CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,645 Commits 7 Branches 2 Tags
1c604cf7ff10b1dae6b4947e4ca8af0bb5e59293
Commit Graph
4645 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 1c604cf7ff chore(deps): bump the actions group with 8 updates (#5779) 
Bumps the actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go) | `5.4.0` | `5.5.0` |
| [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `3.0.0` | `3.1.2` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.1.0` | `4.2.1` |
| [google-github-actions/auth](https://github.com/google-github-actions/auth) | `2.1.8` | `2.1.10` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.2.1` | `4.3.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4.3.0` | `4.4.0` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `2.0.0` | `2.1.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.5.0` | `5.6.0` |


Updates `actions/setup-go` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/0aaccfd150d50ccaeb58ebd88d36e91967a5f35b...d35c59abb061a4a6fb18e82ac0862c26744d6ab5)

Updates `hashicorp/setup-terraform` from 3.0.0 to 3.1.2
- [Release notes](https://github.com/hashicorp/setup-terraform/releases)
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/setup-terraform/compare/a1502cd9e758c50496cc9ac5308c4843bcd56d36...b9cd54a3c349d3f38e8881555d616ced269862dd)

Updates `aws-actions/configure-aws-credentials` from 4.1.0 to 4.2.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/ececac1a45f3b08a01d2dd070d28d111c5fe6722...b47578312673ae6fa5b5096b330d9fbac3d116df)

Updates `google-github-actions/auth` from 2.1.8 to 2.1.10
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google-github-actions/auth/compare/71f986410dfbc7added4569d411d040a91dc6935...ba79af03959ebeac9769e648f473a284504d9193)

Updates `actions/download-artifact` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/95815c38cf2ff2164869cbab79da8d1f422bc89e...d3f86a106a0bac45b974a628896c90dbdf5c8093)

Updates `actions/setup-node` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/cdca7365b2dadb8aad0a33bc7601856ffabcc48e...49933ea5288caeca8642d1e84afbd3f7d6820020)

Updates `slackapi/slack-github-action` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/485a9d42d3a73031f12ec201c457e2162c45d02d...b0fa283ad8fea605de13dc3f449259339835fc52)

Updates `actions/setup-python` from 5.5.0 to 5.6.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/8d9ed9ac5c53483de85588cdf95a591a75ab9f55...a26af69be951a213d495a4c3e4e4022e16d87065)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: hashicorp/setup-terraform
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: google-github-actions/auth
  dependency-version: 2.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: slackapi/slack-github-action
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-05-22 15:11:33 -04:00
Johan Brandhorst-Satzkorn 723f40291e dependabot: round two, group all Go modules (#5781) 2025-05-22 15:07:56 -04:00
Johan Brandhorst-Satzkorn b97a337cfa dependabot: add go modules, groups (#5767) 2025-05-22 14:55:30 -04:00
Jan Harrie 0431e12308 configure dependabot to automatically update GitHub Actions dependencies (#5757) 2025-05-22 09:43:35 -07:00
Dan Heath 409d0e0a9c docs: Add HCPb grants issue and fix (#5746) 
* docs: Add HCPb grants issue and fix

* docs: Add important change, revise alertbox

* docs: Updates based on review feedback

* docs: Updates based on review feedback

* docs: Rephrase reference to fix

* docs: Update date of fix

* docs: Update transparent sessions configuration topic
 2025-05-22 09:30:03 -04:00
vanphan24 b07eefc236 Update transparent-sessions.mdx (#5751) 2025-05-21 10:45:08 -04:00
vanphan24 9ab641895a Update what-is-boundary.mdx (#5741) 
added Transparent sessions to matrix
 2025-05-19 11:00:29 -04:00
Michael Li d935291f07 test(e2e): Better skip message (#5743) 2025-05-16 15:19:55 -04:00
Michael Li e97ce924b4 test(e2e): Skip pagination tests until large estimated count bug is addressed (#5742) 
See ICU-16649
 2025-05-16 14:32:08 -04:00
Hugo 08bd39f9fa fix(enos): Remove brackets from standalone IPv6 addresses (#5739) 2025-05-14 18:00:34 +01:00
Hugo a65d5d8573 feat: Normalize fields across various Boundary components (#5599) 
Normalizes various IP/Address/Host fields across Boundary resources/components to comply with IPv6 specifications.
 2025-05-13 16:55:28 +01:00
Dan Heath 2d880326b7 docs: Fix incomplete sentence (#5732) 
* docs: Fix incomplete sentence

* docs: Fix punctuation
 2025-05-09 12:08:37 -04:00
David Kanney 0b94de3dcc docs: Add 0.19.2 release to CHANGELOG (#5731) 2025-05-08 16:03:41 -04:00
David Kanney 6dabe92138 Bump sdk to latest tag (#5728) 2025-05-08 15:59:34 -04:00
Dan Heath e8518764c2 docs: Update release notes (#5708) 
* docs: Update release notes

* docs: Add new known issue

* docs: Update known issue
 2025-05-08 13:22:16 -04:00
dillanb-hashi 1e8c345126 chore(e2e): Added support for boundary license to be an env for enos (#5704) 
* chore(e2e): Added support for boundary license to be an env for enos
 2025-05-07 12:47:09 -07:00
David Kanney 5f740b3650 Add rule to suppress CVE-2025-47268 (#5721) 2025-05-06 18:46:04 -04:00
Lisbet Alvarez 853300f87b bump ui commit to dbf3617 (#5718) 2025-05-06 10:44:29 -07:00
Dan Heath 6eeb9fd936 docs: Update Client Agent errors and conflicting software (#5674) 
* docs: Document OpenVPN DNS conflict

* docs: Fix name of interface

* docs: Add common errors

* docs: Updates based on review feedback

* docs: Remove abelist language

* docs: Remove ableist language
 2025-05-05 11:14:14 -04:00
Johan Brandhorst-Satzkorn 343675ebf5 Update mod files and oauth2 dep (#5714) 
* Update mod files

* Update golang.org/x/oauth2
 2025-05-02 15:03:37 -07:00
Ryan Derr 093226a057 ListResolvableAliasesPermissions Hotfix (#5673) 
* ICU-16921 Fix ListResolvableAliasesPermissions where function skips some permission building when all children scope is provided, this currently results in skipping subsequent direct grants. Also, update listResolvableAliasesRepo to return early with no data when splitting permissions yields no relevant permissions.

* Remove conditional split permission check for listResolvableAliasesRefresh and listRemovedResolvableAliasIds as condition is never reachable. Additionally remove unecessary grants being given to list targets as part of TestACL_ListResolvableAliasesPermissions.

* Remove additonal 'type=target;actions=list' grants as part of TestACL_ListResolvableAliasesPermissions

* Update Switch Statement Too Factor For Edge Case With Children Granted With Role Scope Global

* Resolve comment to refactor error return in listResolvableAliases to instead return no data and document why and when this can occur.

* Add unit tests to cover case where provided permissions to ListResolvableAliases service contains no grant scopes where targets can reside.
 2025-05-02 13:12:32 -05:00
Dan Heath 3429014e70 docs: Note that IPv4 and IPv6 are mandatory (#5670) 
* docs: Note that IPv4 and IPv6 are mandatory

* docs: Add note
 2025-05-02 10:56:33 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] f1f5848c00 Result of tsccr-helper -log-level=info gha update -latest .github/ (#5711) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2025-05-01 12:43:02 -04:00
Lisbet Alvarez 27fd4f5fc6 bump ui commit ca3972c (#5709) 2025-04-30 17:24:40 -07:00
David Kanney 0977963983 Add rules to suppress newly discovered CVEs (#5700) 2025-04-30 11:53:00 -04:00
Dan Heath 4dd0bb60b9 chore: Update changelog for 0.19.1 - main (#5702) 2025-04-30 11:40:27 -04:00
Cameron Perera d0eaf561e0 update CHANGELOG with ui entries (#5697) 2025-04-28 14:17:46 -05:00
Dan Heath 3309e37c8f docs: Clarify credential store behavior (#5686) 
* docs: Clarify credential store behavior

* docs: Update credential libraries phrasing

* docs: Update phrasing for lead in sentence
 2025-04-28 13:23:51 -04:00
Michael Li 90b7d2c0d6 chore(e2e): Add encryption to target ec2 instance (#5672) 2025-04-28 08:29:22 -04:00
Ryan Derr 25bb217a7a Database Init Flags Refactor (#5668) 
* ICU-16920 Refactor Boundary Database Init Flags for Improved Dependency Handling

This commit refactors the database initialization flags to prevent early exits and ensure explicit handling of flag dependencies. If one flag relies on resources skipped by another, the dependent flag will also be skipped.

Key Changes:
- Introduced a `InitFlags` struct to organize existing flags and establish a clear pattern for adding future flags.
- Added receiver functions on the `InitFlags` struct to determine whether a flag should be skipped based on provided options or dependencies.
- Refactored the `Run()` method to avoid early returns when a flag skips resource creation. Instead, a log message is provided to indicate the skipped option, and the process continues with resource creation.

* Resolve Comments
 2025-04-27 13:16:02 -05:00
Cameron Perera 8a78454d72 bump ui commit to 40ec449 (#5688) 2025-04-25 12:22:06 -05:00
StephanRobin BeckDan Heath
 		2866919149 Correct Static Creds indentation (#2561) 
* Correct Static Creds indentation

* Update website/content/docs/concepts/domain-model/credential-stores.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2025-04-24 12:34:14 -04:00
Robin BeckandJohan Brandhorst-Satzkorn eb753e07ec Docs: AssumeRole examples fixes (#5678) 
* fixes dynamic credentials TF example attributes

* corrects AssumeRole policy from trusted identity to actual policy

* Update website/content/docs/concepts/host-discovery/aws.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2025-04-24 10:32:16 -06:00
dillanb-hashi e0c130a938 test(bats): Added bats tests for generic commands (#5677) 
* test(bats): Added bats tests for generic commands
 2025-04-24 08:29:49 -07:00
dillanb-hashi 1757a7ad58 test(e2e): Added credential store to host catalog test (#5675) 2025-04-22 15:05:36 -07:00
dillanb-hashi 32d139c45e test(e2e): Added a test for an unauthenticated user 
* test(e2e): Added a test for an unauthenticated user

* CR: spelling
 2025-04-18 08:11:30 -07:00
Michael Li 14e0b00cce chore(e2e): Update to use ubuntu 22 (#5664) 2025-04-18 10:38:31 -04:00
Aditya SharmaandJohan Brandhorst-Satzkorn 30e3116156 Add parsing logic for User-Agent headers (#5645) 
* feat(ts_telemetry): add parsing logic for user agent headers

* feat(ts_telemetry): update gRPC observability for user-agent headers

* feat(ts_telemetry): add observation tags

* feat(ts_telemetry): Resolved comments

* feat(ts_telemetry): Removed loop variable capture

* feat(ts_telemetry): Updated userAgentKey to be inline

* feat(ts_telemetry): Add support for userAgent as per RFC 9110

* feat(ts_telemetry): Resolved comments

* Fix newline

* feat(ts_telemetry): Moved user-agent parsing to interceptor

* feat(ts_telemetry): Added user-agent parsing complex test case

* Update userAgentsKey comment

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* feat(ts_telemetry): Updated changelog

* feat(ts_telemetry): Resolved comments

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2025-04-17 23:46:25 +05:30
Johan Brandhorst-Satzkorn a833981eae update golang.org deps (#5660) 2025-04-17 09:16:48 -07:00
Damian Debkowski d1feb5665a chore: update changelog to include bug fix (#5654) 2025-04-16 14:06:35 -07:00
Dan Heath b00c063e5e docs: Update caveats about HCP and TTL (#5637) 2025-04-16 15:27:58 -04:00
Michael Li 4304ec0c1c chore(e2e): Address issue with deleting roles/policies (#5646) 
On destroy, there was an issue with deleting IAM roles due to the following error: DeleteConflict: Cannot delete entity, must detach all policies first

This commit adds an option to force the policy detachment, preventing the error.
 2025-04-15 11:31:12 -04:00
Irena Rindos f7c55678e0 chore: remove more dead code (#5640) 2025-04-02 15:09:17 -04:00
Irena Rindos 28b9840878 chore: remove dead target service code (#5639) 2025-04-02 11:32:12 -04:00
Dan Heath d965b8c6c5 docs: Clarify that max duration is required (#5105) 
* docs: Clarify that max duration is required

* docs: Update TCP tabs

* docs: Update newer usage topic
 2025-03-28 10:41:59 -04:00
dependabot[bot] 1227ed9cb0 chore(deps): bump github.com/golang-jwt/jwt/v5 (#5620) 
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-27 08:43:20 -07:00
Ryan Derr 6d9f97d6c8 ICU-16457 Split Liveness Query In Two (#5628) 
* Fix #5602: Ensure controller status update triggers update_time

Rework and fix the logic of #5602 query split. Initial implementation failed to update controller status within `server_controller` as `w.Update` did not trigger `update_time` if `address` or `description` were not updated. Now using `w.Exec` with `updateController` query to always set `update_time` to `now()`.

Additional Notes:
- Updated `repository_controller` tests to verify `update_time` updates even when controller values don't change.
- Added `cleanupFunc` to test cases to remove inserted controllers after each test.
- Verified via `boundary dev` that `worker.upstreamDialerFunc` errors are not present.

Refs: 6c0b3a8a1c

* Resolve Comments
 2025-03-26 14:54:02 -05:00
dependabot[bot] cd84da317e chore(deps): bump github.com/golang-jwt/jwt/v4 (#5627) 
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.1 to 4.5.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-24 15:13:45 -07:00
Ken KellerJohan Brandhorst-SatzkornDan Heath
 		ca123f9d1c docs/update two pages (#5601) 
* update two pages

* Apply suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* docs: Minor updates to connect to target

* docs: Edits

* docs: Edits

* docs: Edits

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2025-03-24 12:55:30 -04:00
Irena Rindos 84c626a459 chore: remove code for 0.12 backwards compatibility in protocol support (#5622) 2025-03-24 11:55:32 -04:00