CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,674 Commits 7 Branches 2 Tags
612e60f6e8d7f9a635e62c9c6260205ecf0f2872
Commit Graph
154 Commits
Author SHA1 Message Date
hashicc 67207899cb Migrate ui-related scripts to use pnpm instead of yarn (#5815) 2025-06-16 13:27:38 -07:00
Michael Li f9c1053659 chore(e2e): Update service user permissions for windows testing (#5827) 
* chore(e2e): Add service user permission for RDP testing

* chore(e2e): Remove extraneous resource

This resource is managed outside of this module. This would raise conflicts on each apply due to one already existing.
 2025-06-10 16:41:41 -04:00
Michael Li 284cb5e7aa chore(e2e): Set auth_storage_path to a non-temp directory (#5786) 2025-06-02 09:27:58 -04:00
Hugo 08bd39f9fa fix(enos): Remove brackets from standalone IPv6 addresses (#5739) 2025-05-14 18:00:34 +01:00
dillanb-hashi 1e8c345126 chore(e2e): Added support for boundary license to be an env for enos (#5704) 
* chore(e2e): Added support for boundary license to be an env for enos
 2025-05-07 12:47:09 -07:00
Michael Li 90b7d2c0d6 chore(e2e): Add encryption to target ec2 instance (#5672) 2025-04-28 08:29:22 -04:00
Michael Li 14e0b00cce chore(e2e): Update to use ubuntu 22 (#5664) 2025-04-18 10:38:31 -04:00
Michael Li 4304ec0c1c chore(e2e): Address issue with deleting roles/policies (#5646) 
On destroy, there was an issue with deleting IAM roles due to the following error: DeleteConflict: Cannot delete entity, must detach all policies first

This commit adds an option to force the policy detachment, preventing the error.
 2025-04-15 11:31:12 -04:00
Ryan Derr 6d8615045e Lowercase GH Handle When Defining User Label For GCP (#5605) 2025-03-17 13:25:55 -05:00
Michael Li 132a52c5d9 chore(e2e): Set up ec2 instance storage with encryption (#5580) 2025-03-06 09:55:18 -05:00
Michael Li 14808d197f test(e2e): Differentiate between public and private vault addresses (#5553) 2025-02-20 10:27:43 -05:00
Michael Li 26608ede70 chore: Add note for modifying /etc/hosts (#5499) 2025-01-31 09:28:38 -05:00
Michael Li 80c9f07a48 chore(hcp): Update use of module (#5469) 2025-01-24 10:04:45 -05:00
Michael Li 272c7cf4d3 chore: Add permissions to CI user (#5446) 2025-01-22 10:59:10 -05:00
daniDanielle MiuDamian Debkowski
 		dd9c7b9d60 Create IPv6 and dual stack enos tests (#5212) 
Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
 2025-01-21 07:37:04 -08:00
Michael Li 554195f49f test(e2e): Add test for connect http (#5423) 
* test(e2e): Add comment to test

* test(e2e): Add test for connect http

* CR
 2025-01-09 12:43:21 -05:00
Damian Debkowski dc66aa0556 fix(enos): bump default db version to new required minimum (#5426) 2025-01-08 22:42:08 -08:00
Michael Li ab94d5cf59 chore(e2e): Modify bucket policy to 7 days (#5410) 2025-01-06 17:29:03 -05:00
Michael Li 629d7a93ee chore(e2e): Modify gcp label to meet format constraints (#5400) 
GCP label constraints include the following:

The value can only contain lowercase letters, numeric characters, underscores and dashes. The value can be at most 63 characters long. International characters are allowed.
 2025-01-03 10:47:08 -05:00
Michael Li 3d0f667151 chore(e2e): Update vault addresses in AWS scenarios (#5395) 2025-01-02 09:42:23 -05:00
Michael LiandJohan Brandhorst-Satzkorn 6ed077c69e test(e2e): Add test for vault oidc provider (#5384) 
* test(e2e): Simplify vault address in docker network

* test(e2e): Add oidc test using vault

* Update enos/modules/docker_vault/main.tf

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-12-19 17:06:01 -05:00
Elim Tsiagbey a4f2a704fd test(e2e): add GCP dynamic host catalog e2e tests (#5294) 
* test(e2e): add GCP infra resources and tests for enos testing

- add 1 new `gcp_target` module that creates a GCP VM instance with labels for filtering
- add GCP dynamic host catalog e2e tests
 2024-12-17 14:06:14 -05:00
Michael Li e3fb05a519 chore: Update service user with required permission (#5344) 2024-12-10 12:57:02 -05:00
Michael Li 5896a3b44b chore(e2e): Add object expiration policy to s3 bucket (#5298) 
* chore(e2e): Add expiration date to aws bucket objects

* chore(e2e): Add user tag to bucket
 2024-12-05 09:51:53 -05:00
Michael Li ae0ca0c5aa test(e2e): Update module to account for docker image changes (#5295) 
There were some directory changes made to the openssh server docker container. These changes were made to account for that update.
 2024-12-02 16:20:07 -05:00
Michael Li 820eb395a3 chore(e2e): Increase worker instance size (#5251) 
* chore(e2e): Update to use t2.small instances

Using the updated AWS SDK required more memory and was causing workers to crash.

* chore(e2e): Add identifier to aws instance
 2024-11-18 15:02:19 -05:00
Michael Li 45542b3fab chore(e2e): Add required permission to service user (#5231) 2024-11-14 12:26:44 -05:00
daniandDamian Debkowski 62c41191ff [fix] allow IPv6 controllers, workers, and targets (#5221) 
Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
 2024-11-01 13:27:40 -04:00
Michael Li 61f5986f0d chore(enos): Add ipv6 cleanup permission (#5174) 2024-10-17 10:38:24 -04:00
Michael Li 9398248c32 test(e2e): Add user name to AWS resources (#5149) 
This change makes it easier to identify who generated these resources when looking at the AWS console
 2024-10-07 14:12:00 -04:00
Irena Rindos 35679c6a5b chore(config): remove deprecated controllers field (#5125) 
* chore(config): remove deprecated controllers field
 2024-09-23 11:45:34 -04:00
Michael Li 08433affc8 doc(e2e): Update enos readme (#5033) 2024-09-06 14:17:40 -04:00
Michael Li 30b999e261 test(hcp): Define TF module for long-lived resources (#5045) 
* test(hcp): Define TF module for long-lived resources

* CR: Move outputs and variables to its own files
 2024-09-05 12:08:07 -04:00
Michael Li edd7ec62f8 test(e2e): Add support for an hcp worker (#4939) 2024-07-23 10:59:39 -04:00
Michael Li 80abefda1b chore(e2e): Add audit logs to aws boundary instances (#4924) 2024-07-09 11:32:49 -04:00
Michael Li 6e5fd945a3 chore(e2e): Add instance ips to output (#4913) 2024-07-09 10:34:17 -04:00
Michael Li ad4957a3c7 chore(e2e): Clean up comments in enos.vars (#4903) 2024-07-08 10:18:30 -04:00
Michael Li 1909889a6f chore(e2e): Define docker attributes to prevent forced replacement on second launch (#4918) 
* chore(e2e): Define settings to prevent forced replacement

On a second `terraform apply`, there were a few attributes forcing the replacement (i.e. regeneration) of the resource. This commit defines some attributes explicitly to prevent the regeneration from occurring.

* chore(e2e): Add extra timeout for openssh server
 2024-07-08 10:08:34 -04:00
Michael Li 8b45b1c515 chore(e2e): Add boundary to path (#4901) 
This adds the boundary application to the path on the respective ec2 instances.
 2024-06-24 14:01:58 -04:00
Michael Li 333b9e855d chore(e2e): Use public version of enos (#4872) 
* chore(e2e): Use public version of enos

* chore(e2e): Move vault module to this repo

terraform-enos-aws-vault is no longer supported
 2024-06-10 11:13:09 -04:00
Michael Li d408f65519 test(e2e): Add support for dynamic credentials (#4878) 
These changes are necessary to enable testing of dynamic credentials when creating storage buckets.
 2024-06-07 12:05:11 -04:00
Michael Li 3da1615ddb test(e2e): Add check for ldap account attribute mapping (#4867) 2024-06-04 14:24:15 -04:00
Michael Li 61db074b1e chore(e2e): Clean up UI docker scenario (#4843) 
* chore(e2e): Remove unused worker token

* chore(e2e): Remove unused variable
 2024-06-04 13:03:41 -04:00
Rowan Smith d161124ba2 update script to not print null values (#4871) 
Added a `select(.value != "")` entry to the jq statement to avoid it printing null values. This is to make life easier when copy/pasting the output from the script.

This solves the problem of people overwriting existing values they may have set, namely `VAULT_ADDR` and `VAULT_TOKEN`.

before:

```
➜  enos git:(main) ✗ bash scripts/test_e2e_env.sh               
export BOUNDARY_ADDR='http://some-address:9200'
export BOUNDARY_LICENSE=''
export E2E_AWS_ACCESS_KEY_ID=''
export E2E_AWS_BUCKET_NAME=''
export E2E_AWS_HOST_SET_FILTER=''
export E2E_AWS_HOST_SET_FILTER2=''
export E2E_AWS_HOST_SET_IPS='[""]'
export E2E_AWS_HOST_SET_IPS2='[""]'
export E2E_AWS_REGION=''
export E2E_AWS_SECRET_ACCESS_KEY=''
export E2E_MAX_PAGE_SIZE='10'
export E2E_PASSWORD_ADMIN_LOGIN_NAME='admin'
export E2E_PASSWORD_ADMIN_PASSWORD='xdBht'
export E2E_PASSWORD_AUTH_METHOD_ID='ampw_UI0wkZdCfJ'
export E2E_SSH_CA_KEY=''
export E2E_SSH_KEY_PATH='/Users/something.pem'
export E2E_SSH_USER='ubuntu'
export E2E_TARGET_ADDRESS='10.13.1.254'
export E2E_TARGET_PORT='22'
export E2E_TESTS='true'
export E2E_VAULT_ADDR=''
export E2E_WORKER_ADDRESS=''
export E2E_WORKER_TAG_EGRESS=''
export E2E_WORKER_TAG_INGRESS=''
export VAULT_ADDR=''
export VAULT_TOKEN=''
```

after:

```
➜  enos git:(main) ✗ bash scripts/test_e2e_env.sh               
export BOUNDARY_ADDR='http://some-address:9200'
export E2E_AWS_HOST_SET_IPS='[""]'
export E2E_AWS_HOST_SET_IPS2='[""]'
export E2E_MAX_PAGE_SIZE='10'
export E2E_PASSWORD_ADMIN_LOGIN_NAME='admin'
export E2E_PASSWORD_ADMIN_PASSWORD='xdBht'
export E2E_PASSWORD_AUTH_METHOD_ID='ampw_UI0wkZdCfJ'
export E2E_SSH_CA_KEY=''
export E2E_SSH_KEY_PATH='/Users/something.pem'
export E2E_SSH_USER='ubuntu'
export E2E_TARGET_ADDRESS='10.13.1.254'
export E2E_TARGET_PORT='22'
export E2E_TESTS='true'
```
 2024-06-04 09:43:34 -04:00
Michael Li 8dd419ab85 chore(e2e): Add minio variables to UI test module (#4840) 2024-05-29 17:11:37 -04:00
Michael Li d519759c53 chore(e2e): Add aws region to UI tests (#4831) 2024-05-28 17:32:31 -04:00
Michael Li a22f031ce0 chore(e2e): Use region specified in variable (#4814) 2024-05-28 09:46:01 -04:00
Michael Li 69dfeacc55 chore(e2e): Remove call to tparse (#4817) 2024-05-23 09:54:27 -04:00
Michael Li 3733af2163 test(e2e): Add support for credential rotation in minio buckets (#4744) 
* test(e2e): Update minio module to add permissions for credential rotation

* test(e2e): Add minio user id to test suite
 2024-04-29 14:57:48 -04:00
Michael Li 1416ac5e07 test(e2e): Add module for iam user with credential rotation support (#4718) 2024-04-25 11:59:45 -04:00