* feat(controller): New health service and server
This change also implements a new listener purpose, `ops`.
`ops` (short for operations) is a new listener purpose that is
responsible for serving Boundary's operations endpoints, like health
and possibly metrics.
At Startup: `ops` listeners get configured as late as possible to catch
any errors with the startup process;
At Shutdown: If the health endpoint has been set-up, we introduce a
configurable delay in the process. This is to enable the health endpoint
to report unhealthy for that amount of time. `ops` listeners are also
the last listeners to be shutdown.
* added boundary connect -target-name example
* removes some passive and ableist language
* Apply suggestions from code review
add rewrite suggestions from @hugoamvieira
Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>
* update Using Connect Helpers copy
Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>
* feat: display warning in IE 11
* Use innerHTML instead of manual DOM
Co-authored-by: Randall Morey <randall@hashicorp.com>
* link to HashiCorp IE11 deprecation page
Co-authored-by: Randall Morey <randall@hashicorp.com>
This feature allows the user to set the `controllers` field to a string
that points to either an environment variable or file.
We then dynamically pull out the value and parse it into the config.
This feature allows the user to set the `tags` field to a string
that points to either an environment variable or file.
We then dynamically pull out the value and parse it into the config.
This can also be done at the keys level, where you set your keys
directly in Boundary's config file, but point the values to env/file.
This stores worker connection nonces within the database to ensure
uniqueness of connections. Prior the connection required any attacker to
be able to decrypt the incoming encrypted authentication message in
order to replay (and if the attacker has access to the KMS you have
bigger problems), but with this change even if an attacker does have
access to the KMS key, they cannot reuse the same message. (If they're
able to encrypt against the KMS key, they can still act as a worker with
a new message, so this only really helps if they only have decryption
capabilities.)
Hugo
Carlos Alcaide Corvo
Johan Brandhorst-Satzkorn
irenarindos
Robin BeckandHugo
Irena Rindos
Swati Saxena
xka5h
Dharini Jeeva
Timothy Messier
Dylan StaleyandRandall Morey
Noel Quiles
Louis Ruch
Alex Carpenter
Kevin Wang
Mike Wickett
Irena Rindos
Zachary Shilton
Pete Pacent
Jeff Mitchell
Todd
George Christou
DevOps Rob
Brandon Romano