When closing orphaned connections and checking if a session is not
active, the repository was opening a transaction, but then calling the
original reader instead of using the reader/writer from the transaction.
This would result in a transaction being opend, then a separate
transaction being used to run the query, and finally the original
transaction would commit without any statements being executed.
Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>
When setting up the docker container in this module, there's a an additional script that runs (00-trust-user-ca) that takes some time to execute. This can occasionally take longer than the current 20s timeout, so we are bumping it here
* Add ListResolvableAliases to the user service
There are a few non common ways this method uses our ACL
and grant system. A user is able to list resolvable
aliases for another user if they are granted permission
to do so. That means we had to load the grants for
the user being listed for and not the requester when
determining if an alias is able to resolve to a destination
for which the requested user has permission.
Similarly, the grant hash used for the list pagination
is required to be that of the user being listed and not
the requester.
This alias will be used by commands in a test when using the minio client. An alias needs to be defined in order for commands like retrieving an object from the bucket to work successfully.
* add a new cred management files
* adding credential management files
* fixed type-os, added ent labels, grouped cli/ui
* added reference links from concepts section and Vault integration section to new cred management pages
* style guide and formatting enhancements
* style guide and formatting enhancements
* fixes internal link
* docs: Updates for styles and standards
* docs: Fix link structure
* docs: Break out brokering/injection procedures
* Apply batch suggestions from code review
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
* docs: Clean up commented out code
* docs: Rename index file per best practices
* docs: Update page description meta content
* docs: Add level 2 headings for organization
---------
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
* made worker filter examples more promenent with different example types
* adds terraform tabs
* updates notes to use Note, Tip, and Warning elements
* deletes old screenshots
* docs: Minor edits
* docs: Make example explanations consistent
* clarifies boundary_credential_store_vault comments
---------
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
The worker_filter column was dropped from the
credential_vault_credential_private view in the
56/02_add_data_key_foreign_key_references.up.sql migration.
Any credential renewal/revocations that relied on the worker filter
would not successfully renew.
* Added using-terraform.mdx to the Install Boundary section
* Initial revision
* formatting on the list and adding in some links to the provider
* Renamed file
* Added assumptions.
* Updated index.
* Fixed some typos
* Folded in Carlos's session recording code
* small changes
* fixes headers
* fixes internal developer links
* style guide and formatting enhancements
* updates Initialize Boundary link
* docs: Updates for style/standards
* docs: Break topic into smaller pieces
* docs: Clean up commented text, rename index file
* docs: Trigger a new Vercel build
---------
Co-authored-by: Daniel Greeninger <daniel.greeninger@hashicorp.com>
Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
* docs: Update release notes for April 9 release
* Update website/content/docs/release-notes/v0_15_0.mdx
Co-authored-by: Michael Li <michael.li@hashicorp.com>
---------
Co-authored-by: Michael Li <michael.li@hashicorp.com>