CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
962 Commits 7 Branches 2 Tags
02fabe21c541ec0f53bd530cb80e76e2a2d79bc0
Commit Graph
158 Commits
Author SHA1 Message Date
Jeff Malnick 02fabe21c5 docs: add brew install instructions (#951) 2021-02-24 11:02:47 -08:00
Jeff Mitchell 341e7aff0d CLI Generation (#953) 2021-02-23 19:06:39 -05:00
Jeff Mitchell 1906a7311b Fix some documentation that was not correct 
TLS listener docs were pulled from Vault but we don't actually have
SIGHUP enabled yet.
 2021-02-22 15:44:40 -05:00
Susmitha Girumala 3c33d05c96 docs: Add desktop client videos (#947) 
* Add desktop client videos

* docs: refactor desktop video style

* docs: add wrapper for tabs to load videos correctly

* docs: add desktop video to homepage
 2021-02-18 14:12:51 -05:00
Jeff Mitchell b40fb8bd07 Minor update to TLS doc 2021-02-18 13:48:13 -05:00
Jeff Mitchell 505eed246d Minor update to data encryption bang box 2021-02-18 13:46:44 -05:00
Aiman Ismail b452c1f46f Fix typo Boundary name (#946) 2021-02-18 08:28:52 -08:00
Jeff Malnick 2d850ac95c docs: clarify generated resources doc (#945) 2021-02-17 11:44:21 -08:00
Jeff Malnick 54ba53e894 docs: update link to releases page for DT client download (#944) 2021-02-17 10:28:17 -08:00
Jeff Mitchell e426fcf20e Gofumpt 2021-02-16 14:14:53 -05:00
Pete Pacent db6b54d260 Update desktop.mdx (#938) 
Add disclaimer for desktop client doc and releases link
 2021-02-16 10:17:36 -08:00
Jeff Malnick b8fe4083c1 Add initial Desktop docs (#930) 
* docs: initial desktop docs
 2021-02-12 15:38:41 -08:00
Jeff Mitchell 22462cdd84 Add read:self and cancel:self to sessions; add dev unpriv user (#923) 
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed.

* Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing.

* Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
 2021-02-11 13:14:18 -05:00
Jeff MitchellandJeff Malnick d279a906ce Allow public_cluster_addr to use an env var or file (#907) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-10 20:22:02 -05:00
Jeff Mitchell 5266eb3269 Don't error worker filters if a key isn't found, treat it as a non-match (#900) 2021-02-10 15:59:31 -05:00
Jeff Mitchell cb3980cb8c Remove list:self from main (#915) 
* Remove list:self from main

As per futher discussions, we won't be supporting this, in favor of
simply read:self and cancel:self (since listing now already filters out
items on which you have no permissions).

This doesn't remove list:self entirely from the code base as much of
that will simply be converted to read:self and cancel:self -- that will
be in a later PR. However, with this removed if we want to release we
won't expose an API publicly that isn't going to stick around.
 2021-02-05 14:01:03 -05:00
Jeff Mitchell 1afa3a4b6c Disallow an invalid grant format (#914) 2021-02-05 12:39:55 -05:00
Jeff MitchellandJeff Malnick 6d2ab34087 Add initial filtering docs (#898) 
* Add initial filtering docs

Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-01 16:03:46 -08:00
Louis Ruch d65d4dbf6f Fix examples in website (#891) 2021-01-28 20:42:35 -08:00
Jeff Mitchell 0629526319 Add read/list/cancel:self actions and support for ACL subactions. (#882) 
Update perms table in anticipation of session support for these.
 2021-01-22 16:38:19 -07:00
Pete Pacent 93394156bf Adding roadmap and release notes updates (#859) 
* Adding roadmap and release notes updates

* fixing typo
 2021-01-21 16:18:39 -08:00
Michael Gaffney c141a050e5 Document Postgres permission requirements (#871) 
* Add semantic line feeds

* Document Postgres permission requirements

Closes #823
 2021-01-15 17:32:28 -05:00
Louis Ruch 31ece74a92 Fix worker example config (#855) 2021-01-08 13:30:53 -08:00
Jeff Mitchell cca0fbea2b Fix typo on controller config docs 2021-01-06 15:32:14 -05:00
Jeff Mitchell 2323a8551c Update no-resources flag 2021-01-04 16:59:54 -05:00
Simon FreyandJeff Mitchell ea878e49fa Move listener address in worker config example (#834) 
* Move listener address in worker config example

This fixes: The address wrongly being documented as part of the `worker` block, despite belonging into the listener

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-17 10:11:35 -05:00
Manuel Aude Morales 07eb7ddc62 Update run-and-login.mdx (#833) 
Fix typo.
 2020-12-17 10:08:42 -05:00
Jeff Mitchell b809d3f12a Add kube connect subcommand (#816) 2020-12-14 16:52:11 -05:00
Jeff MalnickandJeff Mitchell d9a6bd1a60 docs: add workflow for transparent usage of Boundary by SSH client (#796) 
* docs: add workflow for transparent usage of Boundary by SSH client

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-10 12:48:06 -08:00
Jeff Mitchell c33f4fe5d7 Fix old "boundary proxy" CLI example (#804) 
Fixes #800
 2020-11-30 12:41:33 -05:00
Jeff Mitchell 1189ebdfc6 Fix wording on HA doc (client -> host) (#803) 2020-11-30 12:35:40 -05:00
Jeff Malnick 2badd4ecf8 docs: fix misleading statement about what scope a role can be created (#798) 2020-11-20 09:27:21 -08:00
Susmitha Girumala 7f1a12ecaa Update ui build to use 'admin' folder instead of 'core' (#792) 
* Update ui build to use 'admin' folder instead of 'core'

Post release of v0.1.2, ui/core folder has been renamed to ui/admin.
Update ui build scripts to be aware of the path change.

* Update packagespec to reflect "admin" ui folder change
 2020-11-18 16:29:48 -05:00
Susmitha Girumala 353360bbcf Update doc clickthrough videos for ui v0.1.2 changes (#789) 2020-11-16 16:01:29 -05:00
Jeff MalnickandJeff Mitchell 11c7c8dbe8 feat: make auth token staleness and duration configurable (#777) 
* feat: make auth token time to live and staleness configurable

* docs: add configuration docs for auth token TTL and staleness

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-16 10:39:18 -08:00
Jim ec9e69321d fix docs for adding roles and principals (#782) 2020-11-06 12:30:37 -08:00
Christian Frichot ea2e0d2be1 docs: typo on encryption page (#770) 2020-11-03 10:40:14 -05:00
Christian Frichot 7e26f0f8c8 docs: update installation steps with templated account.id grant string (#769) 2020-11-03 10:39:56 -05:00
Jeff Mitchell e2e4631929 Add ability to set public cluster address (#761) 2020-10-30 16:54:53 -04:00
Jeff MitchellandJeff Malnick 1ec3e8276f Add Unix listener docs (#750) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2020-10-26 12:10:01 -04:00
Jeff MalnickandJeff Mitchell e8d871aec2 docs: specify address for worker listener configuration (#749) 
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-10-26 11:51:41 -04:00
Karthick K 3848765560 Update systemd.mdx (#747) 
need to change ${TYPE} to server for the systemd services to work
 2020-10-25 08:07:05 -07:00
Susmitha Girumala 83e54fe088 doc: Update host set videos in "Manage Targets" to reflect v0.1.1 UI (#742) 2020-10-23 11:03:07 -07:00
Jeff Malnick 86f9752034 docs: add KMS section to controller configuration overview (#744) 
* docs: add KMS section to controller configuration overview

* docs: add config encrypt|decrypt KMS configuration guide
 2020-10-23 10:01:47 -07:00
Jeff Mitchell 09b865ab28 Add pass cred storage support (#731) 
* Add `pass` cred storage support

Make it the default on non-Windows/macOS

Document the token storage behavior
 2020-10-21 09:00:17 -04:00
Byungjin Park (BJ) 3b347d24d6 Update data-encryption.mdx (#734) 2020-10-20 11:41:53 -07:00
Byungjin Park (BJ) e8e6249ec1 Fix typo in production.mdx (#728) 2020-10-19 07:55:12 -07:00
Jeff MalnickandJeff Mitchell 49daf1b016 docs: how to install without generated resources (#713) 
* docs: add getting started with no generated resources and KMS recovery workflow

* Update website/content/docs/installing/no-gen-resources.mdx

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-10-17 16:00:55 -07:00
Jeff Malnick fb94971a99 docs: fix ExecStart command in systemd docs (#717) 2020-10-16 09:52:14 -07:00
Patrick Bernal 1c75a07cb3 fix typo (#712) 
host_catalog_id was doubled in hcl code snippet.
 2020-10-16 08:46:08 -07:00