CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,478 Commits 7 Branches 2 Tags
22d400674a6c7aa346fd39afdc5987bb8eb0ffd0
Commit Graph
3478 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mark Collao 22d400674a turn on osv scanning (#3954) 2023-10-30 20:25:27 -05:00
Jim 75cef86a34 feat (authmethod/password): add additional telmemetry for passwd acct authen (#3958) 2023-10-30 18:23:23 -04:00
dependabot[bot] b528696325 chore(deps): bump github.com/docker/docker (#3949) 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 23.0.3+incompatible to 24.0.7+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v23.0.3...v24.0.7)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-30 14:46:31 -04:00
Johan Brandhorst-Satzkorn 6081b6c58d internal/credential: simplify TestObject test helper (#3899) 
The TestObject test helper previously returned an error,
but it's easier to have it perform the error check itself,
as it conventionally done with test helpers.
 2023-10-30 11:03:04 -07:00
Sepehr f9dee55e4d Telemetry(observations): add oidc and ldap observation events (#3945) 
* telemetry(observations): Add observations for oidc and ldap authentications

* telemetry(observations): Add tests ldap and oidc observation events
 2023-10-30 08:54:00 -07:00
Michael Li f0a4bce17c test(e2e): Add test for controller-led worker registration (#3882) 
* test(e2e): Add test for controller led worker registration

* chore(e2e): Rename log files to ensure uniqueness

This updates the log files to be based on the scenario name instead of just the test package in case some scenarios run the same test package
 2023-10-30 09:48:08 -04:00
Dan Heath c93edfb612 docs: Document additional valid principals (#3914) 2023-10-27 10:32:41 -07:00
Johan Brandhorst-Satzkorn 940eb61282 sqltest: fix typo (#3886) 2023-10-26 11:18:41 -07:00
Johan Brandhorst-Satzkorn 894927ffd2 internal/host: fix inconsistent receiver (#3894) 
This is a lint error but wasn't caught because it was a
historic problem. It's appearing again now because we're
adding another method to this type as part of the
pagination workflow.
 2023-10-26 11:16:59 -07:00
Jim 9e6ebdddc6 chore: add changelog for ldap fix PR #3929 (#3934) 2023-10-26 12:21:56 -04:00
Jim 83e0e9b3f7 fix (auth/ldap): fix encoding of mTLS client key (#3929) 
We need to encode the key as a PEM before initializing cap's
ldap client
 2023-10-26 11:42:07 -04:00
mickael-hc fe948942c2 security-scan: temporarily pin semgrep to 1.45.0 (#3931) 2023-10-26 10:34:21 -04:00
Michael Li 752f20fa27 test(e2e): Wait until target ec2 instance is ready to be used (#3910) 2023-10-24 18:20:02 -04:00
Timothy Messier d865ff16a4 ci(schema-diff): Fix error with large diffs (#3909) 
When generating the JSON for submitting the github comment, if the
message was too large, the workflow would fail with the following error:

    /usr/bin/jq: Argument list too long

This fix switches to using the `--rawfile`, which allows jq to process
the large comment.
 2023-10-24 14:00:29 -04:00
dani c89777de41 Expose Valid Principals for Vault SSH Signed Certs (#3791) 
* allow additional valid principals when creating vault ssh signed cert cred lib

* add additional_valid_principals field to credential libraries documentation page
 2023-10-24 12:44:51 -04:00
Elim Tsiagbey c95081dde9 chore: Update changelog for bug fix (#3904) 
Update the changelog details for High CPU Utilization bug fix: https://github.com/hashicorp/boundary/pull/3884
 2023-10-24 11:49:49 -04:00
Elim Tsiagbey 5741807b4a fix: monitorUpstreamConnectionState CPU consumption (#3884) 
* fix: monitorUpstreamConnectionState CPU consumption

`monitorUpstreamConnectionState()` is a goroutine that listens for GRPC client connection changes using GRPC's `WaitForStateChange` method. `monitorUpstreamConnectionState()` was consuming the a lot of CPU. It was continuously running and not actually waiting for state changes. The `state` for `monitorUpstreamConnectionState()` was not getting correctly updated which caused the loop to continuously run instead of waiting for new state changes.

Update GRPC `WaitForStateChange` method to use the same `state` that gets updated.
 2023-10-23 19:35:12 -04:00
Jim 1c330543a7 fix (oplog keys): fix issue with migration of oplog keys to new tables (#3868) 
We inadvertently used
kms.GetWrapper(ctx, am.ScopeId, kms.KeyPurposeDatabase)
which resulted in the use of a database key for an oplog entry.
See:
https://github.com/hashicorp/boundary/pull/3665/files#diff-bcf83b5283886c98fc45b6435fdc94d87d545b2768c6beac8acd14eb9d6b13f1

This fixes the issue with the missing "Database" purpose key when
we converted the oplog keys into their own tables.

We chosen to truncate the existing oplog entries to eliminate any
references to a Database kms key in existing oplog entries.
 2023-10-23 18:42:23 -04:00
Jeff MitchellandJohan Brandhorst-Satzkorn fb4a5a98dc Add some target fields and move some things around (#3879) 
In preparation for putting proxy code in the api package this creates some necessary fields in the target output and it pre-moves credential parsing and proxy handshake code to their new places. This will make the diff for the actual proxy code move quite a bit smaller.

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2023-10-22 20:48:54 -04:00
Michael Li 82b3f202c0 chore(e2e): Add GetUserPolicy permission to service user (#3877) 2023-10-20 15:12:01 -04:00
Jeff Mitchell 20ac42c851 Add some useful dev flags (#3865) 2023-10-20 14:26:58 -04:00
Michael Li 29a4d8c4d9 test(e2e): Change deadlock timeout to default (#3874) 
This was occasionally causing some flaky behavior in tests. Removing this setting to use the default timeout value.
 2023-10-20 14:03:11 -04:00
Michael Li e089aa219d test(bats): Add list tests for other resource types (#3869) 2023-10-20 12:09:32 -04:00
Michael Li cad044926f chore(e2e): Add always condition (#3866) 2023-10-19 11:09:09 -04:00
Michael Li 7d581abac7 test(e2e): Add check for vault worker filters (#3859) 2023-10-19 09:08:10 -04:00
Jeff Mitchell eb20b80c71 Migrate some credential bits around (#3864) 2023-10-18 17:48:44 -04:00
Dan Heath a601316efd docs: Update release notes (#3852) 
* docs: Update release notes

* docs: Update link to github advisory
 2023-10-18 13:41:39 -04:00
Michael Li 7f596bafa9 test(bats): Fix grant due to deprecation (#3853) 2023-10-17 13:42:11 -04:00
Hugo b6debe93a5 chore: Bump Boundary version 2023-10-17 15:58:17 +01:00
Hugo 2afe33fb94 chore: Update CHANGELOG for v0.14.1 2023-10-17 15:58:17 +01:00
Hugo a6de891c53 chore: Bump gRPC to v1.58.3 
gRPC v1.58.3 fixes a vulnerability in the HTTP stack where a malicious
HTTP/2 client which rapidly creates requests and immediately resets them
can cause excessive server resource consumption.

See https://github.com/grpc/grpc-go/pull/6708 for more details.
 2023-10-17 15:58:17 +01:00
Michael Li 609357c483 test(e2e): Add test for creating an auth method (#3846) 
* test(e2e): Add test for creating an auth method

* CR: Add an additional check for user auto-creation
 2023-10-17 09:41:42 -04:00
Adam BouhmadJohan Brandhorst-SatzkornDan HeathJeff Mitchell
 		7d57a99e34 README Updates (#3760) 
* Update README.md

* Update README.md

* Update README.md

simplfy the boundary messagaging

* Update README.md

* Upload Boundary Desktop GIF for readme

* Add Boundary Desktop GIF example

* Update README.md to include gif of Desktop Client

* Update gif example

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md to include "What is Boundary" video

* Update README.md

* Update README.md

* Update README.md

* Update README.md

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update README.md

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update README.md

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update README.md

* Update README.md

* Update README.md

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update Readme

* Overhaul Readme: Structure, GIFs and more

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2023-10-12 15:49:09 -07:00
HugoandHugo 774832f23e chore: Bump to Go version 1.21.3 (#3820) 
Go 1.21.3 fixes a vulnerability in the HTTP stack where a malicious
HTTP/2 client which rapidly creates requests and immediately resets them
can cause excessive server resource consumption.

More detail in https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo

Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>
 2023-10-12 17:17:25 +01:00
dependabot[bot] dc51613fba chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#3827) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 08:44:46 -04:00
dependabot[bot] c319b3bfc3 chore(deps): bump golang.org/x/net in /plugins/kms/mains/ocikms (#3829) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:33:07 -04:00
dependabot[bot] 7cb634197b chore(deps): bump golang.org/x/net in /plugins/kms/mains/azurekeyvault (#3826) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:32:20 -04:00
dependabot[bot] c510732257 chore(deps): bump golang.org/x/net in /plugins/kms/mains/transit (#3830) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:29:41 -04:00
dependabot[bot] fb6bd61aa6 chore(deps): bump golang.org/x/net in /plugins/kms/mains/alicloudkms (#3828) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:26:43 -04:00
dependabot[bot] 1afcefcd7b chore(deps): bump golang.org/x/net in /plugins/kms/mains/awskms (#3831) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:26:07 -04:00
dependabot[bot] 52a7295668 chore(deps): bump golang.org/x/net in /plugins/kms/mains/gcpckms (#3832) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:24:57 -04:00
dependabot[bot] a6433a479f chore(deps): bump golang.org/x/net in /plugins/boundary/mains/aws (#3835) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:24:24 -04:00
dependabot[bot] ef01825aee chore(deps): bump golang.org/x/net from 0.9.0 to 0.17.0 in /sdk (#3833) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:23:30 -04:00
dependabot[bot] 19f2f35ad2 chore(deps): bump golang.org/x/net in /plugins/boundary/mains/azure (#3834) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:22:58 -04:00
dependabot[bot] 1f598988e6 chore(deps): bump actions/setup-python from 4.7.0 to 4.7.1 (#3837) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.7.0 to 4.7.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/61a6322f88396a6271a6ee3565807d608ecaddd1...65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:21:39 -04:00
Jim 1ed0a13004 refact (kms): convert to the new stdlib slices pkg (#3836) 2023-10-11 20:45:50 -04:00
Dan Heath 8e985488ba docs: Clarify SSH options and session recording (#3749) 
* doc: Clarify SSH options and session recording

* docs: Copy edits based on review feedback

* docs: Update Note to match revision
 2023-10-11 15:22:09 -04:00
Dan Heath 3cd9c241f9 docs: Update worker auth storage path (#3759) 2023-10-11 15:12:08 -04:00
Mark Collao d42369551a Update security-scan.yml 2023-10-11 12:55:04 -05:00
Dan HeathandAdam Bouhmad c979012638 Dheath hashiconf assembly (#3818) 
* docs: Update ldap status

* docs: Add new `remote-command` option

* docs: Update terminology

* docs: Add health check metric

* docs: get rid of blank line

* docs: Add copy edits from review feedback

* docs: Update storage bucket credentials doc

* docs: Add new lines to make code blocks readable

* docs: Edits from code review

* docs: Clarify paragraph on credential rotation

* docs: Update field definition in domain model

* docs: Release notes 0.14.0

* docs: Update LDAP entry

* docs: Revise dynamic credential description

* docs: Add superscripts

* docs: Add worker health metric, reorder items

* docs: Fix typo

* Update website/content/docs/release-notes/v0_14_0.mdx

Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>

* docs: Updates from code review

* docs: Add default port deprecation

---------

Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>
 2023-10-11 11:32:44 -04:00