CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,148 Commits 7 Branches 2 Tags
ci/postgres-tests
Commit Graph
5148 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
shadowdaoandClaude Sonnet 5.5 6ab93be603 CI: add Postgres-backed db-tests job 
Builds the pre-migrated test image from testing/dbtest/docker, runs the root
module's DB-backed tests on push/nightly/manual. Skips estimate tests that
also fail on untouched upstream.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 11:44:10 -07:00
shadowdaoandClaude Sonnet 5.5 764bb27d54 Merge upgrade-compat: seamless in-place upgrade from Boundary
ci / check (push) Successful in 21m11s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 11:14:31 -07:00
shadowdaoandClaude Sonnet 5.5 d07030a10b Make in-place upgrade from HashiCorp Boundary seamless 
Linux packages: migrate /etc/boundary.d to /etc/threshold.d without
clobbering, reuse the boundary service user, carry over service
enablement with a boundary.service alias, provide a boundary command.
Docker: accept /boundary/config.hcl, boundary command, /boundary symlink.
CLI: deprecation notice when invoked as boundary (stderr only).
Dev mode: also create *.threshold.dev aliases.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 11:12:29 -07:00
shadowdaoandClaude Sonnet 5.5 80ece9c4fc Bump moby/sys/user to v0.4.1; document accepted test-only docker/docker findings
ci / check (push) Successful in 7m13s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:49:41 -07:00
shadowdaoandClaude Sonnet 5.5 de2ee74928 CI: don't run on tag pushes
ci / check (push) Failing after 18m6s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:37:57 -07:00
shadowdaoandClaude Sonnet 5.5 f4b9a16788 Merge plugins/threshold-forks: repoint plugin mains at Threshold forks
ci / check (push) Failing after 17m43s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:37:42 -07:00
shadowdaoandClaude Sonnet 5.5 5fdfc8c2cc Repoint plugin mains at Threshold forks and renamed sdk 
- boundary host/storage plugin mains use repo.anhonesthost.net/CyberCoveLLC/threshold-plugin-{aws,azure,gcp,minio}
- all mains import threshold/sdk (no more duplicate proto registrations)
- main module paths renamed under repo.anhonesthost.net/CyberCoveLLC/threshold

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:37:42 -07:00
shadowdaoandClaude Sonnet 5.5 44fd64f588 api: depend on published sdk v0.1.0 (drop local replace)
ci / check (push) Failing after 5m49s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
api/v0.1.0 		2026-10-12 10:35:07 -07:00
shadowdaoandClaude Sonnet 5.5 a5ba9460e5 Merge rebrand/phase-b: rename Go module path to repo.anhonesthost.net/CyberCoveLLC/threshold
ci / check (push) Failing after 19m6s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
sdk/v0.1.0 		2026-10-12 10:34:24 -07:00
shadowdaoandClaude Sonnet 5.5 962d708fdd Rename Go module paths to repo.anhonesthost.net/CyberCoveLLC/threshold 
Rename root, api and sdk module paths (imports, go.mod, go_package,
ldflags, build scripts, buf configs) and regenerate protobuf/gateway
code with the project's pinned toolchain. Wire identifiers unchanged.
api gets a local replace for sdk; root/api/sdk require v0.1.0.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:33:41 -07:00
shadowdaoandClaude Sonnet 5.5 443e483a16 Merge rebrand/phase-a: Threshold CLI/binary, packaging, docs, legacy fallbacks
ci / check (push) Failing after 12m27s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:23:51 -07:00
shadowdaoandClaude Sonnet 5.5 613415624e Merge security/go-1.26.9: Go 1.26.9, x/net, AWS SDK bumps, Gitea CI 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:23:50 -07:00
shadowdaoandClaude Sonnet 5.5 9220d2d6a5 Ignore plugin main binaries produced by go build 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:23:47 -07:00
shadowdaoandClaude Sonnet 5.5 b30dead452 Bump golang.org/x/net to v0.60.0 (GO-2026-6603/6610/6611/6612/6617) and gofmt
Go fuzz test / Fuzz grants.Parse (push) Successful in 4m29s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:21:04 -07:00
shadowdaoandClaude Sonnet 5.5 ab4ed3c9e5 Rebrand user-visible CLI text; add legacy fallbacks for keyring, cache dir and version prefix 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:20:06 -07:00
shadowdaoandClaude Sonnet 5.5 3559b33595 CI: consolidate matrix into a single job to spare the shared runner pool 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 10:08:07 -07:00
shadowdaoandClaude Sonnet 5.5 19fde0dbca CI: skip vet composites analyzer (pre-existing upstream test warnings) 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 09:56:35 -07:00
shadowdaoandClaude Sonnet 5.5 4cb3bda43a Add fork notice, NOTICE file, README/CONTRIBUTING rewrite; drop HashiCorp logo assets 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 09:53:17 -07:00
shadowdaoandClaude Sonnet 5.5 5f5d35b9ff Rename binary to threshold and update build/release packaging 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 09:53:13 -07:00
shadowdaoandClaude Sonnet 5.5 306960d24b Add THRESHOLD_* env var support with BOUNDARY_* fallback 
Introduce api.Getenv/api.LookupEnv which prefer THRESHOLD_X and fall back to legacy BOUNDARY_X; use them for user-facing env var reads.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 09:45:44 -07:00
shadowdaoandClaude Sonnet 5.5 96606a98d9 Add Gitea Actions CI: build, vet, govulncheck, osv-scanner 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 09:38:02 -07:00
shadowdaoandClaude Sonnet 5.5 cc16bf9f74 Bump Go to 1.26.9 and patch known vulnerabilities 
- go directive and .go-version 1.26.5 -> 1.26.9 in all 14 modules
  (clears Go stdlib advisories in net/http, crypto/tls, html/template,
  net/textproto, encoding/xml, encoding/asn1, net/url)
- golang.org/x/net v0.58.0 -> v0.60.0
- aws plugin: aws-sdk-go-v2 eventstream v1.7.8, s3 v1.97.3

govulncheck: 0 reachable vulnerabilities across all modules.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-12 09:37:24 -07:00
Dan Rohan eeb38a1a84 Revise README for Boundary CE archiving (#6788) 
* Revise README for Boundary CE archiving

Updated README to reflect the archiving of Boundary Community Edition and the focus on HCP Boundary and Boundary Enterprise. Added notes on the repository's read-only status and the lack of future updates for Boundary CE.

* Add archiving date to README for Boundary CE

Updated the archive notice to include the date of archiving.
 2026-10-09 12:50:36 -04:00
Irena Rindos c0dd0353af chore: udpate grpc (#6785) 
* chore: update grpc
 2026-09-28 15:45:17 -04:00
Ryan Derr edfad8971a Merge pull request #6782 from hashicorp/rderr-api-sdk-updates 
chore(api): Update oidc auth method for ProviderType field
 2026-09-22 08:56:37 -05:00
Bharath Gajjala 41d676acc5 feat(proto): Add ProviderType Field to OIDC Storage Protos 2026-09-21 13:53:04 -05:00
Bharath Gajjala e1f3020b28 feat(proto): Add ProviderType Field to OIDC API Protos 2026-09-21 13:53:04 -05:00
Bharath Gajjala 828742c46c feat(db): Add Provider Type to OIDC Auth Method 
test(db): add sqltest coverage for oidc auth method provider_type
 2026-09-21 13:53:00 -05:00
Emilia 01cd5c86e8 chore(tests): bump the postgres version used in CI (#6763) 
* bump the postgress version used in CI and fix the tests that broke

* sort Grants by raw grant string rather than GrantStrings

* trigger ci
 2026-08-06 12:09:06 -04:00
Michael Li 886cd2918d chore: Suppress CVE-2026-41989 (#6772) 2026-07-31 10:15:17 -04:00
Michael Li d6d7d2a5c3 chore: Bump to go version 1.26.5 (#6770) 2026-07-30 12:33:21 -04:00
Michael Li 68912675d2 chore: Update dependencies for cve (#6768) 
* chore: Update dependencies for cve

* chore: Suppress GO-2026-5932
 2026-07-30 10:38:01 -04:00
Michael Li fe8a2a1cc9 chore: Fix backport (#6765) 2026-07-28 13:34:28 -04:00
Michael Li cfc91ad2b0 chore: Update secret usage in github actions (#6764) 
* chore: Remove slack messages

* chore: Remove dependencies to cloud providers

* chore: Remove use of ENOS_GPG secrets
 2026-07-28 11:29:19 -04:00
Amit Kotagi a1e2c87b8a chore: bump api sdk versions (#6759) 2026-07-08 22:21:46 +05:30
Amit Kotagi 969bd5f66d chore(API): add set/remove alias suffix API definitions (#6757) 
* chore: add set/remove alias suffix API definitions

* fix(test): revert alias_test changes

* revert alias_test.go changes
 2026-07-08 20:38:54 +05:30
Ryan Derr 6f03523372 chore(API): Update the API definitions for RDP (#6758) 2026-07-08 16:42:34 +05:30
Bharath Gajjala b495fe653b chore(controller): move grants schema route to internal (#6753) 2026-06-09 09:44:26 -04:00
Michael Li 9df1fad7d0 chore: Bump go version to 1.26.4 (#6750) 
* chore: Bump to go version 1.26.4

* chore: Bump golangci-lint version

* fix: Update URL to be ipv6 safe
 2026-06-03 16:09:39 -04:00
Michael Li 42ffd37ec2 chore: Remove merge-to-downstream (#6741) 2026-05-26 14:53:58 -04:00
Michael Li c94e386f18 chore(e2e): Ensure ldap is ready (#6736) 
* fix(e2e): Modify ldap cleanup step

* chore(e2e): Parallelize dependency download

# Conflicts:
#	.github/workflows/enos-run.yml

* chore(e2e): Ensure ldap is ready
 2026-05-21 15:43:33 -04:00
Michael Li e19c5472f9 test(e2e): Fix cassandra e2e test (#2548) (#6739) 
* chore(e2e): Parallelize installation steps

* chore(e2e): Install missing dependencies

* test(e2e): Improve resiliency of assertions

* CR
 2026-05-21 12:58:27 -04:00
Michael Li de2647d461 chore(e2e): Make e2e test artifacts zip files (#6737) 2026-05-19 16:33:17 -04:00
Bharath Gajjala efce25bdda feat(perms): expose valid output fields per resource in grants schema (#6701) 2026-05-19 14:07:33 -05:00
Damian DebkowskiRyan DerrManjeet Singhaditya2548
 		cbb76ea7c8 feat: storage plugin list objects (#6723) 
* feat(proto): add storage plugin proto definitions for session recording recovery

Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>

Co-authored-by: Ryan Derr <ryan.derr@hashicorp.com>

* feat(gen): add generated storage plugin code for session recording recovery

Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>

Co-authored-by: Manjeet Singh <manjeet.singh@hashicorp.com>

* feat(plugin): add plugin loopback support for session recording recovery

Co-authored-by: Ryan Derr <ryan.derr@hashicorp.com>

Co-authored-by: aditya2548 <aditya25dec2000@gmail.com>

---------

Co-authored-by: Ryan Derr <ryan.derr@hashicorp.com>
Co-authored-by: Manjeet Singh <manjeet.singh@hashicorp.com>
Co-authored-by: aditya2548 <aditya25dec2000@gmail.com>
 2026-05-14 13:02:32 -05:00
Michael Li 205644b091 chore(e2e): Run tests in CI (#6713) 2026-05-14 12:09:51 -04:00
Irena Rindos dfce6557d4 chore: replace docker with moby and update opentelemetry (#6717) 2026-05-14 10:43:19 -04:00
Irena Rindos 18dca2c7d2 chore: bump golang.org/x/net (#6712) 2026-05-14 09:49:42 -04:00
Michael Li 4f30aa6c8a chore: Remove docker dev artifacts (#6708) 2026-05-13 17:32:39 -04:00
Michael Li dd37f3967f chore: Update another action to Node24 (#6703) 2026-05-13 10:57:54 -04:00