Commit Graph
4243 Commits
Author SHA1 Message Date
Elim Tsiagbey 130010a2ca feat(testing): add loopback plugin support for overriding the error state with SBC State 2024-07-17 14:23:11 -04:00
Damian Debkowski 9bc5e492f6 feat(sbc): add upsert worker storage bucket job 2024-07-17 14:23:11 -04:00
Elim TsiagbeyandDamian Debkowski 670a43ca22 feat(worker): set storage bucket states for worker status
Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
2024-07-17 14:23:11 -04:00
Damian Debkowski 162a857a29 feat(sbc): Add domain changes for SBC 2024-07-17 14:23:11 -04:00
Damian Debkowski 7a3c484147 feat(storage): add UpsertStorageBucket & GetStorageBucketStates methods 2024-07-17 14:23:11 -04:00
Elim Tsiagbey 012ec400f0 feat: Update StorageBucketSecret to StorageBucketCredentialManagedSecret
Update domain code to replace references of `StorageBucketSecret` to `StorageBucketCredentialManagedSecret`
2024-07-17 14:23:11 -04:00
Damian Debkowski 88c67e4eea feat(proto): define storage bucket state in worker status 2024-07-17 14:23:11 -04:00
Damian Debkowski dc21e714a5 feat(db): tracking storage bucket by worker 2024-07-17 14:23:11 -04:00
Lisbet Alvarez 488c4ea44e bump ui commit (#4936) 2024-07-17 08:57:41 -07:00
Michael Li 9c56eb5e16 chore: Update go-retryablehttp to 0.7.7 (#4930) 2024-07-15 16:16:30 -04:00
Hugo aafdcd83f7 chore(plugins): Update Boundary AWS Plugin to v0.3.1 (#4927)
This updated version of the plugin removes AWS region verification.

Plugin release notes:
https://github.com/hashicorp/boundary-plugin-aws/releases/tag/v0.3.1
2024-07-15 17:25:47 +01:00
Michael Li dc80ba8d28 chore: Fail workflow if request does not succeed (#4926) 2024-07-11 11:25:17 -04:00
Michael Li 80abefda1b chore(e2e): Add audit logs to aws boundary instances (#4924) 2024-07-09 11:32:49 -04:00
Michael Li 6e5fd945a3 chore(e2e): Add instance ips to output (#4913) 2024-07-09 10:34:17 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] e390afe45d Result of tsccr-helper -log-level=info gha update -latest . (#4922)
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-07-09 10:15:49 -04:00
Johan Brandhorst-Satzkorn 96052c6a06 Upgrade Go version (#4923)
This fixes a security vulnerability in net/http, CVE-2024-24791.
2024-07-08 10:13:00 -07:00
Michael Li ad4957a3c7 chore(e2e): Clean up comments in enos.vars (#4903) 2024-07-08 10:18:30 -04:00
Michael Li 1909889a6f chore(e2e): Define docker attributes to prevent forced replacement on second launch (#4918)
* chore(e2e): Define settings to prevent forced replacement

On a second `terraform apply`, there were a few attributes forcing the replacement (i.e. regeneration) of the resource. This commit defines some attributes explicitly to prevent the regeneration from occurring.

* chore(e2e): Add extra timeout for openssh server
2024-07-08 10:08:34 -04:00
Dan HeathandRobin Beck 92b2d4490e docs: Document billing command (#4915)
* docs: Document billing command

* docs: Edits

* docs: Clarify inclusive/exclusive date format

* Apply batch of suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Minor edit

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-06-28 14:27:59 -04:00
d2c73dd2fc Added sample Terraform code for session recording configuration (#4556)
* added sample terraform code to create storage bucket configuration

* added terraform sample code for target configuration

* Added HCP Boundary Plus as requirement in the note

* added sample TF code to configure a storage policy

* added group attributes to tabs

* added terraform tab for updating a storage policy

* formatting and style guide changes

* docs: Lowercase credential types

* docs: Apply active voice

* docs: Close prefix

---------

Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-27 15:16:33 -04:00
Irena RindosandDan Heath 7e36f32e52 update tls docs to include controller led (#4905)
* update tls docs to include controller led

* docs: Minor style edits

* docs: Minor edits

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-27 11:43:39 -04:00
cb948018f9 Update style on core workflow image and light/dark theme (#4567)
* Update style on core workflow image and light/dark theme
Update style on how boundary works image and light/dark theme
Remove redundant image

* docs: Fix typo

---------

Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-26 14:46:19 -04:00
Jeff MitchellandJohan Brandhorst-Satzkorn 4e0c2d79ac Add grant scope IDs to role list (#4893)
This adds grant_scope_ids in the output of role listing. The lookup for grant scope IDs was changed to allow taking in a set of roles instead of just a single role, and the results are collated afterwards.

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-06-25 13:05:52 -04:00
d43565038f Update changelog for release 0.16.2 (#4889) (#4890)
* add minio changes

* add nodee updates to changelog

---------

Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
Co-authored-by: irenarindos <irena.rindos@gmail.com>
2024-06-25 07:39:39 -07:00
Michael Li 8b45b1c515 chore(e2e): Add boundary to path (#4901)
This adds the boundary application to the path on the respective ec2 instances.
2024-06-24 14:01:58 -04:00
Michael Li e2872275dc chore: Update UI version (#4897) 2024-06-20 11:11:51 -04:00
Dan HeathandMichael Li 5df46b1b35 docs: Release notes for 0.16.2 (#4898)
* docs: Release notes for 0.16.2

* Update website/content/docs/release-notes/v0_16_0.mdx

Co-authored-by: Michael Li <michael.li@hashicorp.com>

---------

Co-authored-by: Michael Li <michael.li@hashicorp.com>
2024-06-18 12:45:47 -04:00
Johan Brandhorst-SatzkornandJeff Mitchell c6f3c375f3 api: remove deprecated grant_scope_id field (#4886)
* api: remove deprecated grant_scope_id field

The grant_scope_id field was deprecated in 0.15.0, so we can remove
it for 0.17.0.

* Fix tests

* Fix more tests

* Remove an option and some related code that stuck around

* Fix bats tests

---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
2024-06-17 12:09:33 -07:00
Jeff Mitchell d547e0d459 Add test ability to reinitialize worker auth roots on startup (#4895) 2024-06-17 12:26:55 -04:00
Irena Rindos b54608b9f2 worker auth: use new previous pkix field (#4894)
* worker auth: use new previous pkix field
2024-06-14 13:20:50 -04:00
Hugo d788c9fd9d feat(plugins): Update MinIO plugin to v0.1.3 (#4887) 2024-06-10 17:39:30 +01:00
Michael Li 333b9e855d chore(e2e): Use public version of enos (#4872)
* chore(e2e): Use public version of enos

* chore(e2e): Move vault module to this repo

terraform-enos-aws-vault is no longer supported
2024-06-10 11:13:09 -04:00
Michael Li d408f65519 test(e2e): Add support for dynamic credentials (#4878)
These changes are necessary to enable testing of dynamic credentials when creating storage buckets.
2024-06-07 12:05:11 -04:00
029ab627e2 Rab update filtering managed groups (#4821)
* renames managed groups filtering page, adds LDAP support

* updates managed groups filtering links and tutorials links

* Update website/content/docs/concepts/filtering/managed-groups.mdx

Co-authored-by: Jim <jlambert@hashicorp.com>

* docs: Edits

---------

Co-authored-by: Jim <jlambert@hashicorp.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-06 13:15:42 -06:00
Irena RindosandDanielle Miu 61e7ab4738 Allow descriptions to contain newlines and other whitespace (#2599)
* Allow names and descriptions to contain newlines and other whitespace

* separate validate name from validate description

* update changelog

---------

Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
2024-06-06 13:03:42 -04:00
Irena Rindos 08f391c5d6 workerauth: satisfy NodeIdLoader interface (#4870)
* workerauth: satisfy NodeIdLoader interface
2024-06-06 13:03:05 -04:00
David Bond 0c25dbad13 Use appropriate gRPC error codes for OIDC (#4877)
This commit makes modifications to the OIDC request handlers to return appropriate gRPC
status codes on errors. Before this change, boundary presents the internal error codes to
clients. This causes problems for reverse proxies, as these status codes are mapped to
non-standard HTTP response codes which are ultimately all turned into 500 responses when
4xx status codes are more appropriate and descriptive of the error returned.

Some modifications in this commit include calls to `event.WriteError` so that the
internal error is written to the controller log for visibility. Comments about
potential duplicate logs are now removed as `event.WriteError` is not called when using
functions from the `handlers` package.

Signed-off-by: David Bond <davidsbond93@gmail.com>
2024-06-06 14:59:43 +01:00
Robin Beck 84ae33994a changes sync_interval_seconds default to 600 (#4823) 2024-06-05 13:54:57 -04:00
Daniel GreeningerandDan Heath 4f3c109eb5 docs: multi-hop error message linked to duplicate controller names (#4874)
* multi-hop error message linked to duplicate controller names

* docs: Minor edits

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-04 15:25:42 -04:00
Michael Li 3da1615ddb test(e2e): Add check for ldap account attribute mapping (#4867) 2024-06-04 14:24:15 -04:00
Michael Li 61db074b1e chore(e2e): Clean up UI docker scenario (#4843)
* chore(e2e): Remove unused worker token

* chore(e2e): Remove unused variable
2024-06-04 13:03:41 -04:00
Rowan Smith d161124ba2 update script to not print null values (#4871)
Added a `select(.value != "")` entry to the jq statement to avoid it printing null values. This is to make life easier when copy/pasting the output from the script.

This solves the problem of people overwriting existing values they may have set, namely `VAULT_ADDR` and `VAULT_TOKEN`.

before:

```
➜  enos git:(main) ✗ bash scripts/test_e2e_env.sh               
export BOUNDARY_ADDR='http://some-address:9200'
export BOUNDARY_LICENSE=''
export E2E_AWS_ACCESS_KEY_ID=''
export E2E_AWS_BUCKET_NAME=''
export E2E_AWS_HOST_SET_FILTER=''
export E2E_AWS_HOST_SET_FILTER2=''
export E2E_AWS_HOST_SET_IPS='[""]'
export E2E_AWS_HOST_SET_IPS2='[""]'
export E2E_AWS_REGION=''
export E2E_AWS_SECRET_ACCESS_KEY=''
export E2E_MAX_PAGE_SIZE='10'
export E2E_PASSWORD_ADMIN_LOGIN_NAME='admin'
export E2E_PASSWORD_ADMIN_PASSWORD='xdBht'
export E2E_PASSWORD_AUTH_METHOD_ID='ampw_UI0wkZdCfJ'
export E2E_SSH_CA_KEY=''
export E2E_SSH_KEY_PATH='/Users/something.pem'
export E2E_SSH_USER='ubuntu'
export E2E_TARGET_ADDRESS='10.13.1.254'
export E2E_TARGET_PORT='22'
export E2E_TESTS='true'
export E2E_VAULT_ADDR=''
export E2E_WORKER_ADDRESS=''
export E2E_WORKER_TAG_EGRESS=''
export E2E_WORKER_TAG_INGRESS=''
export VAULT_ADDR=''
export VAULT_TOKEN=''
```

after:

```
➜  enos git:(main) ✗ bash scripts/test_e2e_env.sh               
export BOUNDARY_ADDR='http://some-address:9200'
export E2E_AWS_HOST_SET_IPS='[""]'
export E2E_AWS_HOST_SET_IPS2='[""]'
export E2E_MAX_PAGE_SIZE='10'
export E2E_PASSWORD_ADMIN_LOGIN_NAME='admin'
export E2E_PASSWORD_ADMIN_PASSWORD='xdBht'
export E2E_PASSWORD_AUTH_METHOD_ID='ampw_UI0wkZdCfJ'
export E2E_SSH_CA_KEY=''
export E2E_SSH_KEY_PATH='/Users/something.pem'
export E2E_SSH_USER='ubuntu'
export E2E_TARGET_ADDRESS='10.13.1.254'
export E2E_TARGET_PORT='22'
export E2E_TESTS='true'
```
2024-06-04 09:43:34 -04:00
Dan Heath 2541a3c398 docs: Revise requirements for SSH targets (#4866)
* docs: Revise requirements for SSH targets

* docs: Minor edit
2024-06-03 14:09:25 -04:00
Dan Heath 97d749fa26 docs: Clarify credentials and SSH targets (#4863)
* docs: Clarify credentials and SSH targets

* Trigger build
2024-06-03 12:08:37 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 1a2127a0e4 Result of tsccr-helper -log-level=info gha update -latest . (#4858)
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-06-03 10:47:37 -04:00
Michael Li 2467f9107a test(db): Fix skip command (#4860) 2024-06-03 10:02:32 -04:00
Michael Li e18e3ab783 test: Fix tests due to time (#4855)
* test(billing): Calculate time deltas from a fixed time

Some time calculations are impacted when using the current day vs. the start of the month.

* test(db): Conditionally skip tests at end of month

Certain tests fail when run on the last day of the month because of edge cases in the setup of test data (for example, if today is May 31 and NZ time is June 1). This adds conditional logic to skip those tests when run on the last day of a month.

* CR: typo
2024-05-31 17:08:57 -04:00
ToddandJohan Brandhorst-Satzkorn 5ff3216565 Instead of relying on termination reason use status (#4852)
* Instead of relying on termination reason use status

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-05-31 08:12:31 -07:00
Todd 98b5e3fa52 Close proxy listener if session is no longer active (#4850)
* Close proxy listener if session is no longer active
2024-05-30 16:12:17 -07:00
Dan Heath 4fd49f00f6 docs: Update release notes for 0.16.1 (#4838)
* docs: Update release notes for 0.16.1

* docs: Specify fix is for self-managed versions

* docs: Minor rewrites for clarity and style

* docs: Minor rewrites for sentence length
2024-05-30 16:14:07 -04:00