CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
516 Commits 7 Branches 2 Tags
50af2cebb31dceef74b5ddf002abb37106ef727b
Commit Graph
113 Commits
Author SHA1 Message Date
Jeff Mitchell ba216f894b Update docs and default address 2020-09-25 19:38:53 -04:00
Jeff Mitchell 220ca253be Add boundary config get-token (#455) 2020-09-25 17:06:53 -04:00
Todd Knight fd0da998e8 SDK error revamp (#432) 
SDK methods now return 1 error.  To differentiate between Client errors and Server errors I've also implemented the AsServerError function which returns an *api.Error if it is an error originating from the remote server or nil otherwise.
 2020-09-24 14:34:58 -07:00
Kent 'picat' Gruber 9e06d7eec2 Fix unused error in *api/client.Client.Do during redirect (#430) 
Previously the error declared during the *retryablehttp.Client.Do was being "overshadowed" by the error declared when a redirect was missing the result location.

By declaring the loc outside the call assignment, we can properly "reuse" the error and resulting check after a redirect.
 2020-09-24 14:13:25 -04:00
Jeff Mitchell e86c11db62 Add session lifecycle info to controller's INFO log. (#431) 
This required some plumbing, but nothing major.
 2020-09-24 14:12:34 -04:00
Todd Knight 2f8d7f0a32 API Errors: Hide and log internal errors (#411) 2020-09-23 08:10:27 -07:00
Todd Knight 21f5cc274f Don't return nil, nil for API service methods. Add tests for updating w/ wrong version. (#396) 2020-09-21 15:09:30 -04:00
Jeff Mitchell d3606e14b6 Set wrapper on client, not token, so it doesn't fail KMS recovery on update calls 2020-09-21 12:20:44 -04:00
Jeff Mitchell 9b2646eaf9 Fix retry behavior with KMS recovery and misleading error message (#391) 2020-09-21 11:05:44 -04:00
Jeff Mitchell 5370111336 Omit private key from session output 2020-09-20 21:23:38 -04:00
Todd Knight e937b0ea27 Sessions Read/List/Cancel API and SDK (#369) 2020-09-20 20:22:57 -04:00
Jeff Mitchell edffc7863d Change connection limit to -1 for unlimited so it works with TF (#383) 
* Migrate connection limit unlimited value to -1

* Fix authorization check
 2020-09-20 15:53:49 -04:00
Jeff Mitchell 5bf555cca2 Remove connection idle timeout seconds for now (#379) 2020-09-19 14:01:49 -04:00
Jeff Mitchell 0a3f9b8357 Rename connection idle timeout duration -> seconds and sessions max duration -> seconds (#376) 2020-09-19 11:32:38 -04:00
Jeff MitchellandJim Lambert 62baef1b7e Add multi connection parameters through targets and into session creation (#375) 
* Update protos and gen

* Add new values to targets CLI command

* Lots more plumbing of new parameters through everything

* allow fields to be set to zero value.

* Disallow set but empty name/description strings in create/update verifiers

Co-authored-by: Jim Lambert <jlambert@hashicorp.com>
 2020-09-19 10:31:49 -04:00
Jeff Mitchell 07a7e9750a Tie together the database-driven session handling with the worker and add relevant CLI comands (#370) 2020-09-19 00:18:17 -04:00
Jeff Mitchell a660e56ee7 Fix whitespace typo in generated API 2020-09-16 10:49:38 -04:00
Todd Knight f96fa25157 Add Auth Account id to Auth Token response (#363) 2020-09-15 14:33:38 -07:00
Jeff Mitchell f4ad22b247 Move default port to a TCP target attribute (#361) 2020-09-15 15:20:49 -04:00
Jeff Mitchell 77bcee1861 Use json.Number when unmarshaling into the response map 2020-09-15 02:20:24 -04:00
Jeff Mitchell a00ee7a948 Add Result types to Go SDK and properly populate body/map fields (#358) 2020-09-15 01:08:21 -04:00
Jeff Mitchell c1171e0cc6 Update API templates using list params (#352) 2020-09-11 16:49:31 -04:00
Jeff Mitchell b7524f8cfb Decode to both the struct and a map and add access (#349) 
This will allow for better TF integration.
 2020-09-11 00:51:55 -04:00
Jeff Mitchell 535bca5a7a Make Authenticate less misleading 
Because clients clone in the API now, setting the token on the
authtokens client may mislead the user into thinking it's setting it on
the base client. Remove that set call.
 2020-09-09 10:33:23 -04:00
Jeff Mitchell f8237fb945 Move some packages into SDK, out of internal 2020-09-09 01:24:25 -04:00
Jeff Mitchell 36f975a952 Add some recovery KMS functions needed for external clients (#339) 2020-09-09 01:15:29 -04:00
Jeff Mitchell f94f21fd97 Update API codes (#336) 2020-09-08 23:57:26 -04:00
Todd Knight 99d5456d7a Scopes type field and types in updates allowed (#335) 2020-09-08 16:04:19 -07:00
Todd Knight c3ecea172d Generate new version of SDK resources and Add Tests (#331) 2020-09-08 16:27:51 -04:00
Todd Knight 1c2c078e0a Adding Authz checks that support new pathing (#328) 2020-09-04 14:48:11 -07:00
Todd Knight 37e56ab46b Pathing updated to support new and old styles (#323) 2020-09-02 19:43:41 -07:00
Jeff Mitchell 2a98432143 Fix test build 2020-09-02 21:40:34 -04:00
Jeff Mitchell cad7bb3ead Don't use 2 suffix when only new style is enabled (#325) 2020-09-02 21:23:43 -04:00
Todd Knight 5553fd989f Host Set and Target SDK Generation using new Pathing (#320) 
* Adding new style template starts.

* Host-set crud changes generated and tested.

* Add templates for every resource with the new pathing.  Only host-sets has testing or the backed pathing.

* Only generate new style API if requested in the input.  Have disabling old be opt in.
 2020-09-02 12:31:30 -07:00
Todd Knight 544e78b593 Target Handler and SDK CRUDL & add|set|remove-host-sets methods. (#310) 2020-09-01 15:05:46 -07:00
Jeff Mitchell c4522aa813 Update host sets and auth system to new paradigm (#319) 2020-09-01 12:31:54 -04:00
Jeff Mitchell 17ecb6f2ce Separate accounts/host catalogs/host sets into their own packages (#311) 2020-08-27 20:43:33 -04:00
Jeff Mitchell 490be8a7e4 Add ability to skip role creation on scope create (#308) 
* Initial work on scope creation skipping

* Fix things
 2020-08-26 23:27:25 -04:00
Todd Knight e4da5e9ab5 add|set|remove-hosts for host-sets SDK and API (#304) 
* Adding ability to add host set members.

* Adding SDK and API for add|set|remove hosts.
 2020-08-26 11:04:26 -07:00
Jeff Mitchell 8f579c75c3 paum -> ampw (#303) 2020-08-25 00:21:08 -04:00
Todd Knight c4d3414016 Add Host Set CUDLR handler and SDK (#290) 2020-08-21 10:57:30 -07:00
Jeff Mitchell 627a353ccb Don't return an empty resource if there was an apiErr (#294) 2020-08-20 17:31:38 -04:00
Todd Knight d5678c4f80 Handler for Host CRUDL actions (#287) 2020-08-20 08:20:26 -07:00
Todd Knight 7474e956dd List Catalogs for Repo and API Handler (#288) 2020-08-19 21:49:52 -07:00
Jim 9570897032 basic keys mgmt repo (#264) 2020-08-19 16:47:18 -04:00
Todd Knight eaae887bbe Don't require type for children of subtyped resources. (#285) 2020-08-19 10:51:15 -07:00
Todd Knight d86e58476f Version can be passed through request body (#281) 
* Scopes inline version into update request body.

* Users inline version into update request body.

* Group inline version into update and add|set|remove member request body.

* Role inline version into update and add|set|remove grant|principal request body.

* Auth method inline version into update request body.

* Auth Account inline version into update request body.

* host catalog version is inlined for update.

* Gen after merge.

* Submitting template changes for version handling.
 2020-08-18 17:38:38 -07:00
Jeff Mitchell e20c150617 Fix some tests broken by merge 2020-08-18 19:16:52 -04:00
Jeff Mitchell adfc5681be Auth methods CLI (#277) 2020-08-18 17:46:34 -04:00
Jeff Mitchell 282177afc2 Remove the default org (#270) 2020-08-17 15:38:41 -04:00