CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,442 Commits 7 Branches 2 Tags
088564c3853229dec58f973a3cfabce70feefbdc
Commit Graph
565 Commits
Author SHA1 Message Date
Johan Brandhorst-Satzkorn 10370edf59 internal/commands/server: prevent test panic on timeout (#5249) 
Previously, if one of these tests failed to start their servers before
the timeout, there was a risk that the goroutine started to run
the server would invoke t.Errorf after the test itself had concluded.
Replace t.Errorf with fmt.Printf to avoid the panic, and include
the test name for debugging.
 2024-11-22 09:57:41 -08:00
Elim Tsiagbey 514bcc19f6 feat(gcp): add GCP plugin (#5229) 
Add GCP as a supported plugin for dynamic host catalogs
 2024-11-08 11:09:29 -05:00
daniandDamian Debkowski 62c41191ff [fix] allow IPv6 controllers, workers, and targets (#5221) 
Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
 2024-11-01 13:27:40 -04:00
Hugo ee9f9fb4a1 feat(worker): Support running AWS host plugin 2024-09-30 21:24:18 +01:00
Hugo c3d03f69d8 feat(cmd): Support plugin host catalog worker filter 2024-09-30 21:24:18 +01:00
Jeff Mitchell 62d4f8453b Don't explode grants from the DB (#5104) 
This removes the Cartesian product in the DB for GrantsForUser in favor
of returning the actual grant scope information and dealing with it in
application code.

(cherry picked from commit 913cd536823d73994acc4f4d833208c1cc05f91b)
 2024-09-24 14:18:53 +00:00
Irena Rindos 35679c6a5b chore(config): remove deprecated controllers field (#5125) 
* chore(config): remove deprecated controllers field
 2024-09-23 11:45:34 -04:00
Irena Rindos eb33649ded (clientagentcmd): plumb thru env var (#5123) 
* (clientagentcmd): plumb thru env var
 2024-09-20 12:33:48 -04:00
Ryan Derr 913e6d755f ICU-11661 Add scope name in options slice for authorized-sessions (#5108) 2024-09-13 15:09:38 -05:00
Irena Rindos 83b61275d5 (cmd): unhide client agent commands (#5097) 2024-09-11 11:20:18 -04:00
Jeff Mitchell 66af7dba98 Allow reloading some server timings (#5071) 
Allows changing grace period and a few other things timing-related via
HUP instead of just a restart.

Tested manually via config changes and HUP.
 2024-09-04 15:40:44 -04:00
Hugo 1c62470ba6 chore(cmd): Move FlagClientAgentPort and flagTargetDefaultPort to uint16 2024-08-21 13:55:58 +01:00
Hugo bf9dbd818e chore(cmd): Remove IntVar and move to Int64Var 2024-08-21 13:55:58 +01:00
Hugo 3195dcba4e chore(cmd): Remove UintVar and move to Uint64Var 2024-08-21 13:55:58 +01:00
Damian Debkowski 4131c4b324 feat(cmd): display remote storage states for workers 2024-07-17 14:23:11 -04:00
Johan Brandhorst-SatzkornandJeff Mitchell c6f3c375f3 api: remove deprecated grant_scope_id field (#4886) 
* api: remove deprecated grant_scope_id field

The grant_scope_id field was deprecated in 0.15.0, so we can remove
it for 0.17.0.

* Fix tests

* Fix more tests

* Remove an option and some related code that stuck around

* Fix bats tests

---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2024-06-17 12:09:33 -07:00
Jeff Mitchell d547e0d459 Add test ability to reinitialize worker auth roots on startup (#4895) 2024-06-17 12:26:55 -04:00
Johan Brandhorst-Satzkorn ec289420d3 clientagentcmd: use "localhost" to call client agent (#4816) 
The client agent serves on "localhost:9300" by default. It appears
on some systems this resolves to ::1:9300 and on some systems
127.0.0.1:9300. We should use the same address on the client
as the server to avoid any incompatibilities between systems.
 2024-05-22 14:17:30 -07:00
Todd 6936a5448c update status cli to optionally return some fields (#4810) 2024-05-22 09:51:58 -07:00
Johan Brandhorst-Satzkorn 8ff18f6c3c internal/cmd: rename ferry to client-agent 
Renames the ferry command and related flags and env vars to
client-agent following the new naming decision.
 2024-05-22 09:51:58 -07:00
Hugo 2983f80eaa fix(cmd): Support account attribute maps 2024-05-20 16:06:35 +01:00
Johan Brandhorst-Satzkorn 111b8fbecf internal/cmd/ferry: add sessions command (#4800) 2024-05-15 13:10:18 -07:00
Irena Rindos 6f09819e9f chore: fix workers tag cmd help strings (#4780) 2024-05-08 11:52:16 -04:00
Michael Milton f7e59d5d04 Add hidden ferry pause and resume commands (#4771) 
* Add hidden ferry pause and resume functions

* add check for 200 status

* include pause/resume status in ferry status, fix output

* put error string back to previous state
 2024-05-06 17:54:27 -04:00
Kerim Satirli e54519975b adds missing space in mlock warning (#4286) 2024-05-02 17:36:45 -04:00
dani 1a77e4da86 Boundary Plugin MinIO (#4621) 
feat(storage): Add storage support for MinIO via new built-in plugin
 2024-04-12 11:28:40 -04:00
Elim Tsiagbey 2c140b1e09 feat: Local Storage State API & CLI 
- add `local_storage_state` value to API & CLI
 2024-04-05 16:47:22 -04:00
Damian Debkowski aea473c77b feat: new worker config for minimumAvailableCapacity 2024-04-05 16:45:52 -04:00
Jeff Mitchell d396a33930 Fix controller-only in dev not showing events (#4594) 2024-04-03 20:56:51 -04:00
Todd 95c507fad5 Add hidden ferry commands and auto adding tokens to ferry daemon (#4572) 
* Add boundary ferry command (#4462)

* Add boundary ferry status (#4463)

* Add sending auth token automatically to ferry daemon (#4465)

* Hide ferry cmds, background error msgs, and dont retry background add-token requests (#4571)
 2024-03-25 15:04:13 -07:00
Todd cb1e9b570b Add CLI flags for creating an alias with a target (#4512) 
* Add CLI flags for creating an alias with a target

* Add bats tests
 2024-03-15 09:36:34 -07:00
Jeff Mitchell 7105270cd5 Make TestServer_ReloadWorkerTags non-parallel 
This will hopefully help with flakiness.

Note: this was tested on the Ent side
 2024-03-14 14:25:17 -04:00
Jeff Mitchell 19b19d6756 Comment out parallel statements causing test failures (#4528) 
It hasn't been investigated why this is happening (getting a number of
403 errors) but for now removing parallel fixes it.
 2024-03-13 21:12:26 -04:00
Jeff Mitchell 9408b2b299 Add some more fixes caught by race detector (#4488) 2024-03-07 14:46:10 -05:00
Irena Rindos e80e9a6da5 feat(dev): create initial alias targets for boundary dev (#4433) 
* feat(dev): create initial alias targets for boundary dev
 2024-02-29 15:52:27 -08:00
Todd 24a2089db8 Add aliases to table format output for target reads (#4416) 2024-02-29 15:52:27 -08:00
Todd 305bb09c35 Treat alias values like other required fields in API and CLI (#4404) 
* Treat Alias values like other required fields in API and CLI

* Fix protoc versions since we recently rebased on main which uses updated version
 2024-02-29 15:52:27 -08:00
Todd a6c96d69ae Add TargetAliasAuthorizeSessionArgumentsHostId api options (#4397) 
* Add host id api option
 2024-02-29 15:52:27 -08:00
Irena Rindos ba21e076bb cli(aliases): Support aliases for connect and targets in the CLI (#4356) 
* cli(aliases): Support aliases for boundary connect and boundary targets CLI
 2024-02-29 15:52:27 -08:00
Todd 78e10864c4 Add alias CLI CRUDL commands (#4353) 
* Add alias CLI CRUDL commands
 2024-02-29 15:51:24 -08:00
Michael Milton 2e69d59dd2 feat(billing): Add cli subcommand for monthly active user counts 2024-02-23 15:44:10 +00:00
Jeff Mitchell c3297bb96f Remove worker type from CLI output (#4396) 
This does not currently remove the field from the message on the API but
since it will now always show `pki` it's meaningless and causing
confusion for some users.
 2024-02-23 10:33:57 -05:00
Jeff MitchellandDamian Debkowski 35cef97bd4 Linter fixes PR 3 (#4415) 
* Linter fixes

* fix(bsr): update test to register TEST protocol once

---------

Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
 2024-02-16 08:30:16 -05:00
Jeff Mitchell 49803e653c Linter fixes numero 2 (#4408) 2024-02-14 17:14:31 -05:00
Jeff Mitchell 25bce9e8ff Fix linter warnings 2024-02-13 15:50:11 -05:00
Louis Ruch d59f089819 feat(policies): Update SDK/API to support setting/clearing attributes (#4385) 2024-02-09 09:37:34 -08:00
Irena Rindos da30653486 commands: fix plurals (#4369) 
* commands: fix plurals
 2024-02-07 12:45:28 -05:00
ToddandJim eb6d0dbd6a Use the intercepted token always. If the keyring matches, use it from there (#4355) 
* Use the intercepted token if present, use it through the keyring if keyring contains it

* fixup! Use the intercepted token if present, use it through the keyring if keyring contains it

* Apply suggestions from code review

Co-authored-by: Jim <jlambert@hashicorp.com>

---------

Co-authored-by: Jim <jlambert@hashicorp.com>
 2024-02-06 11:46:28 -08:00
Yong Zhang e34d3bb415 Fix example scope id for role grants (#4348) 
* Rename example scope id

* revert newline at eof
 2024-02-02 17:35:05 -08:00
Todd d500f24014 fix: boundary authenticate returns an API error code when auth fails (#4342) 2024-01-31 15:11:28 -08:00