Commit Graph
4495 Commits
Author SHA1 Message Date
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 47538bddcc Result of tsccr-helper -log-level=info gha update -latest .github/ (#5398)
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2025-01-02 11:42:50 -05:00
Michael Li 3d0f667151 chore(e2e): Update vault addresses in AWS scenarios (#5395) 2025-01-02 09:42:23 -05:00
Damian Debkowski 868d7b8a2d test(daemon): remove tests with multihop (#5397) 2024-12-30 12:21:52 -08:00
David Kanney 2342e4b644 fix(target): Assign session connection limit to SessionAuthorization.ConnectionLimit (#5396)
* fix(target): Assign session connection limit to SessionAuthorization.ConnectionLimit

* test(target): Update TestAuthorizeSession & TestAuthorizeSessionTypedCredentials to check session connection limit
2024-12-30 14:16:39 -05:00
Michael Li 157c305753 chore: Install tools if cache restore fails (#5394)
On occasion, the cache restore fails, causing the test pipeline to fail due to not having tparse. This adds a failsafe in the event that there's something wrong with the cache restore.
2024-12-23 14:55:35 -05:00
Damian Debkowski dd1482b5ac test(cluster): check worker status multiple times (#5393) 2024-12-23 11:39:58 -08:00
Johan Brandhorst-Satzkorn 1a6320794e cmd: propagate keyring reading errors (#5360)
Reading a token from the keyring can sometimes fail for reasons
other than the token not being present in the keyring. This PR
introduces a new error used to indicate that the token requested
could not be found in the keyring and propagates errors from the
keyring up to the caller, so that the caller can act on them.

Additionally, this fixes a bug in the client cache where it would
incorrectly assume that a token had been removed from the
keyring, when in fact there was an error reading from the keyring.
2024-12-23 09:21:18 -08:00
Damian Debkowski 98bb4c8c31 test(cluster): split tests between parallel and sequential packages (#5390) 2024-12-20 13:53:37 -08:00
Johan Brandhorst-Satzkorn 1b6b22ef4f internal/daemon/worker: improve runtime and reduce noise (#5387)
TestRotationTicking would previously wait for 5 rotations, which is
pretty slow considering each rotation takes 20 seconds. Reduce
the number to 3, and use require instead of assert to remove
noise during flaky test runs.

This doesn't fix the flakiness of this test, but it should reduce the log spam.
2024-12-20 12:02:22 -08:00
Dan HeathandJohan Brandhorst-Satzkorn 833ddb21ad docs: Update 0.18.x release notes (#5382)
* docs: Update 0.18.x release notes

* docs: Update version numbers

* Apply batch of suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* docs: Add issue link and minor edits

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-12-20 10:06:03 -07:00
Michael LiandJohan Brandhorst-Satzkorn 6ed077c69e test(e2e): Add test for vault oidc provider (#5384)
* test(e2e): Simplify vault address in docker network

* test(e2e): Add oidc test using vault

* Update enos/modules/docker_vault/main.tf

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-12-19 17:06:01 -05:00
Johan Brandhorst-Satzkorn 20f11ab01b Revert "internal/daemon: speed up multi-worker tests (#5370)" (#5386)
Unfortunately, this started causing the enterprise tests to break in
an unexpected way. Reverting to spend some more time testing the changes.
2024-12-19 09:29:48 -08:00
David Kanney 48e0289882 chore: bump boundary-plugin-gcp to latest version (#5381)
* chore: bump boundary-plugin-gcp to latest version

* chore: go mod tidy
2024-12-18 16:45:44 -05:00
Elim Tsiagbey e0eb393665 docs: Add docs for GCP DHC (#5364)
* docs: Add docs for GCP DHC

- Add documentation for GCP dynamic host catalog
- Add changelog for GCP dynamic host catalog
2024-12-18 15:20:19 -05:00
Dan Heath 3cb68b0afd docs: Rename directory (#5234) 2024-12-18 13:52:37 -05:00
Michael Milton ba08b8a5bc Update CHANGELOG (#5378) 2024-12-18 12:39:48 -05:00
adam buxtonandDan Heath 6e1ee86cbb add error #3001 (#5371)
* add error #3001

* Update website/content/docs/troubleshoot/common-errors.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-12-18 10:56:06 -05:00
Elim Tsiagbey 090c1df06e chore: update boundary-plugin-gcp dependency to latest version (#5374) 2024-12-17 15:31:41 -05:00
Dan HeathandRobin Beck b442c1fa60 docs: Update meta content - CLI (#5343)
* docs: Update meta content - CLI

* docs: Edits for consistency

* docs: More edits for consistency

* Apply batch of suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Apply batch suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Remove given id references

* Update read.mdx

* Update read.mdx

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-12-17 14:13:18 -05:00
Elim Tsiagbey a4f2a704fd test(e2e): add GCP dynamic host catalog e2e tests (#5294)
* test(e2e): add GCP infra resources and tests for enos testing

- add 1 new `gcp_target` module that creates a GCP VM instance with labels for filtering
- add GCP dynamic host catalog e2e tests
2024-12-17 14:06:14 -05:00
Johan Brandhorst-Satzkorn 862a30c389 internal/daemon: speed up multi-worker tests (#5370)
Instead of sleeping, we can poll for the desired state. Also,
run shutdowns in parallel.
2024-12-17 09:18:27 -08:00
Dan Heath b2bcd8f7be docs: Update release notes (#5346)
* docs: Update release notes

* docs: Clarify affected versions, fix spacing
2024-12-16 15:29:37 -05:00
Irena RindosandDan Heath fd8f0c1cc6 chore(docs): Remove community-only notation for KMS keys (#5164)
* chore(docs): Remove community-only tag from kms keys

* docs: Clarify edition support

* docs: Minor edit, add `worker-auth` statement

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-12-13 09:12:53 -05:00
Johan Brandhorst-Satzkorn e5b655b9e5 Update CHANGELOG.md with 0.18.2 changes (#5361) 2024-12-12 15:54:17 -08:00
Johan Brandhorst-Satzkorn 87fc86847b all: update crypto dependency (#5356)
This resolves a vulnerability in the SSH package that we're
not vulnerable to.
2024-12-12 11:26:16 -08:00
dependabot[bot] aae9258f5b chore(deps): bump golang.org/x/crypto from 0.18.0 to 0.31.0 in /api (#5354)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.18.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.18.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-12 10:19:04 -08:00
Michael Li 8d7a9d7e08 Merge pull request #5347 from hashicorp/moduli-flake-worker-test
Observed one instance of a test failure when the test failed to connect to the target after changing an API tag on the worker.
2024-12-11 10:26:08 -05:00
Michael Li 4e59352ded Merge pull request #5340 from hashicorp/judith/edu-web-codeowners
* allow education to merge image prs and web to control the website source

* keep boundary team permissions to approve any PR

* let education approve PRs to the website nav too

* make spacing more reasonable
2024-12-11 09:49:09 -05:00
Michael Li 08c245cd00 test(e2e): Update test to mitigate timing flake
Observed one instance of a test failure when the test failed to connect to the target after changing an API tag on the worker.
2024-12-10 16:38:29 -05:00
Michael Li e3fb05a519 chore: Update service user with required permission (#5344) 2024-12-10 12:57:02 -05:00
Judith Malnick dec2f5e813 make spacing more reasonable 2024-12-09 11:01:14 -08:00
Judith Malnick 32576f273f let education approve PRs to the website nav too 2024-12-09 10:52:39 -08:00
David Kanney f62e67584e chore: Clarify GrantHash behavior when there are no GrantTuples (#5334)
* chore: Simplify appending

* test(grants): De-dupe hash comparison

* chore(grants): Remove TODO & add clarifying comment

* test(grants): Add test cases to enforce empty grants behavior
2024-12-06 16:45:38 -05:00
Judith Malnick d9ed6223d0 keep boundary team permissions to approve any PR 2024-12-06 13:35:54 -08:00
c32dcecb6e Update multi-hop.mdx - Added HCP-managed worker multi-hop (#5286)
* Update multi-hop.mdx - Added HCP-managed worker multi-hop

Added new section for the use case of multi-hop through CHP-manage worker

* Update multi-hop.mdx

added link to worker tags docs page

* Update multi-hop.mdx

changed to active voice.

* adds cluster ID note

* adds multi-hop egress filter screenshot

* fixes screenshot paths

* Apply suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-12-06 13:57:47 -07:00
Judith Malnick 5af4f6cc42 allow education to merge image prs and web to control the website source 2024-12-06 11:40:34 -08:00
Michael Li 5896a3b44b chore(e2e): Add object expiration policy to s3 bucket (#5298)
* chore(e2e): Add expiration date to aws bucket objects

* chore(e2e): Add user tag to bucket
2024-12-05 09:51:53 -05:00
Mohit KumarandDan Heath 1cf231a147 docs: clarify behavior of launchctl stop and unload for client agent (#5265)
* docs: clarify behavior of launchctl stop and unload for client agent

* docs: update unload command and clarify permanent disabling of Boundary client agent

* docs: remove "Note" wrapper and clarify unload/reload command for Boundary client agent

* docs: Capitalize Client Agent

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-12-04 15:24:20 -05:00
Damian Debkowski 65c8af1f23 chore: update go dependency (#5303) 2024-12-04 10:58:39 -08:00
Dan HeathandRobin Beck 57b8e7830e docs: Update meta content - Operations (#5247)
* docs: Update meta content - Operations

* Update website/content/docs/operations/session-recordings/validate-session-recordings.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-12-04 13:38:19 -05:00
Dan HeathandRobin Beck daf9f8b61c docs: Update meta content - Troubleshoot (#5280)
* docs: Update meta content - Troubleshoot

* docs: Update title

* Update website/content/docs/troubleshoot/faq.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-12-04 13:36:55 -05:00
Dan HeathandRobin Beck c0a8775951 docs: Update meta content - API and clients (#5281)
* docs: Update meta content - API and clients

* docs: Update titles

* Apply batch suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-12-04 13:34:57 -05:00
Dan HeathandRobin Beck d35175006e docs: Update meta content - Integrations and Develop Boundary (#5283)
* docs: Update meta content - Integrations and Develop Boundary

* Update website/content/docs/developing/index.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-12-04 13:33:06 -05:00
Dan HeathandRobin Beck fae78bbb47 docs: Update meta content - HCP and Enterprise (#5284)
* docs: Update meta content - HCP and Enterprise

* docs: Update titles

* Update website/content/docs/enterprise/licensing.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/enterprise/supported-versions.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-12-04 13:30:49 -05:00
Dan HeathandRobin Beck 2290ffc260 docs: Update meta content - Configuration (#5225)
* docs: Update meta content - Configuration

* docs: Revisions

* docs: Edits

* docs: Update KMS topics

* docs: Updates credential management topics

* docs: Updates IAM topics

* docs: Updates session recording topics

* docs: Updates configuration topics

* docs: Update titles

* Apply batch suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-12-04 13:28:17 -05:00
Johan Brandhorst-Satzkorn c85fad27f6 internal/event: avoid reusing canceled context (#5304)
Don't error in ReleaseGate if the context used for the original
event has been cancelled. Any error in ReleaseGate causes the
controller to terminate its startup. If a user was trying to send
a request to the Boundary controller as it started up, the context
tied to the request would be reused to attempt logging the
observation associated with the request after the logging gate
was released. This would always fail, as the context associated
with the request was canceled.

We now use a new context timeout for events logged after the release
gate is released, if the original context was canceled.
2024-12-04 09:50:25 -08:00
Dan HeathandRobin Beck 22a9074724 docs: Update meta content - Concepts (#5224)
* docs: Update meta content - Concepts

* docs: Revisions

* Update website/content/docs/concepts/domain-model/credentials.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/scopes.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Update exec flag description

* Update website/content/docs/concepts/filtering/events.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Update domain model descriptions

* docs: Update domain model titles

* docs: Edits for consistency

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-12-04 11:01:09 -05:00
Dan Heath 2322357c05 docs: Update meta content - Release notes (#5285) 2024-12-04 10:52:10 -05:00
Ryan Derr dc51dfba92 Update Tags For CRT (#5296) 2024-12-03 12:06:19 -06:00
Johan Brandhorst-Satzkorn 3d5c6ab33a Update release dir owner group (#5299)
* Update release dir owner group

The old group only contains a service account. I updated it to the self managed release engineering group instead.

* Remove release engineering as code owners

Actually lets just remove this group, as per their justification in #4057
2024-12-03 09:48:30 -08:00