CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,908 Commits 7 Branches 2 Tags
736cde358491a608597c5f14a8d5529e296d9a8a
Commit Graph
98 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Irena Rindos 736cde3584 Update references to deprecated controllers field (#3212) 2023-05-09 13:51:42 -04:00
Irena RindosandDan Heath b4a8032649 docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour (#3140) 
* docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-04-03 15:58:45 -04:00
Irena Rindos 1821cb4631 Use tofu token from controller (#3064) 
* initial commit
 2023-03-08 13:49:57 -05:00
Irena Rindos ab0a2ad689 Fix hcp billing test (#3045) 
* fix test failure
 2023-03-02 12:02:16 -05:00
Irena Rindos 860af44556 Fix sql tests failing on the first of the month (#3042) 
* initial commit
 2023-03-01 19:14:57 -05:00
Irena Rindos ffd59fa87a chore: update sdk/api deps (#2938) 
* chore: update sdk/api deps
 2023-02-08 15:23:25 -05:00
Irena Rindos 4114b41527 Filter managed workers from egress workers when the host address is unsafe (#2899) 2023-02-03 11:40:41 -05:00
Irena Rindos a030c15403 Support HCPBInt in hcpb_cluster_id field (#2880) 
* initial commit
 2023-02-01 13:20:07 -05:00
Irena Rindos ed9f2b2730 bug(workers): Check initial upstreams for an HCBP environment (#2869) 2023-01-31 15:53:11 -05:00
Irena Rindos 2e3fd041ef Target worker filters migration fix (#2859) 2023-01-31 08:38:32 -05:00
Irena Rindos 03a456c733 update changelog for multi-hop (#2834) 2023-01-24 09:25:33 -05:00
Irena Rindos 00a73f64d9 bug(sessions): Fix authorizeSession race conditions in handleProxy (#2795) 
* initial commit
 2023-01-24 09:24:03 -05:00
Irena Rindos e238893c21 Unset worker auth when Boundary dev uses a kms worker (#2786) 2023-01-13 12:03:05 -05:00
Irena RindosDan HeathXingLu Wang
 		d15bd5507e Multihop workers doc (#2772) 
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
 2023-01-13 08:18:03 -05:00
Irena Rindos bb281e494f Fix status NPE if worker has been sitting waiting for registration (#2781) 2023-01-12 12:02:08 -05:00
Irena RindosandDan Heath 12415990ac Add default port and address to target doc (#2775) 
* add default port and address to target doc

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-01-11 14:48:21 -05:00
Irena Rindos 5d5dc7524c update dial function doc to include options (#2776) 2023-01-11 13:26:37 -05:00
Irena Rindos af24972386 warn if controller and worker name are the same (#2773) 2023-01-11 09:07:31 -05:00
Irena Rindos 5ac590f305 Update documentation to add ingress and egress filters (#2771) 
* Update documentation to add ingress and egress filters
 2023-01-10 13:43:22 -05:00
Irena Rindos d3d1fa0b55 initial commit (#2768) 2023-01-10 08:10:54 -05:00
Irena Rindos beb97ac9f2 SSH Proxy support (#2736) 
* initial commit
 2023-01-09 13:43:02 -05:00
Irena Rindos a403b3904c initial commit (#2735) 2023-01-09 12:35:13 -05:00
Irena Rindos b7f0f455db Add options for directly connected worker (#2762) 2023-01-06 17:34:43 -05:00
Irena Rindos c80d7eae65 use product version from file if env var not set (#2763) 2023-01-06 12:34:29 -05:00
Irena Rindos 9135cc7668 In absence of ingress filter, use directly connected worker (#2757) 
* directly connected ingress filtering
 2023-01-05 12:09:31 -05:00
Irena Rindos 400f13a7e8 Revert "fix milestone check" (#2758) 
This reverts commit a283e8be5e8edfa843a7dfc838d4294644841d78.
 2023-01-05 10:39:06 -05:00
Irena Rindos 078f5e9328 Fix failing attribute flag test (#2755) 2023-01-04 14:32:12 -05:00
Irena Rindos 24bbf57a19 AuthorizeConnection with filters (#2734) 
* AuthorizeConnection with filters
 2023-01-04 11:24:09 -05:00
Irena Rindos 99cf985649 fix milestone check (#2753) 2023-01-04 11:07:22 -05:00
Irena Rindos d5fed10918 fix no path info message (#2751) 2023-01-03 15:00:45 -05:00
Irena Rindos 7db9fc59ce Expose State() *structpb.Struct interface through the metric connection trackers 2022-12-23 08:14:58 -05:00
Irena Rindos 895aecb58c Do not emit error on auth not found (#2737) 2022-12-22 08:07:02 -05:00
Irena Rindos 5c73e43912 revert 2712 (#2713) 2022-12-13 14:25:40 -05:00
Irena Rindos a135127524 Move dialingListener setAddresses 2022-12-13 13:29:14 -05:00
Irena Rindos 173e1587d0 Append initial worker upstreams if current upstreams are unresponsive (#2698) 
* Append initial worker upstreams if current upstreams are unresponsive
 2022-12-12 13:48:28 -05:00
Irena Rindos 5b162a4433 add worker version to network graph (#2672) 
* add worker version to network graph
 2022-12-02 12:36:10 -05:00
Irena Rindos 834a2a88f7 feat(targets): Addition of egress and ingress worker filters (#2654) 
* feat(targets): Addition of egress and ingress worker filters
 2022-11-30 15:23:37 -05:00
Irena Rindos 2e7cf260af Remove Feature tests running in parallel (#2655) 2022-11-28 15:53:32 -05:00
Irena Rindos ffc37d97bf update backoff to match ENT (#2653) 2022-11-28 11:54:20 -05:00
Irena Rindos 400f8d081d update go-version (#2651) 2022-11-28 09:58:57 -05:00
Irena Rindos 6315821c9a Add feature manager (#2633) 
* add feature manager
 2022-11-28 09:33:38 -05:00
Irena Rindos 70e20b5cf5 revert merge llb-multihop-sessions (#2628) 2022-11-17 14:51:29 -05:00
Irena Rindos 0c51f52222 Merge pull request #2625 from hashicorp/llb-multihop-sessions 
Dataplane connections
 2022-11-16 16:55:29 -05:00
Irena Rindos 781b03d080 dataplane management (#2624) 2022-11-16 16:22:36 -05:00
Irena Rindos 011a7cf640 Dataplane routing (#2623) 
* addition of dataplane routing
 2022-11-16 15:34:39 -05:00
Irena Rindos 1e59aaf19b fix host sets command sample command (#2596) 2022-11-07 08:05:16 -05:00
Irena Rindos b26814a3cc move user variables into globals (#2580) 
* move user variables into globals
 2022-10-28 15:52:06 -04:00
Irena Rindos 946dab487e enable recovery user to list targets and sessions (#2576) 
* enable recovery user to list targets and sessions
 2022-10-28 11:17:33 -04:00
Irena Rindos 2ab6ca6a84 Remove unrelated error from error message (#2558) 2022-10-24 12:23:59 -04:00
Irena Rindos da885a89c3 refactor(workerauth): consolidate workerAuth retrieval (#2512) 
* refactor worker auth
 2022-10-04 14:08:43 -04:00
Irena Rindos 2dfa1bb149 Update changelog (#2485) 
* update changelog
 2022-09-26 14:01:28 -04:00
Irena Rindos 4493dfd527 use prior and current worker auth keys (#2495) 
* use prior and current worker auth keys
 2022-09-26 11:23:08 -04:00
Irena Rindos bd4f5f3801 update worker auth rotate (#2484) 2022-09-22 13:13:31 -04:00
Irena Rindos d951e1ebc1 Worker graceful shutdown (#2455) 
* add graceful shutdown to worker
 2022-09-19 09:59:18 -04:00
Irena Rindos 821d8317dc address op state review feedback (#2453) 
* address op state review feedback
 2022-09-16 09:13:37 -04:00
Irena Rindos e588623ebd docs(vault): add Vault worker filter documentation (#2404) 
* docs(vault): add Vault worker filter documentation
 2022-09-15 13:18:22 -04:00
Irena Rindos fc0ead73e6 feat(workers): worker operational state (#2427) 
* feat(workers): worker operational state
 2022-09-12 16:10:03 -04:00
Irena Rindos 18dff62b7b Merge BYOW GA branch to main (#2398) 
* feat(workers): Add ability to read and reinitialize cert authority (#2312)

* feat(workers): Return Release Version on worker list and read (#2377)

* feat(cli): Read and reinitialize worker certificate authority (#2387)
 2022-09-08 13:19:21 -04:00
Irena Rindos cee5ff7599 Minor documentation fixes for controller-led (#2432) 
* Minor documentation fixes
 2022-09-08 10:15:47 -04:00
Irena Rindos db21ead31c Vault proxy supporting code (#2415) 
* Vault proxy supporting methods
 2022-08-31 12:40:35 -04:00
Irena Rindos 547e7a5970 docs(workers): add documentation for pki worker cred encryption (#2397) 
* docs(workers): add documentation for pki worker cred encryption
 2022-08-26 13:08:18 -04:00
Irena Rindos b4b95e0f0e refactor(vault): add context and remove deprecated errors (#2396) 
* refact(vault): add context and remove deprecated errors
 2022-08-25 14:37:22 -04:00
Irena Rindos b43e61c8c7 bug(workers): Create worker-led panics on invalid token (#2388) 
* Check for error before returning result
 2022-08-24 14:43:15 -04:00
Irena Rindos 4aa09242ab Fix dev Docker build (#2380) 
* Fix dev Docker build
 2022-08-24 09:05:25 -04:00
Irena Rindos dde0c35f23 Update request data in session manager (#2369) 
* bug(session): Update request data in session manager
 2022-08-24 09:03:29 -04:00
Irena Rindos 8baa20b94a Merge pull request #2277 from hashicorp/irindos-worker-filter-vault-oss 
feat(vault): Add unimplemented worker filter support
 2022-07-25 12:08:27 -04:00
Irena Rindos 227103c906 Merge pull request #2209 from hashicorp/irindos-fix-kms-version-update 
bug(workers): KMS workers cannot be updated
 2022-06-16 18:30:00 -04:00
Irena Rindos 65d3899058 Merge pull request #2192 from hashicorp/irindos-workers-cli-update 
cli(workers): Add extra help func
 2022-06-15 10:44:19 -04:00
Irena RindosJeff MitchellJim
 		06d0f99536 bug(workersAPI): do not allow nonprintable or uppercase name or desc (#2186) 
* Send more info on KMS connect (#2182)

* Update nodeenrollment to v0.1.0

* bug(workersAPI): do not allow nonprintable or uppercase name or desc

* Put checks on create too

* Apply printable check to description in DB

* chore (worker): address PR feedback

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: Jim <jlambert@hashicorp.com>
 2022-06-14 20:13:02 -04:00
Irena Rindos 15138b897e Merge pull request #2168 from hashicorp/irindos-upstreams-fixes 
fix context for worker upstreams
 2022-06-13 08:58:22 -04:00
Irena Rindos f7dbf2a532 Merge pull request #2163 from hashicorp/irindos-clusterid-upstreams 
feat(worker): Map cluster ID in config to upstream address
 2022-06-10 10:17:51 -04:00
Irena Rindos adf019f216 Merge pull request #2146 from hashicorp/irindos-cluster-workerkeyid 
feature(worker): add workerKeyId to status
 2022-06-10 09:59:58 -04:00
Irena Rindos d357a583ed Merge pull request #2152 from hashicorp/irindos-print-workerauth-at-startup 
feat(worker): save workerAuth request to a file
 2022-06-09 10:56:51 -04:00
Irena Rindos cc232b743e Merge pull request #2130 from hashicorp/irindos-rotate-roots 
feature(WorkerAuth): Create RotateRoots domain and job
 2022-06-06 14:50:21 -04:00
Irena Rindos 07008e80ff Merge pull request #2140 from hashicorp/irindos-remove-nonce-encryption 
Remove nonce encryption for workerAuth
 2022-06-06 11:43:10 -04:00
Irena Rindos ded44710d5 Merge pull request #2093 from hashicorp/irindos-workerauth-repo 
feat(workerAuth): Implement nodeenrollment lib workerauth storage
 2022-06-02 15:21:33 -04:00
Irena Rindos 5aebd5689f Merge pull request #2116 from hashicorp/irindos-update-workerauth-schemas 
feat(workerauth): add storage for RootCertificates aggregate
 2022-06-01 08:31:10 -04:00
Irena Rindos f3c1936e99 Merge pull request #2102 from hashicorp/irindos-move-worker-apis 
refact(api): move worker handlers
 2022-05-26 19:22:52 -04:00
Irena Rindos 3e314a45f9 Merge pull request #2109 from hashicorp/irindos-delete-worker 
feature(workers): add repository DeleteWorker
 2022-05-26 19:18:13 -04:00
Irena Rindos 12044af824 Merge pull request #2067 from hashicorp/irindos-pki-schemas 
feat(pki): Add PKI schemas and protos
 2022-05-20 13:53:12 -04:00
Irena Rindos a11b0e81a8 Merge pull request #2065 from hashicorp/irindos-session-nullfkey 
bug(session): null fkey trigger also checks for session terminated state
 2022-05-12 15:12:50 -04:00
Irena Rindos 602941af28 Merge pull request #2071 from hashicorp/irindos-remove-cascade 
Remove column cascade
 2022-05-11 12:43:01 -04:00
Irena Rindos ca2599ead4 Merge pull request #2046 from hashicorp/irindos-session-transition-trigger 
fix(session): Update session state transition trigger
 2022-05-02 16:13:56 -04:00
Irena Rindos 49e904f25c Merge pull request #1929 from hashicorp/irindos-worker-handler-bug 
bug(worker): create error and handle session cancel with no tofu token
 2022-03-17 09:31:31 -04:00
Irena Rindos 0ffa45c5c9 chore: update Changelog for 0.7.6 release (#1922) 2022-03-15 14:14:39 -04:00
Irena Rindos 066e478a44 Merge pull request #1919 from hashicorp/llb-session-connection-deadlocks 
chore: Merge session connection deadlock branch to main
 2022-03-15 14:08:18 -04:00
Irena Rindos bc6689fb16 docs(permissions): break permissions into sections (#1893) 
* docs(permissions): break permissions into sections

* fixup! docs(permissions): break permissions into sections
 2022-03-08 10:36:11 -05:00
Irena Rindos 718e746480 docs(targets): remove default port option (#1883) 2022-03-03 10:44:25 -08:00
Irena Rindos be569dee78 Merge pull request #1862 from hashicorp/irindos-api-client-path 
fix(api): address base paths containing a v1 were being truncated
 2022-02-16 07:36:17 -08:00
Irena Rindos c6c10cbec7 Merge pull request #1859 from hashicorp/irindos-remove-terminate-session 
refactor(session): Remove dead session termination code
 2022-02-15 06:39:43 -08:00
Irena Rindos befdc7612c Merge pull request #1842 from hashicorp/irindos-circli-proto-delta 
ci(proto): Detect unchecked API and proto changes
 2022-02-10 06:55:05 -08:00
Irena Rindos 86245c48da Merge pull request #1824 from hashicorp/irindos-fix-session-termination-msg 
bug(connect): Fix Session has expired messaging
 2022-01-18 12:50:43 -08:00
Irena Rindos 52e07931e7 Merge pull request #1822 from hashicorp/irindos-fix-createSession-ordering 
bug(session): Fix CreateSession foundStates logical ordering
 2022-01-18 12:48:06 -08:00
Irena Rindos 0a6e5470e0 Merge pull request #1793 from hashicorp/irindos-state-transitions 
bug(session): Allow only valid state transitions
 2022-01-13 05:50:43 -08:00
Irena Rindos 2cfa027406 Merge pull request #1776 from hashicorp/irenarindos-env-file-database 
feat(config): Add env and file support for database max connections
 2021-12-09 10:40:51 -08:00
Irena Rindos e50541cfc7 Merge pull request #1772 from hashicorp/irenarindos-env-file-plugins 
feat(config): Add env and file support to Plugins execution dir
 2021-12-08 08:34:10 -08:00
Irena Rindos ae4aff85ca Merge pull request #1766 from hashicorp/irenarindos-env-file-controllerconfig 
feat(config): Add env and file support to Controller description
 2021-12-08 05:28:47 -08:00
Irena Rindos 1f43ec174f Merge branch 'main' into irenarindos-env-file-controllerconfig 2021-12-08 04:58:46 -08:00