CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,271 Commits 7 Branches 2 Tags
48038c3c33c35b1fcec1430deeab20e10beb2931
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Li edd7ec62f8 test(e2e): Add support for an hcp worker (#4939) 2024-07-23 10:59:39 -04:00
Michael Li 9c56eb5e16 chore: Update go-retryablehttp to 0.7.7 (#4930) 2024-07-15 16:16:30 -04:00
Michael Li dc80ba8d28 chore: Fail workflow if request does not succeed (#4926) 2024-07-11 11:25:17 -04:00
Michael Li 80abefda1b chore(e2e): Add audit logs to aws boundary instances (#4924) 2024-07-09 11:32:49 -04:00
Michael Li 6e5fd945a3 chore(e2e): Add instance ips to output (#4913) 2024-07-09 10:34:17 -04:00
Michael Li ad4957a3c7 chore(e2e): Clean up comments in enos.vars (#4903) 2024-07-08 10:18:30 -04:00
Michael Li 1909889a6f chore(e2e): Define docker attributes to prevent forced replacement on second launch (#4918) 
* chore(e2e): Define settings to prevent forced replacement

On a second `terraform apply`, there were a few attributes forcing the replacement (i.e. regeneration) of the resource. This commit defines some attributes explicitly to prevent the regeneration from occurring.

* chore(e2e): Add extra timeout for openssh server
 2024-07-08 10:08:34 -04:00
Michael Li 8b45b1c515 chore(e2e): Add boundary to path (#4901) 
This adds the boundary application to the path on the respective ec2 instances.
 2024-06-24 14:01:58 -04:00
Michael Li e2872275dc chore: Update UI version (#4897) 2024-06-20 11:11:51 -04:00
Michael Li 333b9e855d chore(e2e): Use public version of enos (#4872) 
* chore(e2e): Use public version of enos

* chore(e2e): Move vault module to this repo

terraform-enos-aws-vault is no longer supported
 2024-06-10 11:13:09 -04:00
Michael Li d408f65519 test(e2e): Add support for dynamic credentials (#4878) 
These changes are necessary to enable testing of dynamic credentials when creating storage buckets.
 2024-06-07 12:05:11 -04:00
Michael Li 3da1615ddb test(e2e): Add check for ldap account attribute mapping (#4867) 2024-06-04 14:24:15 -04:00
Michael Li 61db074b1e chore(e2e): Clean up UI docker scenario (#4843) 
* chore(e2e): Remove unused worker token

* chore(e2e): Remove unused variable
 2024-06-04 13:03:41 -04:00
Michael Li 2467f9107a test(db): Fix skip command (#4860) 2024-06-03 10:02:32 -04:00
Michael Li e18e3ab783 test: Fix tests due to time (#4855) 
* test(billing): Calculate time deltas from a fixed time

Some time calculations are impacted when using the current day vs. the start of the month.

* test(db): Conditionally skip tests at end of month

Certain tests fail when run on the last day of the month because of edge cases in the setup of test data (for example, if today is May 31 and NZ time is June 1). This adds conditional logic to skip those tests when run on the last day of a month.

* CR: typo
 2024-05-31 17:08:57 -04:00
Michael Li 8dd419ab85 chore(e2e): Add minio variables to UI test module (#4840) 2024-05-29 17:11:37 -04:00
Michael Li c986d20cef test(e2e): Rename daemon command to cache (#4833) 2024-05-29 12:02:26 -04:00
Michael Li d519759c53 chore(e2e): Add aws region to UI tests (#4831) 2024-05-28 17:32:31 -04:00
Michael Li a22f031ce0 chore(e2e): Use region specified in variable (#4814) 2024-05-28 09:46:01 -04:00
Michael Li 69dfeacc55 chore(e2e): Remove call to tparse (#4817) 2024-05-23 09:54:27 -04:00
Michael Li 6eded679bc chore: Update to use Node20 version of Actions (#4787) 
* chore: Update to use Node20 version of Actions

* CR: Add additional triggers to milestone checker

* CR: Remove use of third-party action
 2024-05-17 13:01:54 -04:00
Michael Li 7954ad42fd chore(bats): Fix unzip error (#4806) 
The workflow started breaking when there was a competing file in /usr/local/bin/LICENSE.txt (from a packer install). The added flag forces unzip to overwrite any files.
 2024-05-17 09:47:37 -04:00
Michael Li afd8443cc5 docs: Fix broken link (#4766) 2024-05-03 11:18:44 -04:00
Michael Li 3733af2163 test(e2e): Add support for credential rotation in minio buckets (#4744) 
* test(e2e): Update minio module to add permissions for credential rotation

* test(e2e): Add minio user id to test suite
 2024-04-29 14:57:48 -04:00
Michael Li 67e6664de9 test(e2e): Close http requests in rate limit test (#4733) 
* test(e2e): Close http requests

* test(e2e): Address timing flakiness
 2024-04-26 15:36:11 -04:00
Michael Li 1416ac5e07 test(e2e): Add module for iam user with credential rotation support (#4718) 2024-04-25 11:59:45 -04:00
Michael Li 400e36ee21 test(e2e): Update postgres version (#4701) 
15.3 is no longer available
 2024-04-23 12:16:45 -04:00
Michael Li d72556fb97 chore: Update docker dependency (#4686) 
GHSA-x84c-p2g9-rqv9
 2024-04-19 11:37:31 -04:00
Michael Li 846ecedef6 test(e2e): Address flake in rate limit test (#4670) 
* test(e2e): Fix warning

* test(e2e): Fix flake
 2024-04-19 11:12:19 -04:00
Michael LiandElim Tsiagbey ca1196cdc9 test(worker): Address flake in TestMonitorUpstreamConnectionState (#4668) 
* test(worker): Address flake

* test(worker): refactor `TestMonitorUpstreamConnectionState` tests

* test(worker): remove assertion for grpc shutdown state

---------

Co-authored-by: Elim Tsiagbey <elim.tsiagbey@hashicorp.com>
 2024-04-19 10:38:03 -04:00
Michael Li d0997661d0 chore(e2e): Increase timeout when setting up container (#4661) 
When setting up the docker container in this module, there's a an additional script that runs (00-trust-user-ca) that takes some time to execute. This can occasionally take longer than the current 20s timeout, so we are bumping it here
 2024-04-19 09:46:56 -04:00
Michael Li 69d686bc9a test(e2e): Set a minio alias in the container (#4646) 
This alias will be used by commands in a test when using the minio client. An alias needs to be defined in order for commands like retrieving an object from the bucket to work successfully.
 2024-04-16 15:22:05 -04:00
Michael Li e8e19df872 chore: Update net dependency (#4595) 
Addresses GO-2024-2687/CVE-2023-45288
 2024-04-04 16:03:38 -04:00
Michael Li d74d667716 test(credential): Potential fix for race condition (#4587) 
* test(credential): Potential fix for race condition

* test: Additional instances
 2024-04-04 15:24:19 -04:00
Michael LiandDan Heath 82a6ac057d doc: Refactor "install boundary" section (#4557) 
* doc: Refactor "install boundary" section

* CR: Use shell-session over bash

* docs: Update redirects and TOC

* CR: Word style/standards

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* CR: Add second level heading

* CR: Fix more shell-sessions

* CR: Fix link

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-04-04 13:15:31 -04:00
Michael Li 51d33f3393 refact(e2e): Add err to helper methods (#4581) 
* refact(e2e): Add err to CreateOrgApi

* refact(e2e): Add err to CreateProjectApi

* refact(e2e): Add err to CreateOrgCli

* refact(e2e): Add err to CreateProjectCli

* refact(e2e): Add err to CreateHostCatalogApi

* refact(e2e): Add err to CreateHostSetApi

* refact(e2e): Add err to CreateHostApi

* refact(e2e): Add err to AddHostToHostSetApi

* refact(e2e): Add err to CreateHostCatalogCli

* refact(e2e): Add err to CreateHostSetCli

* refact(e2e): Add err to CreateHostCli

* refact(e2e): Add err to AddHostToHostSetCli

* refact(e2e): Add err to CreateAwsHostCatalogCli

* refact(e2e): Add err to CreateAwsHostSetCli

* refact(e2e): Add err to CreateTargetApi

* refact(e2e): Add err to AddHostSourceToTargetApi

* refact(e2e): Add err to CreateTargetCli

* refact(e2e): Add err to AddHostSourceToTargetCli

* refact(e2e): Add err to SetHostSourceToTargetCli

* refact(e2e): Add err to RemoveHostSourceFromTargetCli

* refact(e2e): Add err to AddBrokeredCredentialSourceToTargetCli

* refact(e2e): Add err to RemoveBrokeredCredentialSourceFromTargetCli

* refact(e2e): Add err to CreateUserApi

* refact(e2e): Add err to CreateUserCli

* refact(e2e): Add err to SetAccountToUserCli

* refact(e2e): Add err to CreateRoleApi

* refact(e2e): Add err to CreateRoleCli

* refact(e2e): Add err to AddGrantToRoleCli

* refact(e2e): Add err to AddPrincipalToRoleCli

* refact(e2e): Add err to CreateManagedGroupApi

* refact(e2e): Add err to CreateGroupApi

* refact(e2e): Add err to CreateGroupCli

* refact(e2e): Add err to AddUserToGroup

* refact(e2e): Add err to CreateCredentialStoreStaticApi

* refact(e2e): Add err to CreateCredentialStoreVaultApi

* refact(e2e): Add err to CreateCredentialStoreVaultCli

* refact(e2e): Add err to CreateCredentialStoreStaticCli

* refact(e2e): Add err to CreateVaultGenericCredentialLibraryCli

* refact(e2e): Add err to CreateStaticCredentialPrivateKeyCli

* refact(e2e): Add err to CreateStaticCredentialPasswordCli

* refact(e2e): Add err to CreateStaticCredentialJsonCli

* refact(e2e): Add err to CreateStaticCredentialPasswordApi

* refact(e2e): Add err to CreateAuthMethodApi

* refact(e2e): Add err to CreateOidcAuthMethodApi

* refact(e2e): Add err to CreateAccountApi

* refact(e2e): Add err to CreateAccountCli
 2024-04-03 09:44:44 -04:00
Michael Li d4e314cde8 test(e2e): Remove leftover debug line (#4588) 2024-04-02 12:02:21 -04:00
Michael Li 1778ab93bc chore: Update docker dep (#4583) 
Vulnerabilities
- GHSA-mq39-4gv4-mvpx
- GO-2024-2659
 2024-04-01 16:12:15 -04:00
Michael Li cb28fe4296 test(e2e): Add module for minio docker container (#4578) 2024-03-29 10:27:39 -04:00
Michael Li 8533433868 refact(e2e): Consolidate tests (#4569) 
* refact(e2e): Move -remote-command check into ssh test

* refact(e2e): Remove duplicate test

* fix(e2e): Modify unnecessary use of Logf

* fix(e2e): Add error checks

* fix(e2e): Remove unused parameter
 2024-03-27 09:49:06 -04:00
Michael Li e0305f11aa test(e2e): Add check for boundary search -force-refresh (#4566) 2024-03-26 12:56:17 -04:00
Michael Li af9db26b52 chore: Add docs team as codeowners for website (#4545) 2024-03-20 13:53:14 -04:00
Michael Li b251e7a8b9 chore(e2e): Add session recording resources for UI tests (#4498) 2024-03-14 10:09:51 -04:00
Michael Li 8b8be0c1a7 chore: Update go version to 1.22.1 (#4500) 
Addresses CVE-2024-24783, CVE-2023-45290, CVE-2023-45289, CVE-2024-24785, CVE-2024-24784
 2024-03-08 12:49:48 -05:00
Michael Li 4158993a4d chore(e2e): Bump timeout to 25m (#4489) 
There have been a few instances where the e2e tests runtime hit this limit. For now, we will update the timeout to make things pass more regularly. There will also be some additional activity to reorganize the e2e tests as runtime has become too long.
 2024-03-06 17:23:31 -05:00
Michael Li 9eb608feeb chore: Update protobuf to 1.33 (#4485) 
Release: https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0
CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-24786
 2024-03-06 14:53:06 -05:00
Michael Li 18aa96fc61 chore: This bumps the UI commit to the version released in 0.15.1 (#4476) 2024-03-05 10:33:17 -05:00
Michael Li ad6893e039 test(e2e): Provide public ca key to UI tests (#4478) 2024-03-04 15:24:39 -05:00
Michael Li 72d4f1142b test(e2e): Use vault server instead of vault dev (#4453) 2024-03-04 14:30:00 -05:00
Michael Li 2e55ae72ba test(e2e): Add test for alias (#4436) 2024-02-29 15:52:27 -08:00
Michael Li 2111e1a5cc doc(kms): Fix typo (#4449) 2024-02-23 16:31:36 -05:00
Michael Li fee2b99ade refact(e2e): Create vault-generic credential library helper method (#4437) 
* refact(e2e): Create vault-generic credential library helper method

* fixup! refact(e2e): Create vault-generic credential library helper method
 2024-02-23 15:46:11 -05:00
Michael Li 694db71004 fix(e2e): Add extra buffer in -session-max-seconds test again (#4440) 2024-02-23 10:33:43 -05:00
Michael Li 4d344edecc test(e2e): Add extra buffer in -session-max-seconds test (#4428) 
This test would sometimes fail due to the diff sometimes exceeding `sessionMaxSeconds+1` by less than 1 second.
 2024-02-20 11:09:36 -05:00
Michael Li a48698a315 test(e2e): Add test to check target's -session-max-seconds (#4411) 
* test(e2e): Add test to check target's -session-max-seconds

* test(e2e): Add additional test to check new connections are rejected

* test(e2e): Fix test check
 2024-02-20 09:26:55 -05:00
Michael Li c72c614200 test(e2e): Add test to validate session connection limits (#4395) 
* test(e2e): Move default client port test to its own file

* test(e2e): Add test to validate session connection limits
 2024-02-13 16:28:49 -05:00
Michael Li 61fb079371 test(e2e): Add test for authentication when no keyring is available (#4378) 2024-02-09 13:07:17 -05:00
Michael Li 293952a698 test(e2e): Fix where max_page_size is defined (#4381) 2024-02-08 16:42:07 -05:00
Michael Li 4ebdd9458a test(e2e): Fix error in migration test (#4354) 2024-02-06 11:54:29 -05:00
Michael Li 31ca969f4f Revert "chore(e2e): Remove need for tparse (#4326)" (#4362) 
This reverts commit f18bc5262f.
 2024-02-05 17:48:00 -05:00
Michael Li f18bc5262f chore(e2e): Remove need for tparse (#4326) 2024-02-05 16:14:42 -05:00
Michael Li b3a292d4b9 chore(e2e): Reduce number of instances created (#4298) 2024-02-02 13:53:42 -05:00
Michael Li b14cd1e864 chore: Fix breaking change in labeler when upgrading to v5 (#4350) 2024-02-01 17:16:35 -05:00
Michael Li eb4471c9d0 chore(e2e): Name output based on scenario (#4327) 2024-02-01 10:22:19 -05:00
Michael Li 25dff3322a test: Randomize docker network name (#4306) 
We were observing TestAuthorizeSession_Errors failing in CI due to it complaining that a docker network with name TestAuthorizeSession_Errors already exists. Looking deeper, it turns out that internal/daemon/controller/handlers/targets/tcp and internal/daemon/controller/handlers/targets/ssh both have a test with that same name, and for some reason, they often run on top of each other, causing one of the tests to fail to create a docker network.

To prevent any conflicts with tests that have the same name, this commit randomizes the network name that is created.
 2024-01-29 09:49:57 -05:00
Michael Li 95ad3eab48 docs: Update resource table format (#3432) 2024-01-26 14:32:01 -05:00
Michael Li 629ed661b3 chore(e2e): Fix iam user creation (#4287) 2024-01-25 11:55:14 -05:00
Michael Li 3a0c1b8e9f test(e2e): Add test for search (#4196) 
* test(e2e): Add test for search

* CR

* CR
 2024-01-05 07:43:21 -08:00
Michael Li d9cf0be0bc test(e2e): Add test to paginate users (#4195) 
* test(e2e): Use API call to decrease runtime

* test(e2e): Add test to paginate users
 2024-01-05 07:43:21 -08:00
Michael Li 69a6f664de test(e2e): Add test for paginating host sets (#4190) 2024-01-05 07:43:21 -08:00
Michael Li 3bf925ca32 test(e2e): Decrease rate limit in config (#4183) 2024-01-05 07:43:21 -08:00
Michael Li 3e4feac261 test(e2e): Add test for pagination of hosts 2024-01-05 07:43:21 -08:00
Michael Li ec8902ec68 test(e2e): Add docker-based infra scenario for Admin UI tests (#4166) 
* chore(e2e): Add docker-based scenario for Admin UI tests

* test(e2e): Trim space in worker_led_token output
 2023-12-22 10:10:29 -05:00
Michael Li 0adfe2d5a3 test(e2e): Fix syntax (#4164) 2023-12-15 15:15:03 -05:00
Michael Li b696f1653d test(e2e): Add worker ip to aws tests (#4153) 2023-12-14 13:48:29 -05:00
Michael Li f36b3d4723 chore(e2e): Avoid error in action if no log files are found (#4152) 2023-12-13 14:16:44 -05:00
Michael Li 600a2dff24 test(e2e): Add rate limit test (#4135) (#4143) 
* test(e2e): Add rate limit test (#4135)

(cherry picked from commit 9bf350d622a14ea39feaca29861c738a5deff9bb)

* test(e2e): Modify rate limit test due to timing issues (#4145)

The rate limit test was running into failures due to some hard-coded assumptions (waiting for a command to last longer than 3 seconds to determine if the CLI auto-retried). This change makes it more resilient.

(cherry picked from commit 3535f15922c37fda5457f02cf8ae894203359042)
 2023-12-13 10:17:04 -05:00
Michael Li 11d4211f30 Revert "chore(deps): bump actions/setup-python from 4.7.1 to 4.8.0 (#4098)" (#4101) 
This reverts commit 17e9edc07f.
 2023-12-05 09:58:12 -05:00
Michael Li 3cae4933c0 test(e2e): Update migration test with additional resources (#4069) 
* test(e2e): Add descriptions to resources

* test(e2e): Add more resources to migration test
 2023-11-30 09:38:07 -05:00
Michael Li 093f889333 test(e2e): Add test for LDAP (#4061) 
* test(e2e): Add test for LDAP

This adds the infrastructure and a test for an LDAP workflow

* test(e2e): Refactor test packages

This reduces the number of scenarios needed

* CR

* fixup! test(e2e): Add test for LDAP
 2023-11-28 16:25:26 -05:00
Michael Li 6ef015e1d1 test(e2e): Use docker mirror when pulling image (#4045) 2023-11-15 14:58:40 -05:00
Michael Li 36d0e5ede0 test(e2e): Add test that connects to target using go ssh library (#4040) 
* test(e2e): Add test that connects to target using golang ssh library

* fixup! test(e2e): Add test that connects to target using golang ssh library
 2023-11-14 14:54:48 -05:00
Michael Li 4f262e7de5 test(bats): Use correct attribute for the test (#4033) 2023-11-10 16:45:19 -05:00
Michael Li b0127116f3 test(e2e): Add test for worker-led worker registration (#4014) 
* refact(e2e): Create module to run boundary commands

* test(e2e): Add worker-led registration test
 2023-11-09 09:55:47 -05:00
Michael Li 8e83cc87d3 test(e2e): Add some other commands to execute over localhost (#4016) 2023-11-07 16:59:52 -05:00
Michael Li 444def7971 chore(e2e): Fix workflow trigger (#4013) 2023-11-07 10:51:16 -05:00
Michael Li 25961d98b1 chore(e2e): Continue if log renaming fails (#4005) 2023-11-06 13:21:53 -05:00
Michael Li 466b5e20ea test(e2e): Add support for -additional-valid-principals test (#3966) 
* test(e2e): Remove unnecessary error checks

* test(e2e): Install docker cli in test runner
 2023-10-31 17:06:14 -04:00
Michael Li f0a4bce17c test(e2e): Add test for controller-led worker registration (#3882) 
* test(e2e): Add test for controller led worker registration

* chore(e2e): Rename log files to ensure uniqueness

This updates the log files to be based on the scenario name instead of just the test package in case some scenarios run the same test package
 2023-10-30 09:48:08 -04:00
Michael Li 752f20fa27 test(e2e): Wait until target ec2 instance is ready to be used (#3910) 2023-10-24 18:20:02 -04:00
Michael Li 82b3f202c0 chore(e2e): Add GetUserPolicy permission to service user (#3877) 2023-10-20 15:12:01 -04:00
Michael Li 29a4d8c4d9 test(e2e): Change deadlock timeout to default (#3874) 
This was occasionally causing some flaky behavior in tests. Removing this setting to use the default timeout value.
 2023-10-20 14:03:11 -04:00
Michael Li e089aa219d test(bats): Add list tests for other resource types (#3869) 2023-10-20 12:09:32 -04:00
Michael Li cad044926f chore(e2e): Add always condition (#3866) 2023-10-19 11:09:09 -04:00
Michael Li 7d581abac7 test(e2e): Add check for vault worker filters (#3859) 2023-10-19 09:08:10 -04:00
Michael Li 7f596bafa9 test(bats): Fix grant due to deprecation (#3853) 2023-10-17 13:42:11 -04:00
Michael Li 609357c483 test(e2e): Add test for creating an auth method (#3846) 
* test(e2e): Add test for creating an auth method

* CR: Add an additional check for user auto-creation
 2023-10-17 09:41:42 -04:00
Michael Li 578d87081a test(e2e): Add test with scp operations (#3812) 
* chore(e2e): Allow ssh to targets to assist with debugging

* test(e2e): Add test with scp operations

* CR: Use io.CopyN to optimize memory allocation

This mitigates the need to allocate a 256K string
 2023-10-10 14:55:51 -04:00
Michael Li 43ae62506f Revert "chore(e2e): Set terraform version to 1.5 until issue is addressed (#3797)" (#3815) 
This reverts commit 031e143dfb.
 2023-10-10 12:07:06 -04:00
Michael Li 9c9e033271 chore(enos): Move terraform-enos-aws-boundary to boundary (#3773) 
* chore(enos): Move `terraform-enos-aws-boundary` to `boundary`

* chore(enos): Rename module tag

* chore(enos): Refactor module names

* fixup! chore(enos): Move `terraform-enos-aws-boundary` to `boundary`

* fixup! chore(enos): Move `terraform-enos-aws-boundary` to `boundary`

* chore(enos): Refactored hard-coded module tag
 2023-10-10 09:28:04 -04:00