CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,271 Commits 7 Branches 2 Tags
7df1331e932a0ba78bde424d37ddefebb4bcb047
Commit Graph
2271 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeff Mitchell 7df1331e93 Update configutil/pluginutil deps (#2346) 
Fixes #2343
 2022-08-10 16:32:02 -04:00
Louis Ruch ad9a47a7f9 chore: update changelog for release 2022-08-09 15:40:30 -07:00
Jeff Mitchell 0de5654060 Update sdk/api 2022-08-09 18:05:03 -04:00
Jeff Mitchell 30ede3b137 Fix various website issues (#2344) 
I found some invalid links and some missing KMS information; this fixes
those.
 2022-08-09 17:56:29 -04:00
Jeff Mitchell f494a9b80a Update website with new password rules taken into account (#2330) 
* Update website with new password rules taken into account

* Remove the prompt examples as it messes up copying
 2022-08-09 17:46:25 -04:00
Louis Ruch 7fafadd70b db: Add credential_sha256 to session_credentials (#2339) 
* db: Add credential_sha256 to session_credentials
 2022-08-08 18:54:42 -07:00
Jeff MitchellLouis RuchMichael Gaffney
 		02dd28f587 Add support for SSH private key passphrases (#2331) 
This adds support for encrypted SSH keys via passphrase.

Co-authored-by: Louis Ruch <louisruch@gmail.com>
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>
 2022-08-08 15:15:03 -04:00
Jeff Mitchell 07bca9dd66 Ensure initial upstreams is empty before hcpb worker listing (#2334) 
The intention of the code was to have one-hop-away workers list KMS
workers to get initial upstreams, and have other workers continue using
what was in their config file. However, nothing stops people from having
initial_upstreams but _also_ adding a cluster ID in their config file,
in which case we'd always run this check and replace the config-set
initial upstreams. So, ensure the config-set initial upstreams is also
len zero.
 2022-08-08 12:39:34 -04:00
Louis Ruch dcccaf1bcf bug(cmd): Ensure RunShutdownFuncs is called when an early error occurs (#2333) 
* bug(cmd): Ensure RunShutdownFuncs is called when an early error occurs
 2022-08-08 09:13:47 -07:00
claire labry 4d966c8eb4 introduces the post publish website event (#2261) 2022-08-08 10:33:51 -05:00
Jeff Mitchell 3f5d265cfd Update bats tests with new password paradigm 2022-08-05 19:52:04 -04:00
Jeff Mitchell fa17fdf9d7 Update wording and fix a missing prompt (#2329) 2022-08-05 19:27:14 -04:00
Jeff Mitchell 9c03ef2105 Fix TF character usage 2022-08-05 18:30:43 -04:00
Jeff Mitchell d92cbac37d Update enos/bats with changes 2022-08-05 18:17:07 -04:00
Louis Ruch 82a39f8582 chore: update api/sdk deps 2022-08-05 13:22:20 -07:00
Jeff Mitchell fe2ee7ef4a Change behavior of -token and -password to support env/file only (#2327) 
* Revert "Remove `-token` flag (#2303)"

This reverts commit 65cff995d7.

* Change behavior of -token

* Add use of MustParsePath

* Update changelog

* Use errors.Is
 2022-08-05 16:08:48 -04:00
Jeff Mitchell ddb7ec7b49 Add some changelog items 2022-08-05 13:23:55 -04:00
Louis Ruch 53dbd51f14 Only consume ssh brokered credentials if the target is tcp (#2323) 2022-08-05 10:22:07 -07:00
Jeff Mitchell 26ffa705e5 Add parsepath logic to password in various places (#2325) 
* Add parsepath logic to password in various places:

* Account password create/set/change
* Authenticate

Also fixes a bug where confirmation on a change-password call would run
for the current password instead of the new one.
 2022-08-05 13:21:46 -04:00
Jeff Mitchell 090b2b28f8 Clean up some dev config kms code (#2321) 
* Clean up some dev config kms code

Although it didn't matter in the combined state, the KMS for auth
storage was not actually being set properly if only a worker was being
instantiated.
 2022-08-05 12:12:07 -04:00
Michael Gaffney 661d6a551e test(tcp): only host sets from the same project can be added to a target 2022-08-04 12:01:01 -04:00
Jeff Mitchell 8800ec9c94 Reorganize logic to allow a poison pill (#2317) 2022-08-03 19:29:17 -04:00
Louis Ruch 9b6b767edb chore: Update changelog 2022-08-03 10:20:59 -07:00
Louis Ruch fc25178827 bug(server): Start ops listener even if controller is nil (#2314) 2022-08-02 17:18:09 -07:00
Randall Morey 0a865e0b89 chore: bump ui version (#2310) 2022-07-29 17:40:29 -07:00
Randall Morey bf9ecc879f chore: bump UI version to latest (#2307) 2022-07-29 12:13:13 -07:00
Michele Degges 047b9bea05 Merging ENT updates back into OSS (#2309) 2022-07-29 11:51:26 -07:00
Ryan Cragun ed3014ead5 build: depend on the right output for metadata (#2306) 
Signed-off-by: Ryan Cragun <me@ryan.ec>
 2022-07-29 11:15:25 -06:00
Jeff Mitchell 5be4edf69e Changelog++ 2022-07-29 12:18:08 -04:00
Jeff Mitchell 65cff995d7 Remove -token flag (#2303) 
Token values can be shown in output of `ps` and so, and we support env
vars and keyrings, so remove it.
 2022-07-29 12:08:43 -04:00
Jeff Mitchell 4bd249d347 Fix some missing net.JoinHostPort calls (#2305) 2022-07-29 12:08:37 -04:00
Jeff Mitchell 418129d564 Update Go version info on building page (#2304) 2022-07-29 12:08:21 -04:00
Jeff Mitchell a67085f663 Add methods to get attributes more easily in Go API (#2299) 
* Add methods to get attributes more easily in Go API

* Add type check
 2022-07-28 18:17:30 -04:00
Ryan Cragun ab3fe75537 build: generate the metadata file (#2302) 
Signed-off-by: Ryan Cragun <me@ryan.ec>
 2022-07-28 15:37:10 -06:00
Ryan CragunRebecca WillettJosh Branch
 		9169c6bacb [QTI-220] Add infrastructure integration testing (#2282) 
* [QTI-275] Add infrastructure integration testing

On pull requests that originate from branches of the `hashicorp/boundary`
repo, we now conditionally dispatch infrastructure integration tests using
the Enos framework. The `integration` Enos scenario includes two `builder`
variants which allow developers or CI to deploy a Boundary cluster in AWS
using either a local `boundary` install bundle or that which is produced
in the `build` workflow for CRT. The `test` variants determine which type
of infrastructure integration test to run. At present those options are
`cli_ui` (Bats CLI tests) or `smoke` (creates target instances and a
target host catalog and verifies that `boundary` works).

In addition to the new workflow and quality scenarios, we simplified the
some `build` workflow steps and added Go module caching to speed up the
build pipeline.

See the [enos/README.md](https://github.com/hashicorp/boundary/blob/main/enos/README.md)
for a detailed explanation on how to configure and execute Enos scenarios
from your machine.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Rebecca Willett <rwillett@hashicorp.com>
Co-authored-by: Josh Branch <jbrand@hashicorp.com>
 2022-07-28 14:48:51 -06:00
Jim d269ebc630 chore: update go-kms-wrapping dependency (#2300) 
Updated this dependency to fix a panic in boundary which occurred
when vault (transit) was unreachable. It was fixed in the pkg in this
commit:
https://github.com/hashicorp/go-kms-wrapping/pull/105/commits/f70fdac27c171ece4759cba7b731d92f3ef9c21c
 2022-07-28 16:37:25 -04:00
Damian Debkowski c25b9285c0 fix(test) uncomment ro tests for cred update (#2301) 2022-07-28 11:58:45 -07:00
Michele Degges 63bfcaff61 [CI-only] Build updates (#2296) 2022-07-28 07:57:12 -07:00
Damian Debkowski 2cbe65597b fix(creds) fix unit test for ssh private key creds (#2297) 2022-07-27 16:31:10 -07:00
Loann Le c119751720 updated image (#2295) 2022-07-27 11:46:02 -06:00
Damian Debkowski 2db5840790 fix(cli) check error value in executeExtraActionsImpl funcs (#2293) 2022-07-27 10:00:00 -07:00
Loann Le 3fb09dd247 Boundary documentation: updated domain model page (#2259) 
* updated domain model

* updated image ext

* resized images

* updated content

* updated images

* resizing images

* fixed one image

* modified text

* removed image
 2022-07-26 14:45:33 -06:00
Todd 1aad2627c8 OSS side of second downstream connections (see enterprise PR 69) (#2292) 2022-07-25 12:52:21 -07:00
Louis Ruch 47739566bc bug(vault): Fix token len check (#2291) 2022-07-25 11:08:06 -07:00
Jeff Mitchell 67d789cb6d When allowed_origins is "*" use that in response (#2289) 2022-07-25 14:05:00 -04:00
Loann LeYoko HyakunaRobin BeckXingLu Wang
 		24cf580045 Boundary documentation: modified Boundary's overview page (#2264) 
* modified overview page

* updated text and image

* fixed spelling errors

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* cleaned up content

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>

* incorporate feedback

* updated image

* updated background color

* modified font

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
 2022-07-25 11:21:30 -06:00
Louis Ruch 5c80942453 docs(credentials): Update website domain docs (#2287) 2022-07-25 10:12:10 -07:00
Johan Brandhorst-Satzkorn 2e3ec967f6 fix: Respect context when retrying (#2285) 
Respect the cancellation of the context being passed in,
preventing us from retrying events that are doomed to fail.
 2022-07-25 12:31:17 -04:00
Jeff Mitchell 5fccc5a0b8 Update nodeenrollment dep 2022-07-25 12:19:38 -04:00
Irena Rindos 8baa20b94a Merge pull request #2277 from hashicorp/irindos-worker-filter-vault-oss 
feat(vault): Add unimplemented worker filter support
 2022-07-25 12:08:27 -04:00