CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,928 Commits 7 Branches 2 Tags
69512baa8b80fe4e923292c1e9faaf40b98ca1de
Commit Graph
2388 Commits
Author SHA1 Message Date
Irena Rindos da30653486 commands: fix plurals (#4369) 
* commands: fix plurals
 2024-02-07 12:45:28 -05:00
Jeff Mitchell c4effc078b Remove some no-longer-needed x/crypto refs (#4371) 2024-02-06 16:17:32 -05:00
Jeff Mitchell 483f13226e Adjust tofu token check 2024-02-06 15:04:02 -05:00
ToddandJim eb6d0dbd6a Use the intercepted token always. If the keyring matches, use it from there (#4355) 
* Use the intercepted token if present, use it through the keyring if keyring contains it

* fixup! Use the intercepted token if present, use it through the keyring if keyring contains it

* Apply suggestions from code review

Co-authored-by: Jim <jlambert@hashicorp.com>

---------

Co-authored-by: Jim <jlambert@hashicorp.com>
 2024-02-06 11:46:28 -08:00
Yong Zhang e34d3bb415 Fix example scope id for role grants (#4348) 
* Rename example scope id

* revert newline at eof
 2024-02-02 17:35:05 -08:00
Todd acabfd7f2c boundary daemon add-token to return returns 403 Forbidden when Boundary returns the same (#4345) 2024-02-02 12:24:14 -08:00
Johan Brandhorst-Satzkorn d9c6de4e8b deps: update runc dependency (#4349) 
Fixes GHSA-xr7r-f8xq-vfvv
 2024-02-01 13:19:24 -08:00
Todd d500f24014 fix: boundary authenticate returns an API error code when auth fails (#4342) 2024-01-31 15:11:28 -08:00
ToddandJohan Brandhorst-Satzkorn d6c9db968a Fix calculating uptime after system sleep (#4332) 
* Fix calculating uptime after system sleep

* Update internal/clientcache/internal/daemon/status_handler.go

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-01-31 12:31:43 -08:00
Jeff Mitchell 18f863514e Finish sqltests for multi grant scopes (#4320) 2024-01-30 11:04:05 -05:00
Devon Anderson dbf19593ac Update Boundary to latest UI (#4322) 2024-01-30 07:49:12 -08:00
Todd 7e7e6369ae pass on the max search refresh timeout to server (#4321) 2024-01-29 15:38:45 -08:00
Jeff Mitchell 025fce6f95 Change error message and add beginnings of sql tests (#4319) 2024-01-29 16:02:16 -05:00
Devon Anderson 36c57cb918 Update Boundary to latest UI (#4318) 2024-01-29 12:26:42 -08:00
Todd 0705ed4e68 Do not try to autodiscover tokens when doing token lookups using provided tokens. (#4316) 2024-01-29 10:23:23 -08:00
Michael Li 25dff3322a test: Randomize docker network name (#4306) 
We were observing TestAuthorizeSession_Errors failing in CI due to it complaining that a docker network with name TestAuthorizeSession_Errors already exists. Looking deeper, it turns out that internal/daemon/controller/handlers/targets/tcp and internal/daemon/controller/handlers/targets/ssh both have a test with that same name, and for some reason, they often run on top of each other, causing one of the tests to fail to create a docker network.

To prevent any conflicts with tests that have the same name, this commit randomizes the network name that is created.
 2024-01-29 09:49:57 -05:00
ToddJeff MitchellJohan Brandhorst-Satzkorn
 		dde833e8cf Decrease number of flags shown for daemon/search (#4312) 
* Decrease number of flags shown for daemon/search
* Update changelog
---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-01-26 15:56:41 -08:00
Devon Anderson e85331448d Update Boundary to latest UI (#4313) 2024-01-26 18:53:55 -05:00
Jeff Mitchell 8e71caa2e3 Address some review feedback 2024-01-26 18:24:27 -05:00
Jeff Mitchell 296639e484 Add new GrantsForUser test (#4289) 
* Add new GrantsForUser test

This exercises a wide array of granting possibilities and ensures that
we see all of the desired grants and none that we don't expect.

* Address review feedback
 2024-01-26 11:59:40 -08:00
Jeff Mitchell 84c0e94097 Add a bit more useful worker auth output (#4308) 2024-01-26 14:54:00 -05:00
Michael Li 95ad3eab48 docs: Update resource table format (#3432) 2024-01-26 14:32:01 -05:00
Devon Anderson 6f1a7c1e41 Update Boundary to latest UI (#4307) 2024-01-26 13:52:36 -05:00
Todd b734c43cda return error when creating table fails (#4305) 2024-01-26 10:46:29 -08:00
Jim a61993abd7 fix (auth): event verify error (#4302) 2024-01-26 13:02:15 -05:00
Johan Brandhorst-Satzkorn 72c87e81cf internal/authtoken: use view for listing (#4284) 
Use the existing auth token account view for listing
instead of a custom query. Testing shows that the
performance difference is negligible, and this is simpler.
 2024-01-25 13:48:43 -08:00
Jeff Mitchell e91c4cbfe2 Remove support for 'id' field in grants (#4290) 2024-01-25 15:58:55 -05:00
Louis Ruch 7921ce22fd test(grant): Use ID to validate version check (#4274) 
* test(grant): Use ID to validate version check

* Update docs from id to ids

* Remove 'id' in 0.16.0
 2024-01-25 13:27:22 -05:00
Louis Ruch fe6126438e chore: Fix typos (#4285) 2024-01-25 09:43:40 -08:00
dani 6a55245394 fix(cli): StoragePolicyId indent on list scopes (#4279) 2024-01-25 12:27:36 -05:00
Johan Brandhorst-Satzkorn 133e928c6d internal/db/schema: update recording indexes (#4278) 
The new index includes the new delete_time and
delete_after columns, which are used in the list query.
 2024-01-25 08:56:15 -08:00
Todd e32a25f2a4 No longer enforce version matching between daemon and cli (#4271) 
* No longer check version matching between daemon and cli

* Add Log Service Handler and report if the daemon is running in background mode
 2024-01-24 16:26:15 -08:00
Jeff Mitchell 03825a5b8f Address some extra review feedback on multi scope grants (#4272) 2024-01-24 15:43:49 -05:00
Devon Anderson 7707524ebf Update Boundary to latest UI (#4270) 2024-01-23 12:56:14 -08:00
Jeff MitchellTimothy MessierTodd
 		f5dd457b34 Multiple grant scope IDs (#4251) 
Co-authored-by: Timothy Messier <tim.messier@gmail.com>
Co-authored-by: Todd <github@quaddi.com>
 2024-01-23 14:33:09 -05:00
Todd d0eb670dcf s/Full Fetch/Recheck Support/ in logs and expose filter query param to search command (#4269) 
* s/Full Fetch/Recheck Support/  and expose filter query param to command
 2024-01-22 17:39:52 -08:00
Todd 0dac9005c1 Boundary auth without a keyring configured behaves like -keyring-type none (#4268) 2024-01-22 16:40:23 -08:00
Louis Ruch fa69ddcb8a fix(db): Set max storage policy days (#4267) 2024-01-22 16:00:17 -08:00
Jim 6a37c93d77 fix: properly handle rows.Err() (#4261) 
* fix (auth): properly handle rows.Err()

* fix (auth/ldap): properly handle rows.Err()

* fix (auth/oidc): properly handle rows.Err()

* fix (auth/password): properly handle rows.Err()

* fix (authtoken): properly handle rows.Err()

* fix (credential): properly handle rows.Err()

* fix (credential/static): properly handle rows.Err()

* fix (credential/vault): properly handle rows.Err()

* fix (db): properly handle rows.Err()

* fix (db/schema): properly handle rows.Err()

* fix (db/migrations): properly handle rows.Err()

* fix (host): properly handle rows.Err()

* fix (host/plugin): properly handle rows.Err()

* fix (host/static): properly handle rows.Err()

* fix (iam): properly handle rows.Err()

* fix (kms): properly handle rows.Err()

* fix (oplog): properly handle rows.Err()

* fix (pagination/purge): properly handle rows.Err()

* fix (plugin): properly handle rows.Err()

* fix (job/scheduler): properly handle rows.Err()

* fix (server): properly handle rows.Err()

* fix (session): properly handle rows.Err()

* fix (target): properly handle rows.Err()
 2024-01-22 14:03:40 -05:00
Jim c6714c1302 refact: remove used limit parameter in query funcs (#4263) 2024-01-22 14:02:50 -05:00
Jim 81c217c1b0 refact (authmethods): remove used list auth methods (#4264) 2024-01-22 14:02:24 -05:00
Jeff Mitchell 3414e09cbb Remove announced deprecated code allowing ports in target addrs (#4265) 
We made it an error in the API to do this a while back; this cleans up
the logic to disallow it for existing targets too.
 2024-01-22 13:49:17 -05:00
Todd 30066c06f5 Add log location to the status output (#4260) 2024-01-22 08:42:19 -08:00
Jeff MitchellandJohan Brandhorst-Satzkorn fff5f9506f Migrate proxy logic to the API package (#4216) 
This allows arbitrary programs to have an easy mechanism to make
connections through Boundary using Go. Internal cluster tests and test
helpers have been migrated to use this package, as well as the `connect`
command.

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-01-21 22:34:33 -05:00
David Bond 422bd6c224 Use correct argument name in log line (#4252) 
This commit modifies a log line produced in the WorkerStatusReport function when closing
orphaned connections that appears to incorrectly label a worker identifier as a controller
identifier.

Signed-off-by: David Bond <davidsbond93@gmail.com>
 2024-01-19 15:21:57 -08:00
Devon Anderson 43c37ab1d9 Bump UI commit (#4259) 2024-01-19 15:20:53 -08:00
Johan Brandhorst-Satzkorn b229ece914 internal/db: use more efficient index for host listing (#4256) 
In tests, the index including the catalog_id performs significantly
better.
 2024-01-19 10:59:18 -08:00
Louis Ruch 22fcf8a2ba Projects do not have perm to attach/detach policy 2024-01-19 09:39:13 -08:00
Louis Ruch d620dcbd4f feat(db): Update storage policy override default to false 2024-01-19 09:39:10 -08:00
Todd b8f4e16ecf Fix flaky log rotation test (#4257) 
* Fix flaky log rotation test
 2024-01-18 14:44:53 -08:00