CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,401 Commits 7 Branches 2 Tags
2d8d9925002c350efb3b314d1f55200a26d1c151
Commit Graph
3401 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
irenarindos 2d8d992500 Revert "chore: update version and changelog" 
This reverts commit cac7723e77.
 2023-09-25 14:20:24 -04:00
irenarindos cac7723e77 chore: update version and changelog 2023-09-25 13:17:18 -04:00
irenarindos 24771ff355 update go.mod 2023-09-25 13:11:12 -04:00
Devon Anderson 32a036556b Bump UI Commit (#3774) 2023-09-25 12:21:01 -04:00
Jim 4ed675be16 feat (db): add Writer.IsTx(...) (#3770) 2023-09-25 04:35:40 -04:00
April Ayres f13a23eab7 fix (telemetry): ignore fields without public class 2023-09-22 14:15:23 -07:00
daniandDanielle Miu 9413837b6a pass storage an empty context so it can close cleanly (#3653) 
Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
 2023-09-22 16:00:10 -04:00
daniandDanielle Miu a7c1876d7b remove deprecated option application-credential-source (#3728) 
Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
 2023-09-22 15:58:18 -04:00
Damian Debkowski 1be59e3d76 chore(plugins): update aws version to v0.2.0 (#3767) 2023-09-22 12:57:09 -07:00
Dan Heath 8f27b5dfe5 docs (telemetry): update domain docs 2023-09-22 11:31:42 -04:00
Sepehr 605657174d chore (telemetry): CHANGELOG entry 2023-09-22 11:31:42 -04:00
Sepehr 14b3237a69 fix (telemetry): filtering events: fix default deny filter behavior 2023-09-22 11:31:42 -04:00
Sepehr 167161448b Add write observation interceptors, add validation check, fix default deny filter 2023-09-22 11:31:42 -04:00
April Ayres 0216c51ffc (telemetry_filter): handle map / slice traversals of proto structs 2023-09-22 11:31:42 -04:00
April Ayres ee7c17d2dc (event_observation): use consts for request/response, code cleanup 2023-09-22 11:31:42 -04:00
April Ayres c7cd6eabf3 (telemetry_filter): handle core proto types atomically 2023-09-22 11:31:42 -04:00
Sepehr 41c1e79cad observation(event): add workers list test 2023-09-22 11:31:42 -04:00
April Ayres 49a1563f6a observation(event): refine telemetry filter, and WithTelemetry() 2023-09-22 11:31:42 -04:00
Sepehr fcb29ed919 observation(event): add req/resp to observations and recursively scan observation tags 2023-09-22 11:31:42 -04:00
Sepehr e278964422 observability(events): Adding telemetry flag and and telemetry sink event type with tests 2023-09-22 11:31:42 -04:00
Sepehr 16d86d601a Add additional observation tags, remove from version and authorized_action 2023-09-22 11:31:42 -04:00
April Ayres 23c969ed39 Add observability tags to plugin protobuf. 2023-09-22 11:31:42 -04:00
Sepehr 14af8e8cd7 observation tags proto messages 2023-09-22 11:31:42 -04:00
Jeff Mitchell b64eadedbf Fix flaky TestServer_ReloadInitialUpstreams (#3758) 
With the KMS changes this should never have worked at all (because the
different databases means the credentials conveyed after the KMS-based
authentication would never be valid). However, it was sometimes passing
because of a race condition: the worker could be found in the database
before the new credentials were returned to the worker, causing the
worker to start at the KMS step with the second controller.

This changes the test to use the same database for two controllers, but
to only ever have one running at a time, and uses a sequence of two
changed (or unchanged, depending) status updates from the worker to
ensure that the reload was successful.
 2023-09-21 14:25:53 -04:00
Louis Ruch d158c1475b chore: Update changelog (#3643) 2023-09-20 11:56:21 -07:00
Michael Li 12c12f378a chore(enos): Move terraform-enos-aws-infra to boundary (#3745) 
* chore(enos): Move terraform-enos-aws-infra to boundary

The terraform-enos-aws-infra repo was a terraform module to set up the base aws infrastructure. Vault made some local updates that might mitigate flakiness we've been seeing ("can't delete due to dependencies" error). We are replacing our usage of that module Vault's local copy.

* chore(enos): Modify service user to allow DeleteRoute

* fixup! chore(enos): Move terraform-enos-aws-infra to boundary

* chore(enos): Rename variable for clarity
 2023-09-20 11:07:50 -04:00
Irena Rindos 8a0b8d84d8 feat(event): remove node on pipeline failure (#3736) 2023-09-20 10:19:26 -04:00
Jim 6c54988e58 chore: update cap/ldap dep (#3748) 
cap/ldap updated it's upstream dep on go-ldap
 2023-09-19 14:48:43 -04:00
Johan Brandhorst-Satzkorn 2e0587bff0 credential: fix lint errors (#3746) 
The existing pattern was subject to a bug whereby a lock
value was copied every time the value was passed around.
This was happening because of the use of an embedded
protobuf type. To avoid copying a mutex, use a pointer
type in the embedding.

Also fixes a few linter warnings complaining about the use
of unkeyed literals.
 2023-09-19 09:17:42 -07:00
Adam BouhmadandDan Heath 35a8fa62cf Update Vault Credential Library Docs with additional options (#3739) 
* Update Vault Credential Library Docs with additional Options

* Update credential-libraries.mdx

* docs: Minor copy edits

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-09-19 11:55:00 -04:00
Jim 0d19892e03 fix (events): convert multierror to stdlib error (#3743) 
* fix (events): convert multierror to stdlib error

multierror errors will be converted to a stdlib error (because
multierror doesn't support json marshaling).

* refact (errors): convert from multierror to stdlib errors.Join(...)

* refact: convert from pkg/errors to stdlib error wrapping
 2023-09-17 19:35:43 -04:00
Michael Li 98f8383a2b test: Add option for logging in test controller (#3738) 2023-09-15 14:14:12 -04:00
Irena Rindos c3d3000a3e chore: update go-eventlogger (#3735) 2023-09-15 10:31:53 -04:00
Irena Rindos bf595f8599 feat(events): add deregister pipeline (#3729) 
* feat(events): add deregister pipeline
 2023-09-14 16:06:10 -04:00
Dan Heath b29438427a docs: Update What is Boundary video (#3731) 2023-09-14 15:57:14 -04:00
Michael Li 94dd9e84fe test(e2e): Refactor vault setup method (#3724) 
* refact(e2e): Pass in boundary-controller-policy to method

This allows any boundary-enterprise specific test packages to point to their own testdata directory

* test(e2e): Fix assertion statement

* refact(e2e): Move method call for clarity
 2023-09-14 14:12:09 -04:00
Damian Debkowski e3e848d847 feat(event): new storage event type (#3719) 2023-09-14 10:31:01 -07:00
Danny KnightsandDan Heath 0f05b19e04 SSH and TCP definition for Targets (#3513) 
* Added detail to targets.mdx around target type in relation to whether using injected credentials, i.e. setting type to ssh or tcp

* Update website/content/docs/concepts/domain-model/targets.mdx

* Update website/content/docs/concepts/domain-model/targets.mdx

* docs: Update target type info, add requirements

* docs: Revise SSH credential text

* docs: Clarify reference to SSH

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-09-14 11:10:42 -04:00
Irena Rindos 6161635f65 feat(event): add register pipeline (#3714) 2023-09-13 13:08:16 -04:00
Michael Li 72efe74f24 test(e2e): Add worker health check when setting up infra (#3708) 
* test(e2e): Add worker health check when setting up infra

* test(e2e): Set limits on postgres container

This was done to potentially reduce some load on runners
 2023-09-13 10:20:57 -04:00
Michael Li e552b12f22 test(e2e): Add missing proxy listener to config file (#3715) 2023-09-12 18:44:53 -04:00
Yoko HyakunaDan Heathkevin-loehfelmkevin-loehfelmFlorin Cătălin Țiucra-PopaAdam Bouhmad
 		ad5ad69d54 [Assembly] Boundary Commands (CLI) docs (#3411) 
* Add 'Commands (CLI)' docs

* Update index.mdx

Added Environment variables section

* Add 'connect' sub-folder structure

* Adding listen address and port environment variables

* add connect to the docs navigation

* docs: Add Florin's update to index

* docs: Fix links and typo

* Add front-matter to resolve the PR check issue

* Update postgres.mdx

Boundary helper for POSTGRES

* Completed 'boundary accounts' command docs

* Draft connection option documentatino for kube, http, and rdp (#3455)

* Style updates for consistency

* Clean up using partials

* Add 'ssh' doc & updated style for consistency

* Fix paste error

* Fix the format issue on 'connect ssh' doc

* Add 'auth-methods' command doc (#3520)

* Add the docs for 'logout', 'server', and 'dev' commands (#3524)

* Add the docs for 'logout', 'server', and 'dev' commands

* Update the front matter

* Add auth-tokens and authenticate command docs (#3575)

* Add config command docs (#3576)

* updates to the ssh helper command docs (#3523)

* updates to the ssh helper command docs

* docs: Fix code block

* docs: Add minor copy edits

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* docs: Add worker commands

* docs: Update workers subcommands (#3598)

* docs: Update worker subcommands

* docs: Update certificate-authority subcommand

* doc: Fix syntax for code refererences

* docs: Add `users` commands (#3599)

* docs: Add `users` commands

* docs: Add more subcommands

* docs: Add `target` commands (#3608)

* Add command docs for 'credential-libraries' (#3610)

* Add 'credential-stores' command docs (#3611)

* Add 'credential-stores' command docs

* Add the output message

* Fix a typo

* Fix a typo

* Update the dummy token value

* docs: Add `storage-bucket` commands - update (#3615)

* docs: Add `sessions` commands (#3616)

* docs: Add `session-recordings` commands (#3617)

* Add 'credentials' command docs (#3619)

* Add 'credentials' command docs

* Fix typos

* docs: Add `scopes` commands (#3620)

* docs: Add `scopes` commands

* docs: Fix typos

* docs: Add `roles` commands (#3621)

* docs: Add `roles` commands

* docs: Add remaining subcommands

* Add 'database' command docs (#3628)

* Add 'database' command docs

* Update the format inconsistency

* docs: Add `managed-groups` commands (#3626)

* docs: Add `managed-groups` commands

* docs: Clarify description

* docs: Add `hosts` commands (#3629)

* docs: Add `host-sets` commands (#3630)

* docs: Add `host-sets` commands

* docs: Copy edits

* docs: Add `host-catalogs` commands (#3632)

* Add 'boundary groups' command docs (#3636)

---------

Co-authored-by: kevin-loehfelm <37027455+kevin-loehfelm@users.noreply.github.com>
Co-authored-by: kevin-loehfelm <kevin.loehfelm@hashicorp.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Florin Cătălin Țiucra-Popa <106736683+FlorinTP@users.noreply.github.com>
Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>
 2023-09-12 14:37:31 -04:00
Jim 457b618f6e chore: update azurevaultkey wrapper dependency. (#3706) 
This update brings in PR #155 which adds support for azure workload
identity authentication
 2023-09-12 13:33:39 -04:00
Irena Rindos 7bd2d2c913 feat(worker): allow hcp cluster id to be sourced from env var (#3709) 
* feat(worker): allow hcp cluster id to be sourced from env var
 2023-09-12 13:20:49 -04:00
Irena Rindos 6f10a0ac87 chore: update go-eventlogger (#3707) 
* chore: update go-eventlogger
 2023-09-12 11:03:18 -04:00
Irena Rindos 9733a250fa refact(event): move observability/event to event (#3704) 2023-09-12 08:15:34 -04:00
JimandDan Heath dbda7e3e7a docs (auth/ldap): add new fields maximum_page_size, dereference_aliases (#3700) 
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-09-11 16:01:14 -04:00
Michael Li ff34cb629e test(e2e): Add a test for a single-hop worker (#3690) 
* refact(e2e): Add env for workers

* test(e2e): Add test for single-hop worker

* fixup! refact(e2e): Add env for workers

* fixup! test(e2e): Add test for single-hop worker

* fixup! test(e2e): Add test for single-hop worker

* fixup! test(e2e): Add test for single-hop worker

* fixup! test(e2e): Add test for single-hop worker
 2023-09-11 14:25:32 -04:00
Jim 5f66f2fa8e chore: update cap/ldap dependency (#3699) 2023-09-11 11:36:55 -04:00
Elim Tsiagbey 955f14d730 chore: update changelog with new worker upstream connection status (#3693) 
Add missing changelog entry for https://github.com/hashicorp/boundary/pull/3650
 2023-09-11 10:58:38 -04:00