CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,930 Commits 7 Branches 2 Tags
261b18f074473cd516f085141d482bb254afbfa1
Commit Graph
4930 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dharini 261b18f074 update ui changelog (#6265) 2025-11-20 11:11:50 -08:00
dani 814ffcca07 chore: bump version to 0.21.0 (#6267) 2025-11-20 11:26:30 -05:00
Louis Ruch 4bae4f23f5 feat(ssh): support ssh known hosts file (#6263) 2025-11-19 16:24:20 -08:00
Tony 6533c8bdb3 test(e2e): add support to rdp connect test on windows 
test(e2e): add support to rdp connect test on windows
 2025-11-18 15:35:59 -05:00
Michael Li d1bcbac5d1 chore(e2e): Rename for clarity (#6261) 2025-11-18 14:40:27 -05:00
Michael Li 6a0de4337b ce: test(e2e): Add connect method that can work in windows 
(cherry picked from commit 6aa5469160e81e5bb8bf38c8cf6ed0c34d6d81f5)
 2025-11-18 14:36:26 -05:00
Tony 94c32d2173 ce: refact(e2e): Update WaitForSessionCli to accept e2e options 
(cherry picked from commit ab3b5fb361e6f2f854f24306979565a28664fc0a)
 2025-11-18 14:36:08 -05:00
Justin Nguyen d3b2e7402b feat: add password credential to meta_session.go (#6257) 2025-11-18 10:45:41 -06:00
dependabot[bot] 6b7ac06dca chore(deps): bump the go group across 1 directory with 9 updates (#6252) 
Bumps the go group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/docker/docker](https://github.com/docker/docker) | `28.5.1+incompatible` | `28.5.2+incompatible` |
| [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) | `3.4.11` | `3.4.12` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.43.0` | `0.44.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.46.0` | `0.47.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.38.0` | `0.39.0` |

Updates `github.com/docker/docker` from 28.5.1+incompatible to 28.5.2+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v28.5.1...v28.5.2)

Updates `github.com/go-ldap/ldap/v3` from 3.4.11 to 3.4.12
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](https://github.com/go-ldap/ldap/compare/v3.4.11...v3.4.12)

Updates `golang.org/x/crypto` from 0.43.0 to 0.44.0
- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.44.0)

Updates `golang.org/x/net` from 0.46.0 to 0.47.0
- [Commits](https://github.com/golang/net/compare/v0.46.0...v0.47.0)

Updates `golang.org/x/sync` from 0.17.0 to 0.18.0
- [Commits](https://github.com/golang/sync/compare/v0.17.0...v0.18.0)

Updates `golang.org/x/sys` from 0.37.0 to 0.38.0
- [Commits](https://github.com/golang/sys/compare/v0.37.0...v0.38.0)

Updates `golang.org/x/term` from 0.36.0 to 0.37.0
- [Commits](https://github.com/golang/term/compare/v0.36.0...v0.37.0)

Updates `golang.org/x/text` from 0.30.0 to 0.31.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.30.0...v0.31.0)

Updates `golang.org/x/tools` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.38.0...v0.39.0)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-version: 28.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-version: 3.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sys
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/term
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/tools
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-17 14:05:43 -05:00
dependabot[bot] c81b201f59 chore(deps): bump github.com/dvsekhvalnov/jose2go (#6250) 
Bumps the go-security group with 1 update in the / directory: [github.com/dvsekhvalnov/jose2go](https://github.com/dvsekhvalnov/jose2go).

Updates `github.com/dvsekhvalnov/jose2go` from 1.6.0 to 1.7.0
- [Commits](https://github.com/dvsekhvalnov/jose2go/compare/v1.6.0...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/dvsekhvalnov/jose2go
  dependency-version: 1.7.0
  dependency-type: indirect
  dependency-group: go-security
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-17 12:20:06 -05:00
Michael Li aedd7f002b fix(e2e): Update tmpfs permissions in worker docker container (#6253) 
* chore(e2e): Update docker terraform provider to 3.6.2

* chore(e2e): Use boundary directory to avoid permission issues

* fix(e2e): Use tmpfs block to open up permissions of directory
 2025-11-17 11:47:04 -05:00
Justin Nguyen dc7f0b00fc Merge pull request #6207 from hashicorp/llb-password-credential-type 
Password credential type
 2025-11-14 12:00:23 -06:00
daniandAndrew Gaffney 08015e9d98 feat(clientproxy): automatically close boundary connect when proxy is no longer in use (#6232) 
Co-authored-by: Andrew Gaffney <andrew@gaffney.cc>
 2025-11-14 09:37:30 -05:00
Bharath Gajjala c39a50570a fix(db): vault password library migration adjustments and mapping overrides (#6229) 2025-11-13 12:49:25 -08:00
Justin Nguyen 1ac444d0a8 feat(cli): Add support for password credential in redis helper (#6213) 2025-11-13 12:28:54 -08:00
Bharath Gajjala d4f7bd55d1 feat(cli): Add password credential CLI commands (#6117) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 11c4fd7580 feat(handlers): CRUDL support for static password credential (#6181) 2025-11-13 12:28:04 -08:00
Bharath Gajjala ec7450961c feat(credential/static): Implement CRUDL support for password credentials (#6163) 2025-11-13 12:28:04 -08:00
Justin Nguyen 82745e16be feat(handlers): Implement CRUDL for vault generic Password credential (#6161) 2025-11-13 12:28:04 -08:00
Justin Nguyen 4a8009fec4 feat(credential/vault): Implement repository for vault password credential (#6140) 2025-11-13 12:28:04 -08:00
Justin Nguyen 3ab1019bc2 feat(db): Add db migration to support vault password credential (#6129) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 1c2bc2cc74 feat(db): Password credential migration (#6125) 2025-11-13 12:28:04 -08:00
Justin Nguyen 8bce750933 feat(db): Add new tables for password credential type (#6101) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 5cf33fa8b3 feat(credentials): Add PasswordAttributes credential type (#6110) 2025-11-13 12:28:04 -08:00
dillanb-hashi d0050ad881 refact(e2e): Enable token to be passed into methods (#6248) 
* ce: chore(e2e): Address setup flakiness when getting hostname
* ce: refact(e2e): Enable token to be passed into methods
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2025-11-13 13:19:33 -07:00
dillanb-hashi 1a135dd711 test(rdp): added public controller ip as an output for github runner rdp tests (#6246) 2025-11-12 17:45:29 -05:00
Michael Li ebe88cac06 fix(e2e): Fix ipv6 address argument (#6245) 
* test(e2e): Add windows client private ip to output

* fix(e2e): Only assign ipv6 address if available
 2025-11-12 14:11:30 -05:00
Tony 8a7f241107 chore(e2e): Add helper func ConnectCliStdoutPipe (#6243) 2025-11-12 12:47:44 -05:00
Tony f3d44ba817 chore(e2e): update vault create credential funcs (#6239) 2025-11-11 13:07:11 -05:00
Irena Rindos fd5bcca300 Revert "chore: upgrade backport runner (#6236)" (#6238) 
This reverts commit 53bb4fa72b.
 2025-11-10 13:39:23 -05:00
Michael Li b3c6cb7929 test(e2e): Add RDP test for Vault LDAP (ce commits) (#6237) 
* refact(e2e): Add error output to SetupLdapWithOpenLdap

(cherry picked from commit 12874ec3227500ac03ece452e342f44d9f1ebc7a)

* test(e2e): Add method for setting up vault ldap with active directory

(cherry picked from commit 4f0fe7bba78d25005a5d98e203a3d0bc037a2b69)

* chore(e2e): Add domain controller ipv6 address to e2e tests

(cherry picked from commit 3215194053cd82a4e650522e56f4699946f62ef3)
 2025-11-10 13:31:47 -05:00
Irena Rindos 53bb4fa72b chore: upgrade backport runner (#6236) 2025-11-10 11:48:36 -05:00
Michael Milton 9e7fb37e0c Update changelog to include 0.19.3 changes (#6230) 2025-11-07 13:24:39 -05:00
Irena Rindos 4a4bbd723e chore(sqltest): update readme (#6228) 2025-11-07 12:22:52 -05:00
Michael Li 89c577ddd7 chore(e2e): Update go mod download to run on the correct user (#6227) 
* chore(e2e): Ensure go modules are downloaded for test user

* chore(e2e): Add additional debug lines in script

* chore(e2e): Exclude boundary-ui clone when zipping boundary src
 2025-11-07 12:03:27 -05:00
dani 4a7342b074 fix(credential/vault): add case for upd creds in injected creds switch (#6226) 2025-11-06 16:37:57 -05:00
Michael Li 04d994bfbc chore(e2e): Update URL to avoid 502 Bad Gateway (#6225) 2025-11-06 14:15:23 -05:00
Michael Li 272cad00b2 chore(e2e): Enable Vault for RDP e2e tests (#6223) 
* chore(e2e): Update vault addresses

* chore(e2e): Install vault CLI on windows client
 2025-11-06 13:49:17 -05:00
dillanb-hashi 4e78c68195 chore(rdp): add client ssh key to enos variable output (#6224) 2025-11-06 09:28:44 -07:00
dani 3461cc9b5e Merge pull request #6222 from hashicorp/llb-vault-ldap 
Vault LDAP Credential Library
 2025-11-06 08:35:59 -05:00
dependabot[bot] d81eaf09b1 chore(deps): bump github.com/opencontainers/runc (#6221) 
Bumps the go-security group with 1 update in the / directory: [github.com/opencontainers/runc](https://github.com/opencontainers/runc).

Updates `github.com/opencontainers/runc` from 1.2.3 to 1.2.8
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/v1.2.8/CHANGELOG.md)
- [Commits](https://github.com/opencontainers/runc/compare/v1.2.3...v1.2.8)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
  dependency-version: 1.2.8
  dependency-type: indirect
  dependency-group: go-security
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-05 17:37:12 -05:00
Hugo 546550fa4f docs(credential/vault): Clarify LdapCredentialLibrary issuing cred type 2025-11-05 16:20:44 -05:00
Hugo 3de584cafa refact(e2e): Split Vault Boundary Controller setup from secrets policy creation 2025-11-05 16:20:44 -05:00
Hugo 9575d5f239 test(e2e): Implement Vault LDAP API and CLI tests 2025-11-05 16:20:44 -05:00
Andrew Gaffney 9652ebe032 feat(cmd): Support Vault LDAP Credential Library 2025-11-05 16:20:44 -05:00
Hugo 84dd5543cf feat(handlers/credentiallibraries): Support Vault LDAP credential library 2025-11-05 16:20:44 -05:00
Hugo 9e08eafcff feat(credential/vault): Implement LDAP Credential Library 2025-11-05 16:20:42 -05:00
Andrew Gaffney ebf0450b03 feat(db): LDAP Credential Library history entities 2025-11-05 16:20:13 -05:00
Andrew Gaffney f4d81e0026 feat(db): LDAP Credential Library operational entities 2025-11-05 16:20:13 -05:00
Hugo 548782a261 refact(db): Redefine credential_vault_library 
The existing credential_vault_library table is the table that holds operational
state for Vault generic credential libraries. This commit renames that table and
all its associated database entities to credential_vault_generic_library.

Additionally, a new credential_vault_library table is created as the base table
for all Vault-subtype credential libraries (eg: Vault generic, Vault SSH Cert).
 2025-11-05 16:20:13 -05:00