CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,325 Commits 7 Branches 2 Tags
0bf038b00138031c3fa2defc5e3d51fce67f9346
Commit Graph
4325 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Irena Rindos 0bf038b001 update changelog to docoument gRPC update (#5094) 2024-09-09 14:59:11 -04:00
Dan Heath 81690c30ff docs: Add link to Postgres HA (#5080) 
* docs: Add link to Postgres HA

* docs: Add new section to HA topic

* docs: Trigger a new build
 2024-09-09 14:25:02 -04:00
Michael Gaffney 68c83eb419 chore: Bump to Go version 1.23.1 
Go 1.23.1 includes security fixes to the encoding/gob,
go/build/constraint, and go/parser packages, as well as bug fixes to the
compiler, the go command, the runtime, and the database/sql, go/types,
os, runtime/trace, and unique packages.

See: https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc
 2024-09-09 13:41:49 -04:00
Mark Collao 0b4e17162d update scan workflow conditions (#5089) 2024-09-09 09:27:22 -07:00
Johan Brandhorst-Satzkorn a830892fec Some test fixes (#5084) 
* internal/session: update variable name in test

This was missed in #5071

* internal/tests/cluster: skip failing tests

These tests will need to be fixed or removed. It is not
clear why they are failing, but they are always failing.

* Makefile: try upgrading golangci-lint

* internal/host/plugin: fix flaky test

Hosts contain IP addresses in string form, whose
order is not defined.
 2024-09-09 09:22:34 -07:00
dependabot[bot] d45aa402d8 chore(deps): bump github.com/opencontainers/runc (#5075) 
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.2.0-rc.1 to 1.2.0-rc.3.
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/opencontainers/runc/compare/v1.2.0-rc.1...v1.2.0-rc.3)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-06 15:38:08 -07:00
Michael Li 08433affc8 doc(e2e): Update enos readme (#5033) 2024-09-06 14:17:40 -04:00
Damian Debkowski 89c9a309ce test(host): validate ipv6 address for hosts (#5052) 2024-09-05 10:44:55 -07:00
Damian Debkowski bd03c99f89 test(target): validate ipv6 address for tcp targets (#5076) 2024-09-05 10:30:30 -07:00
Dan Heath a77d04edbb docs: Update session recording docs with asciicast info (#5072) 
* docs: Update session recording docs with asciicast info

* docs: Remove mention of warnings
 2024-09-05 12:09:04 -04:00
Michael Li 30b999e261 test(hcp): Define TF module for long-lived resources (#5045) 
* test(hcp): Define TF module for long-lived resources

* CR: Move outputs and variables to its own files
 2024-09-05 12:08:07 -04:00
dani 557591967a add tests for sql ip address columns to ensure ipv6 capabiltiy (#5062) 2024-09-05 11:03:05 -04:00
Jeff Mitchell 66af7dba98 Allow reloading some server timings (#5071) 
Allows changing grace period and a few other things timing-related via
HUP instead of just a restart.

Tested manually via config changes and HUP.
 2024-09-04 15:40:44 -04:00
Jeff Mitchell 35d1df7388 Two fixes in our Go API code: (#5066) 
* Replace `interface{}` with `any`
* For options that are bools, don't always set true; set to the actual
  value passed in (some options already behaved this way, but they all
  should)
 2024-09-04 11:40:43 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 4e8e069c9c Result of tsccr-helper -log-level=info gha update -latest . (#5063) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2024-09-03 15:19:21 -04:00
David Bond 660e2063a4 Return HTTP 400 status for inactive OIDC auth methods (#5048) 
This commit modifies the OIDC authentication start method to return a 400 (Bad Request) error
if a client attempts to start the authentication flow against an OIDC auth method that is set to
inactive. This is something we noticed in our error logs in HCP Boundary that is impacting our
SLOs.

Previously this returned its own error code which is mapped to a 500 response. Tests have been updated
to catch this new scenario.

Signed-off-by: David Bond <davidsbond93@gmail.com>
 2024-08-30 16:33:18 +01:00
Johan Brandhorst-Satzkorn 59fd2d4595 e2e: replace '%s' with %q (#5058) 
%q handles quotes inside the quoted strings better.
 2024-08-29 15:50:19 -07:00
Elim Tsiagbey 306c722750 feat: Add support for capturing URL actions in request info (#5044) 
* feat: Add support for capturing URL actions in request info

- Pass request context to services to validate actions.
- Validate actions for auth methods during authentication. `/v1/auth-methods/{{AUTH_METHOD_ID}}:authenticate:callback` is currently only supported on `OIDC` auth methods. An error is thrown if `:callback` is not supported
 2024-08-29 17:14:42 -04:00
Johan Brandhorst-Satzkorn 4a031d9910 api: remove items deleted during refresh pagination (#5056) 
The API automatically paginates to the end of a pagination,
and would take into account any items updated and subsequently
removed since the last pagination. It now also removes any items
removed during the current pagination.
 2024-08-29 12:43:54 -07:00
Elim Tsiagbey 84707c04cb feat: Disable path length fallback (#5050) 
Add `WithDisablePathLengthFallback()` runtime option to the grpc-gateway mux HTTP server. This prevents the issue where the request method can be overridden with a `X-HTTP-Method-Override` header.
 2024-08-28 09:30:05 -04:00
Johan Brandhorst-Satzkorn 96688b36d5 internal/daemon: simplify time update tests (#5041) 
Using time.After makes the intent clearer
 2024-08-27 11:00:04 -07:00
Elim Tsiagbey 123286cf94 feat: Validate LDAP URL port number (#5046) 
Add validation for the port number in LDAP URLs. If a port number is provided, it is checked to ensure it is a valid integer and within the valid range. This validation helps prevent errors when configuring LDAP authentication.
 2024-08-27 11:27:14 -04:00
Johan Brandhorst-Satzkorn 50ead47427 ci: refuse to backport if migrations changed (#5035) 2024-08-23 12:07:07 -07:00
Dan HeathSorawis Nilparukstellarsquall
 		8ee9057960 docs: Update release notes (#5030) 
* docs: Update release notes

* docs: Rephrase item

* docs: Add Important changes table to 0.17.1

* docs: Add info about wget and health checks

* docs: Fix typos

* docs: Minor rewrite

* code block fixes, style guide enhancements, metadata description refresh

* docs: Update location of wget binary

* docs: Fix bulleted list

* Update website/content/docs/operations/health.mdx

Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>

* docs: Updates based on feedback

---------

Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>
 2024-08-22 17:14:39 -04:00
Dan Heath c025e44ccb docs: Document recorded session max size (#5025) 2024-08-22 17:12:46 -04:00
Elim Tsiagbey 8885ce8528 Update changelog for 0.16.3 & 0.17.1 (#5032) 
* Update changelog for `0.16.3` & `0.17.1`
 2024-08-22 16:57:07 -04:00
Elim Tsiagbey e6d355b65a fix: constant-time comparison of grpc-gateway tickets (#5031) 
Update GRPC Gateway tickets to compare tickets in constant-time
 2024-08-21 12:26:22 -04:00
Hugo 1c62470ba6 chore(cmd): Move FlagClientAgentPort and flagTargetDefaultPort to uint16 2024-08-21 13:55:58 +01:00
Hugo 3e3f2153c0 feat(cmd): New Uint16 flag type 2024-08-21 13:55:58 +01:00
Hugo bf9dbd818e chore(cmd): Remove IntVar and move to Int64Var 2024-08-21 13:55:58 +01:00
Hugo 3195dcba4e chore(cmd): Remove UintVar and move to Uint64Var 2024-08-21 13:55:58 +01:00
Hugo abb2d50494 fix(worker): Use 16-bit int parsing for TCP port 2024-08-21 13:55:58 +01:00
Hugo 6f370c1189 fix(api): Check MaxRetries integer bounds 2024-08-21 13:55:58 +01:00
Johan Brandhorst-Satzkorn 8e95a7eb86 Merge pull request #5026 from hashicorp/jbrandhorst-upgrade-go 
all: upgrade Go to 1.23.0
 2024-08-16 10:27:16 -07:00
Johan Brandhorst-Satzkorn 9f6fc8b26c ci: don't fail on cache miss 
Other parts of CI do not fail on cache miss, and it might
be necessary to allow it to fail to successfully restore it later.
 2024-08-15 15:46:09 -07:00
Johan Brandhorst-Satzkorn 6c4db8b6c0 all: upgrade Go to 1.23.0 2024-08-15 12:23:12 -07:00
Louis Ruch a3788ab978 fix(policy): Cascade delete policy when scope is deleted (#5014) 2024-08-14 09:03:17 -07:00
Michael Li 05f281673e test(e2e): Add test for worker api tags (#5005) 
* test(e2e): Add test for worker api tags

* CR: Add additional check for an API tag that's the same as a config tag
 2024-08-14 11:58:27 -04:00
Sorawis Nilparuk (Bo) 350ac90a57 implement configurable getDownstreamWorker timeout (#5007) 
* implement configurable getDownstreamWorker timeout

* add parsing test

* typos

* fix tests

* fix worker tests

* 0 is a valid value
 2024-08-13 14:27:39 -07:00
dani 1a8e954513 fix: failing to upload large session recordings using minio plugin (#5013) 2024-08-13 17:14:58 -04:00
Hugo 903039e885 fix(daemon): Return 404 if alias interceptor ResolveRequestIds fails (#5006) 2024-08-13 14:24:01 +01:00
daniDanielle MiuElim TsiagbeyLisbet Alvarez
 		bad65ac0e1 0.17.0 Changelog (#4945) 
* add changelog sections

* doc: add changelog for storage bucket credential

* add ui changes to changelog

* fix indenting & parentheses

---------

Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
Co-authored-by: Elim Tsiagbey <elim.tsiagbey@hashicorp.com>
Co-authored-by: Lisbet Alvarez <lisbet.alvarez@hashicorp.com>
 2024-08-06 16:56:56 -07:00
Dan Heath 3dfe4ac111 docs: Fix broken anchor link in Credential management (#4998) 
* docs: Fix broken anchor link in Credential management

* docs: Update link titles
 2024-08-06 15:12:33 -04:00
Johan Brandhorst-Satzkorn a77769fdb6 internal/server: only use non-nil tags (#4996) 2024-08-06 09:17:40 -07:00
Damian Debkowski 5707a64b20 fix(db): remove storage_plugin_storage_bucket_secret-rewrapping-job table (#4993) 2024-08-02 09:08:16 -07:00
Jim 28b465e4b8 refact: to use go-dbw CreateItems, DeleteItems (#4974) 
* refact: to use go-dbw CreateItems, DeleteItems

Latest version of go-dbw updated the signature of
CreateItems(...) and DeleteItems(...) on a happy
note this latest version of go-dbw actually does
batch inserts and updates for this functions.

* all: regenerate protos with new protoc-gen-go version
 2024-08-01 11:18:53 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] b24f6dcee8 Result of tsccr-helper -log-level=info gha update -latest . (#4989) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2024-08-01 10:58:46 -04:00
Dan Heath 9805a7357c docs: Update link in 0.17.0 release notes (#4985) 2024-07-31 19:03:13 -04:00
Dan Heath 7ebc851f56 docs: Release notes 07-31 (#4978) 
* docs: Release notes 07-31

* docs: Updates based on feedback
 2024-07-30 17:21:25 -04:00
Dan HeathMichael LiRobin BeckRobin Beck
 		bbbe971ed1 docs: Move permissions to config for usage docs (#4962) 
* docs: Move permissions to config for usage docs

* docs: Update permissions concepts (#4970)

* docs: Update permissions concepts

* docs: Delete comments

* docs: Structural edits and adding workflow

* docs: Fix wording

* docs: Change guide name, add resource table

* Rab manage roles refactor (#4980)

* refreshes the manage-roles docs

* adds href for common-workflows/manage-roles to configuration/identity-access-management

* docs: Fix a couple typos

* docs: Style updates

* docs: Fix image links, update alt text

* docs: Add more info/next steps sections

* docs: Remove number for single instruction

* fixes screenshot

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* updates path to resource-table.mdx

* sets aliases scope to Global

* updates aliases scope in resource table

* clarifies assigned scope id

* Update website/redirects.js

Co-authored-by: Michael Li <michael.li@hashicorp.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2024-07-30 17:21:09 -04:00