CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
863 Commits 7 Branches 2 Tags
8151b30ce98911beddf8cc6fb23f14b8de17c98f
Commit Graph
863 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Louis Ruch 8151b30ce9 ICU-743/Domain errors internal/kms refactor (#848) 
* Domain errors internal/kms refactor

* Update changelog

* Update internal/host error op

* Incorrect error returned in read_writer
 2021-01-12 08:50:19 -08:00
Jeff Mitchell 9de928318d Skip curl output when using automatic versioning and reading (#858) 
This makes it so that the actual output is the update/delete.

Fixes #856
 2021-01-08 17:30:41 -05:00
Louis Ruch 31ece74a92 Fix worker example config (#855) 2021-01-08 13:30:53 -08:00
Jeff Mitchell 84c617dc49 Run make gen after the gofumpt update 2021-01-08 10:32:02 -05:00
Michael GaffneyandJeff Mitchell 94cb79bbdd See how Boundary would look with gofumpt applied (#853) 
* See how Boundary would look with https://github.com/mvdan/gofumpt applied

Results of running `gofumpt -w -s .`

* Update tools file and Makefile for gofumpt

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2021-01-07 10:02:32 -05:00
Jeff Mitchell cca0fbea2b Fix typo on controller config docs 2021-01-06 15:32:14 -05:00
Louis Ruch dbc796759b ICU-934/Verify controller config block (#851) 
* Verify controller config block

* update changelog
 2021-01-06 10:41:38 -08:00
Yoko 9a9efd16e2 [Docs] Common workflow update (#850) 
* Direct to Learn for 'Common Workflow'

* Clearn up

* Fix a typo
 2021-01-05 17:56:19 -08:00
Louis Ruch 4e31fdb10e Swap assert.Eqaul actual/expected (#849) 2021-01-05 17:34:04 -08:00
Jeff Mitchell f8577519b6 Prep for 0.1.4 2021-01-05 09:26:21 -05:00
Jeff Mitchell 77525298bd Use modified version of keyring lib 2021-01-04 21:29:46 -05:00
Jeff Mitchell 5b5602969f Update go-keyring to use forked version (#846) 
This may help with #830.
 2021-01-04 21:05:42 -05:00
Jeff Mitchell 2323a8551c Update no-resources flag 2021-01-04 16:59:54 -05:00
Jeff Mitchell 6580d85388 Remove erronious IsGlobalUnicast check. (#845) 
Fixes the issue raised at https://www.boundaryproject.io/docs/configuration/worker#complete-configuration-example
 2021-01-02 19:49:39 -05:00
Jim 7cade6f8aa just a few typos. (#840) 2020-12-23 16:21:35 -05:00
Louis Ruch 70a5899e99 ICU-739/iam domain error refactor (#841) 
* Refactor iam errors

* Update db and host doTx error ops

* Changelog
 2020-12-23 11:00:00 -08:00
Louis Ruch bfbb179741 ICU-738/Refactor internal/db to domain errors (#815) 
* Refactor internal/db to domain errors
 2020-12-21 10:07:34 -08:00
Jeff Mitchell b5d84495a3 Fix IDs being lowercased in role grants (#839) 
Fix IDs being lowercased in role grants

Fixes #794
 2020-12-18 13:25:28 -05:00
Jeff Mitchell e6c98f1454 Add logic to error on certain invalid listener configs (#838) 
This adds logic to error on certain invalid listener config:

* If an address in the worker's "controller" set is unspecified or
multicast or global unicast, error
* If the controller's cluster address is unspecified, ensure
public_cluster_addr is set

This has been a source of some confusing behavior on some GitHub tickets
and even on the team, so preventing it is probably a good idea.

It also relaxes the restriction around controller address matching cluster address in single-server mode when using DNS names.
 2020-12-18 12:12:25 -05:00
Sarah ThompsonandJeff Mitchell 1d3cdbe630 fixing base-image (#837) 
* fixing base-image - should be : and not -
running make packages

* make packages

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-18 11:34:29 -05:00
Jeff Mitchell 6a6b95dd01 Update go.mod API ref 2020-12-17 19:17:19 -05:00
Jeff Mitchell 0614559f80 Prep for 0.1.3 2020-12-17 15:26:59 -05:00
Jeff MalnickandJeff Mitchell b96c8bffb4 build: update to go 1.15.6 (#836) 
* build: update to go 1.15.5

* Update ci/goinstall.sh

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-17 15:11:26 -05:00
Jeff Mitchell e52db40d1f Run packagespec upgrade 2020-12-17 14:22:19 -05:00
Jeff Mitchell 16f7dc1c96 Update connect unauthorized message to give a bit more detail 2020-12-17 11:06:01 -05:00
Jeff Mitchell 8b39faef1b Rearrange some auth logic and add some opts useful for filtering/testing (#835) 2020-12-17 10:30:40 -05:00
Simon FreyandJeff Mitchell ea878e49fa Move listener address in worker config example (#834) 
* Move listener address in worker config example

This fixes: The address wrongly being documented as part of the `worker` block, despite belonging into the listener

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-17 10:11:35 -05:00
Manuel Aude Morales 07eb7ddc62 Update run-and-login.mdx (#833) 
Fix typo.
 2020-12-17 10:08:42 -05:00
Jeff Mitchell a6cca576a3 Attempt canceling sessions by the client (#831) 
* Attempt canceling sessions by the client

In some circumstances (like a Ctrl-C), the client knows it's shutting
down and the TOFU token will be lost. In this case it makes sense to
cancel the session rather than have it time out. This introduces a
command enum to the handshake message which can be used for the client
to send commands to the worker -- in this case the only specified
command is to cancel the session. It doesn't occur if the session is
already timed out or if we can't authorize connections as this generally
means the session is already invalid.
 2020-12-16 17:14:47 -05:00
Jeff Escalante 3739427139 Update DocsPage Component (#801) 
* wip

* update openapi docs page

* remove old component

* styling fixes

* update dependencies

* fix firefox bug with downloads page logo

* update deps, trim outdated deps, add search

* cleanup and polish

* fix circle shenanigans
 2020-12-16 16:43:06 -05:00
Jeff Mitchell 11b821a200 Bump deps (#818) 2020-12-15 14:56:41 -05:00
Jeff Mitchell a5e920bb21 changelog++ 2020-12-14 16:55:13 -05:00
Jeff Mitchell b809d3f12a Add kube connect subcommand (#816) 2020-12-14 16:52:11 -05:00
Jeff MalnickandJeff Mitchell d9a6bd1a60 docs: add workflow for transparent usage of Boundary by SSH client (#796) 
* docs: add workflow for transparent usage of Boundary by SSH client

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-10 12:48:06 -08:00
Jeff Mitchell 9a84e50493 Minor linting 2020-12-09 17:05:16 -05:00
Jeff Mitchell 833f29e352 Switch connection limit for default target to -1 (#814) 
This makes the initial testing workflow less confusing for users
 2020-12-09 16:05:48 -05:00
Jeff Mitchell d4a6efb363 Pass endpoint to the client (#811) 
This allows us to automatically set TLS parameters, useful for `boundary
connect http` and some other features to come.
 2020-12-09 14:45:53 -05:00
Louis Ruch 71ed04db9b Update changelog for host repo error refactor (#812) 2020-12-09 10:15:41 -08:00
Louis Ruch ec0020de90 Refactor host_repo -> domain errors (#786) 
* Refactor domain errors: New -> E, create helper New and Wrap
* Update host repo to use domain errors
 2020-12-09 10:11:38 -08:00
Todd Knight aa4157639c Change Format of API Error (#784) 
This is a wire breaking change for json errors since we have removed and renamed a few fields, and changed part of the structure of the returned json error.

* Remove redundant fields in Status, details.error_id, details.TraceId and details.request_id from API errors.

* Added wrapped errors and "ops" field to indicate the internal operation of the errors returned by the API.

* Added error cli error reporting of Op and wrapped errors.
 2020-12-07 14:25:16 -07:00
Jeff Mitchell 18ea39b237 Remove usage of manual.GenerateAndRegisterManualResolver (#810) 
This has been removed in latest grpc.
 2020-12-07 13:01:21 -05:00
Jeff Mitchell 215fead30e Bump Go version for packaging 2020-12-07 09:17:48 -05:00
Jeff Mitchell 589c79831f Create internal capability for json errors for connect (#809) 
* Create internal capability for json errors for connect

* Update error codes
 2020-12-07 09:02:02 -05:00
Todd Knight f6e50006fc Generate postgres.gen.go using schema version directory structure (#808) 
* Reorganize the db migration .sql scripts into individual schema version directories and generate the sql httpfs fakeFile accordingly.

* Created a /dev schema version directory to hold db schema updates that have not been finalized.

* Add an 'allow-development-migrations' flag to allow `boundary database init` to be executed even when there are schema updates in /dev.
 2020-12-04 21:32:27 -07:00
Louis Ruch d8f8d60418 Allow dash in account name (#806) 
* Allow dash in account name
 2020-12-02 09:56:19 -08:00
Jeff Mitchell c33f4fe5d7 Fix old "boundary proxy" CLI example (#804) 
Fixes #800
 2020-11-30 12:41:33 -05:00
Jeff Mitchell 1189ebdfc6 Fix wording on HA doc (client -> host) (#803) 2020-11-30 12:35:40 -05:00
Jeff Malnick af2d9dfe90 fix: do not print info in output that could be JSON or YAML format (#799) 
* fix: print err msg for no credentials found to stderr
 2020-11-20 09:27:44 -08:00
Jeff Malnick 2badd4ecf8 docs: fix misleading statement about what scope a role can be created (#798) 2020-11-20 09:27:21 -08:00
Jeff Malnick 1b697b7bce Update docker build to 0.1.2 (#793) 
* build: use 0.1.2 for docker build

* feat: tag latest when tagging new docker release
 2020-11-19 16:15:19 -08:00