CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,633 Commits 7 Branches 2 Tags
0b94de3dccc48e85546cbb6a4fdbd62c2950f3a2
Commit Graph
4633 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jim f7aad2e0c8 add a new oidc key+ key version for encrypting oidc state payloads returned in auth URLs. (#884) 2021-01-26 14:37:10 -05:00
Jeff Mitchell 6cd97a4a6e Add support for recursive listing (#885) 2021-01-25 19:37:40 -05:00
Todd Knight 1f9fcad1cd Adding Migrate Command (#872) 2021-01-25 14:43:50 -07:00
Jeff Mitchell 5de4befb58 Upgrade some deps (#886) 
These are Jeff-managed deps, and the changelogs have been evaluated.
 2021-01-25 10:41:56 -05:00
Jeff Mitchell 6b58a3317d Add recursive listing to roles (#881) 
This also lays the framework for adding recursive listing to the rest of the resources.
 2021-01-23 13:39:04 -05:00
Jeff Mitchell 0629526319 Add read/list/cancel:self actions and support for ACL subactions. (#882) 
Update perms table in anticipation of session support for these.
 2021-01-22 16:38:19 -07:00
Louis Ruch 558f9220a5 ICU-744/Refactor internal/target to new domain errors (#865) 
* Refactor internal/target to new domain errors
 2021-01-22 13:46:20 -08:00
Jeff Mitchell ee33a18caa Add scope repo function to recursively list (#879) 
A simple function that returns an appropriate set of scopes based on the
incoming scope ID. Includes a test.
 2021-01-21 21:03:30 -05:00
Pete Pacent 93394156bf Adding roadmap and release notes updates (#859) 
* Adding roadmap and release notes updates

* fixing typo
 2021-01-21 16:18:39 -08:00
Jeff Mitchell 526e24cd19 Goimports reordering 2021-01-21 17:04:01 -05:00
Jeff Mitchell 717a3b52ee Add worker tagging (#862) 
This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.
 2021-01-21 16:27:20 -05:00
Todd Knight 595a86508e Fix lockup when initalizing database. (#875) 2021-01-20 18:10:45 -07:00
Jeff Mitchell 2bafd8a07c Bump go-mod-upgrade 2021-01-20 12:12:33 -05:00
Jeff Mitchell 46644300d9 Switch to execabs for os/exec in connect cmd (#873) 
* Switch to execabs for os/exec in connect cmd

This is more of an abundance-of-caution change (e.g. defense in depth)
but it doesn't seem like we should be using binaries from the current
directory for `boundary connect` executions (unless given an explicit
path).

* Update changelog
 2021-01-20 12:09:55 -05:00
Jeff Mitchell dcb15cffbd Add authorized actions output on resources (#870) 2021-01-20 10:53:01 -05:00
Todd Knight ec6151d174 Organize DB Schema Migration Code and DB Init Checks (#842) 
Create Schema Manager and propagate contexts into the DB calls downstream.
Add checks at controller startup and database init for correct schema version and schema migration dirty bit being set.
 2021-01-19 10:40:41 -07:00
Michael Gaffney c141a050e5 Document Postgres permission requirements (#871) 
* Add semantic line feeds

* Document Postgres permission requirements

Closes #823
 2021-01-15 17:32:28 -05:00
Brandon Romano 3c22dcd54d Website StackMenu updates for 1/14 (#863) 2021-01-14 09:46:11 -08:00
Louis Ruch 84656dbfea ICU-747,ICU-748/refactor internal/oplog and internal/perms to use domain errors (#854) 
* Refactor internal/oplog to domain errors

* Refactor internal/perms

* Update changelog
 2021-01-13 15:50:07 -08:00
Jeff Mitchell 27919ab11b Groundwork for returning authorized actions (#860) 
This returns authorized actions on targets to users when they perform an operation on a target, including listing. It also prevents users from seeing values in listing targets on which they have no permissions.
 2021-01-13 14:42:37 -05:00
Louis Ruch 8151b30ce9 ICU-743/Domain errors internal/kms refactor (#848) 
* Domain errors internal/kms refactor

* Update changelog

* Update internal/host error op

* Incorrect error returned in read_writer
 2021-01-12 08:50:19 -08:00
Jeff Mitchell 9de928318d Skip curl output when using automatic versioning and reading (#858) 
This makes it so that the actual output is the update/delete.

Fixes #856
 2021-01-08 17:30:41 -05:00
Louis Ruch 31ece74a92 Fix worker example config (#855) 2021-01-08 13:30:53 -08:00
Jeff Mitchell 84c617dc49 Run make gen after the gofumpt update 2021-01-08 10:32:02 -05:00
Michael GaffneyandJeff Mitchell 94cb79bbdd See how Boundary would look with gofumpt applied (#853) 
* See how Boundary would look with https://github.com/mvdan/gofumpt applied

Results of running `gofumpt -w -s .`

* Update tools file and Makefile for gofumpt

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2021-01-07 10:02:32 -05:00
Jeff Mitchell cca0fbea2b Fix typo on controller config docs 2021-01-06 15:32:14 -05:00
Louis Ruch dbc796759b ICU-934/Verify controller config block (#851) 
* Verify controller config block

* update changelog
 2021-01-06 10:41:38 -08:00
Yoko 9a9efd16e2 [Docs] Common workflow update (#850) 
* Direct to Learn for 'Common Workflow'

* Clearn up

* Fix a typo
 2021-01-05 17:56:19 -08:00
Louis Ruch 4e31fdb10e Swap assert.Eqaul actual/expected (#849) 2021-01-05 17:34:04 -08:00
Jeff Mitchell f8577519b6 Prep for 0.1.4 2021-01-05 09:26:21 -05:00
Jeff Mitchell 77525298bd Use modified version of keyring lib 2021-01-04 21:29:46 -05:00
Jeff Mitchell 5b5602969f Update go-keyring to use forked version (#846) 
This may help with #830.
 2021-01-04 21:05:42 -05:00
Jeff Mitchell 2323a8551c Update no-resources flag 2021-01-04 16:59:54 -05:00
Jeff Mitchell 6580d85388 Remove erronious IsGlobalUnicast check. (#845) 
Fixes the issue raised at https://www.boundaryproject.io/docs/configuration/worker#complete-configuration-example
 2021-01-02 19:49:39 -05:00
Jim 7cade6f8aa just a few typos. (#840) 2020-12-23 16:21:35 -05:00
Louis Ruch 70a5899e99 ICU-739/iam domain error refactor (#841) 
* Refactor iam errors

* Update db and host doTx error ops

* Changelog
 2020-12-23 11:00:00 -08:00
Louis Ruch bfbb179741 ICU-738/Refactor internal/db to domain errors (#815) 
* Refactor internal/db to domain errors
 2020-12-21 10:07:34 -08:00
Jeff Mitchell b5d84495a3 Fix IDs being lowercased in role grants (#839) 
Fix IDs being lowercased in role grants

Fixes #794
 2020-12-18 13:25:28 -05:00
Jeff Mitchell e6c98f1454 Add logic to error on certain invalid listener configs (#838) 
This adds logic to error on certain invalid listener config:

* If an address in the worker's "controller" set is unspecified or
multicast or global unicast, error
* If the controller's cluster address is unspecified, ensure
public_cluster_addr is set

This has been a source of some confusing behavior on some GitHub tickets
and even on the team, so preventing it is probably a good idea.

It also relaxes the restriction around controller address matching cluster address in single-server mode when using DNS names.
 2020-12-18 12:12:25 -05:00
Sarah ThompsonandJeff Mitchell 1d3cdbe630 fixing base-image (#837) 
* fixing base-image - should be : and not -
running make packages

* make packages

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-18 11:34:29 -05:00
Jeff Mitchell 6a6b95dd01 Update go.mod API ref 2020-12-17 19:17:19 -05:00
Jeff Mitchell 0614559f80 Prep for 0.1.3 2020-12-17 15:26:59 -05:00
Jeff MalnickandJeff Mitchell b96c8bffb4 build: update to go 1.15.6 (#836) 
* build: update to go 1.15.5

* Update ci/goinstall.sh

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-17 15:11:26 -05:00
Jeff Mitchell e52db40d1f Run packagespec upgrade 2020-12-17 14:22:19 -05:00
Jeff Mitchell 16f7dc1c96 Update connect unauthorized message to give a bit more detail 2020-12-17 11:06:01 -05:00
Jeff Mitchell 8b39faef1b Rearrange some auth logic and add some opts useful for filtering/testing (#835) 2020-12-17 10:30:40 -05:00
Simon FreyandJeff Mitchell ea878e49fa Move listener address in worker config example (#834) 
* Move listener address in worker config example

This fixes: The address wrongly being documented as part of the `worker` block, despite belonging into the listener

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-17 10:11:35 -05:00
Manuel Aude Morales 07eb7ddc62 Update run-and-login.mdx (#833) 
Fix typo.
 2020-12-17 10:08:42 -05:00
Jeff Mitchell a6cca576a3 Attempt canceling sessions by the client (#831) 
* Attempt canceling sessions by the client

In some circumstances (like a Ctrl-C), the client knows it's shutting
down and the TOFU token will be lost. In this case it makes sense to
cancel the session rather than have it time out. This introduces a
command enum to the handshake message which can be used for the client
to send commands to the worker -- in this case the only specified
command is to cancel the session. It doesn't occur if the session is
already timed out or if we can't authorize connections as this generally
means the session is already invalid.
 2020-12-16 17:14:47 -05:00
Jeff Escalante 3739427139 Update DocsPage Component (#801) 
* wip

* update openapi docs page

* remove old component

* styling fixes

* update dependencies

* fix firefox bug with downloads page logo

* update deps, trim outdated deps, add search

* cleanup and polish

* fix circle shenanigans
 2020-12-16 16:43:06 -05:00