
|
2020-11-05 19:22:40 -05:00
|
|
|
only listens on IPv4
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/752))
|
|
|
|
|
* ui: Fix grant string corruption on updates
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/757))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary-ui/pull/356))
|
2020-11-13 07:06:37 -08:00
|
|
|
* controller, cli: Fix mutual exclusivity bug with using -authz-token on `boundary connect`
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/787))
|
2020-10-27 10:43:50 -04:00
|
|
|
|
2021-01-06 10:41:38 -08:00
|
|
|
## 0.1.1 (2020/10/22)
|
2020-10-15 19:29:33 -04:00
|
|
|
|
2020-10-21 09:00:17 -04:00
|
|
|
### Changes/Deprecations
|
2020-10-15 19:29:33 -04:00
|
|
|
|
2020-10-22 08:40:00 -04:00
|
|
|
Note: in addition to changes marked below in this section, be aware that
|
|
|
|
|
currently names of resources are case-sensitive, but in a future update they
|
|
|
|
|
will become case-preserving but case-insensitive for comparisons (e.g. if using
|
|
|
|
|
them to access targets).
|
|
|
|
|
|
2020-10-21 09:00:17 -04:00
|
|
|
* cli: There are two changes to token storage handling:
|
2020-10-22 08:40:00 -04:00
|
|
|
* Specifying `none` for the `-token-name` parameter has been deprecated in
|
|
|
|
|
favor of specifying `none` for the new `-keyring-type` parameter.
|
2020-10-21 09:00:17 -04:00
|
|
|
* [`pass`](https://www.passwordstore.org/) is now the default keyring type on
|
|
|
|
|
non-Windows/non-macOS platforms. See the [CLI docs
|
|
|
|
|
page](https://www.boundaryproject.io/docs/api-clients/cli) for more
|
|
|
|
|
information.
|
2020-10-15 19:29:33 -04:00
|
|
|
|
2020-10-21 09:00:17 -04:00
|
|
|
### New and Improved
|
|
|
|
|
|
2020-10-22 08:40:00 -04:00
|
|
|
* cli: New `-keyring-type` option and `pass` keyring type for token storage
|
2020-10-21 09:00:17 -04:00
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/697))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/issues/731))
|
2020-10-22 08:40:00 -04:00
|
|
|
* connect: Allow using `-target-name` in conjunction with either
|
|
|
|
|
`-target-scope-id` or `-target-scope-name` to connect to targets, rather than
|
2020-11-05 19:22:40 -05:00
|
|
|
the target's ID
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/737))
|
2020-10-16 13:45:47 -04:00
|
|
|
* controller: Allow API/Cluster listeners to be Unix domain sockets
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/pull/699))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/705))
|
2020-10-22 12:24:36 -04:00
|
|
|
* ui: Allow creating and assigning a host to a host set directly from the host
|
2020-11-05 19:22:40 -05:00
|
|
|
set view
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/710))
|
2020-10-22 12:24:36 -04:00
|
|
|
([PR](https://github.com/hashicorp/boundary-ui/pull/350))
|
2020-10-16 13:45:47 -04:00
|
|
|
|
2020-10-15 19:29:33 -04:00
|
|
|
### Bug Fixes
|
|
|
|
|
|
2020-11-05 19:22:40 -05:00
|
|
|
* cli: Fix database init when locale isn't English
|
2020-10-20 21:13:01 -04:00
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/729))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/736))
|
2020-10-15 19:29:33 -04:00
|
|
|
* cli: Fix hyphenation in help output for resources with compound names
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/686))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/689))
|
2020-10-20 18:28:57 -07:00
|
|
|
* controller: Allow connecting to Postgres when using remote Docker in dev mode
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/720)
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/732))
|
2020-10-16 13:45:47 -04:00
|
|
|
* controller, worker: Fix listening on IPv6 addresses
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/701))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/703))
|
2020-10-19 15:02:51 -07:00
|
|
|
* worker: Fix setting controller address for worker in dev mode
|
|
|
|
|
([Issue](https://github.com/hashicorp/boundary/issues/727))
|
|
|
|
|
([PR](https://github.com/hashicorp/boundary/pull/705))
|
2020-10-15 19:29:33 -04:00
|
|
|
|
2021-01-06 10:41:38 -08:00
|
|
|
## 0.1.0 (2020/10/14)
|
2020-09-24 10:17:22 -07:00
|
|
|
|
2020-10-20 18:28:57 -07:00
|
|
|
v0.1.0 is the first release of Boundary. As a result there are no changes,
|
|
|
|
|
improvements, or bugfixes from past versions.
|
