CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,912 Commits 7 Branches 2 Tags
82745e16bea09fdb81caef109ea10108998a16a3
Commit Graph
4912 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Justin Nguyen 82745e16be feat(handlers): Implement CRUDL for vault generic Password credential (#6161) 2025-11-13 12:28:04 -08:00
Justin Nguyen 4a8009fec4 feat(credential/vault): Implement repository for vault password credential (#6140) 2025-11-13 12:28:04 -08:00
Justin Nguyen 3ab1019bc2 feat(db): Add db migration to support vault password credential (#6129) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 1c2bc2cc74 feat(db): Password credential migration (#6125) 2025-11-13 12:28:04 -08:00
Justin Nguyen 8bce750933 feat(db): Add new tables for password credential type (#6101) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 5cf33fa8b3 feat(credentials): Add PasswordAttributes credential type (#6110) 2025-11-13 12:28:04 -08:00
dillanb-hashi d0050ad881 refact(e2e): Enable token to be passed into methods (#6248) 
* ce: chore(e2e): Address setup flakiness when getting hostname
* ce: refact(e2e): Enable token to be passed into methods
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2025-11-13 13:19:33 -07:00
dillanb-hashi 1a135dd711 test(rdp): added public controller ip as an output for github runner rdp tests (#6246) 2025-11-12 17:45:29 -05:00
Michael Li ebe88cac06 fix(e2e): Fix ipv6 address argument (#6245) 
* test(e2e): Add windows client private ip to output

* fix(e2e): Only assign ipv6 address if available
 2025-11-12 14:11:30 -05:00
Tony 8a7f241107 chore(e2e): Add helper func ConnectCliStdoutPipe (#6243) 2025-11-12 12:47:44 -05:00
Tony f3d44ba817 chore(e2e): update vault create credential funcs (#6239) 2025-11-11 13:07:11 -05:00
Irena Rindos fd5bcca300 Revert "chore: upgrade backport runner (#6236)" (#6238) 
This reverts commit 53bb4fa72b.
 2025-11-10 13:39:23 -05:00
Michael Li b3c6cb7929 test(e2e): Add RDP test for Vault LDAP (ce commits) (#6237) 
* refact(e2e): Add error output to SetupLdapWithOpenLdap

(cherry picked from commit 12874ec3227500ac03ece452e342f44d9f1ebc7a)

* test(e2e): Add method for setting up vault ldap with active directory

(cherry picked from commit 4f0fe7bba78d25005a5d98e203a3d0bc037a2b69)

* chore(e2e): Add domain controller ipv6 address to e2e tests

(cherry picked from commit 3215194053cd82a4e650522e56f4699946f62ef3)
 2025-11-10 13:31:47 -05:00
Irena Rindos 53bb4fa72b chore: upgrade backport runner (#6236) 2025-11-10 11:48:36 -05:00
Michael Milton 9e7fb37e0c Update changelog to include 0.19.3 changes (#6230) 2025-11-07 13:24:39 -05:00
Irena Rindos 4a4bbd723e chore(sqltest): update readme (#6228) 2025-11-07 12:22:52 -05:00
Michael Li 89c577ddd7 chore(e2e): Update go mod download to run on the correct user (#6227) 
* chore(e2e): Ensure go modules are downloaded for test user

* chore(e2e): Add additional debug lines in script

* chore(e2e): Exclude boundary-ui clone when zipping boundary src
 2025-11-07 12:03:27 -05:00
dani 4a7342b074 fix(credential/vault): add case for upd creds in injected creds switch (#6226) 2025-11-06 16:37:57 -05:00
Michael Li 04d994bfbc chore(e2e): Update URL to avoid 502 Bad Gateway (#6225) 2025-11-06 14:15:23 -05:00
Michael Li 272cad00b2 chore(e2e): Enable Vault for RDP e2e tests (#6223) 
* chore(e2e): Update vault addresses

* chore(e2e): Install vault CLI on windows client
 2025-11-06 13:49:17 -05:00
dillanb-hashi 4e78c68195 chore(rdp): add client ssh key to enos variable output (#6224) 2025-11-06 09:28:44 -07:00
dani 3461cc9b5e Merge pull request #6222 from hashicorp/llb-vault-ldap 
Vault LDAP Credential Library
 2025-11-06 08:35:59 -05:00
dependabot[bot] d81eaf09b1 chore(deps): bump github.com/opencontainers/runc (#6221) 
Bumps the go-security group with 1 update in the / directory: [github.com/opencontainers/runc](https://github.com/opencontainers/runc).

Updates `github.com/opencontainers/runc` from 1.2.3 to 1.2.8
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/v1.2.8/CHANGELOG.md)
- [Commits](https://github.com/opencontainers/runc/compare/v1.2.3...v1.2.8)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
  dependency-version: 1.2.8
  dependency-type: indirect
  dependency-group: go-security
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-05 17:37:12 -05:00
Hugo 546550fa4f docs(credential/vault): Clarify LdapCredentialLibrary issuing cred type 2025-11-05 16:20:44 -05:00
Hugo 3de584cafa refact(e2e): Split Vault Boundary Controller setup from secrets policy creation 2025-11-05 16:20:44 -05:00
Hugo 9575d5f239 test(e2e): Implement Vault LDAP API and CLI tests 2025-11-05 16:20:44 -05:00
Andrew Gaffney 9652ebe032 feat(cmd): Support Vault LDAP Credential Library 2025-11-05 16:20:44 -05:00
Hugo 84dd5543cf feat(handlers/credentiallibraries): Support Vault LDAP credential library 2025-11-05 16:20:44 -05:00
Hugo 9e08eafcff feat(credential/vault): Implement LDAP Credential Library 2025-11-05 16:20:42 -05:00
Andrew Gaffney ebf0450b03 feat(db): LDAP Credential Library history entities 2025-11-05 16:20:13 -05:00
Andrew Gaffney f4d81e0026 feat(db): LDAP Credential Library operational entities 2025-11-05 16:20:13 -05:00
Hugo 548782a261 refact(db): Redefine credential_vault_library 
The existing credential_vault_library table is the table that holds operational
state for Vault generic credential libraries. This commit renames that table and
all its associated database entities to credential_vault_generic_library.

Additionally, a new credential_vault_library table is created as the base table
for all Vault-subtype credential libraries (eg: Vault generic, Vault SSH Cert).
 2025-11-05 16:20:13 -05:00
Hugo bbef89b371 feat(dbtest): Add option to create DB based off boundary_template 2025-11-05 16:20:12 -05:00
Hugo e814405c7e feat(gha): Update schema diff to have collapsible sections 2025-11-05 16:20:12 -05:00
Michael Li 06d69f699e refact(e2e): Rename credential methods for clarity (#6219) 
* refact(e2e): Rename method to usernamepassworddomain

* refact(e2e): Rename method to usernamepassword
 2025-11-04 14:29:05 -05:00
Michael Li 31277e0b23 chore(e2e): Change RDP scenario to use ipv4 only (#6218) 
* chore(e2e): go mod download

* chore(e2e): Change RDP scenario to use ipv4 only

(cherry picked from commit e65cc563e94523ba454acb1afa2b4b2306f985df)
 2025-11-04 14:16:59 -05:00
Robert Main 18f469105c Deprecate website folder (#6212) 
* Update website folder to indicate deprecation

Adds an alert banner to the top of all MDX files within `/website` to
indicate deprecation

* Update website README
 2025-11-04 10:22:10 -05:00
Tony a7c4214784 chore(e2e): gitignore for rdp automation (#6215) 2025-10-30 15:46:34 -04:00
Michael Li 5885a40ab8 chore(e2e): Disable snap assist (#6214) 2025-10-29 18:21:32 -04:00
Robin Beck 25847c3884 Docs: permstable resource-table UDR migration (#6162) 
* moves resource-table.mdx to internal/website/permstable

* updates location of generated resource-table.mdx file to internal/website/permstable/

This change facilitates the implementation of the web-unified-docs content migration,
which will need to source generated content like this table from outside the website
folder after the content migration.
 2025-10-29 15:57:38 -04:00
dillanb-hashi 4bdb811dc4 chore(e2e): Added variable to fix enos scenario (#6205) 2025-10-28 10:41:12 -07:00
Dan HeathandIrena Rindos d21e714dfc docs: Update macOS client phrasing (#6193) 
* docs: Update macOS client phrasing

* Update product capitalization

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>

---------

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>
 2025-10-28 12:05:37 -04:00
dillanb-hashi 420f7cb334 test(rdp): pass through server and client version to e2e output (#6201) 
* test(rdp): pass through server and client version to e2e output
 2025-10-28 09:05:22 -07:00
dependabot[bot] 3181ac1cfc chore(deps): bump mvdan.cc/gofumpt in the go group across 1 directory (#6191) 
Bumps the go group with 1 update in the / directory: [mvdan.cc/gofumpt](https://github.com/mvdan/gofumpt).

Updates `mvdan.cc/gofumpt` from 0.9.1 to 0.9.2
- [Release notes](https://github.com/mvdan/gofumpt/releases)
- [Changelog](https://github.com/mvdan/gofumpt/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mvdan/gofumpt/compare/v0.9.1...v0.9.2)

---
updated-dependencies:
- dependency-name: mvdan.cc/gofumpt
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-27 15:41:39 -04:00
dependabot[bot] 37880497fd chore(deps): bump the actions group with 3 updates (#6190) 
Bumps the actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).

Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.2.2...08c6903cd8c0fde910a37f88322edcfb5dd907a8)

Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...330a01c490aca151604b8cf639adc76d48f6c5d4)

Updates `actions/download-artifact` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/634f93cb2916e3fdff6788551b99b062d0335ce0...018cc2cf5baa6db3ef3c5f8a56943fffe632ef53)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-27 15:41:31 -04:00
Michael Li 1497db1623 chore(e2e): Update artifact name (#6192) 2025-10-27 15:04:16 -04:00
Dan HeathandJohan Brandhorst-Satzkorn ec7c1b892c docs: Security model (#6031) 
* docs: Security model

* Apply batch suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* docs: Fixes typos

* docs: Removes reference to keyring

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2025-10-27 14:48:47 -04:00
Dan Heath 3747243da2 docs: Fixes redirects - batch 3 (#6178) 
* docs: Fixes configuration redirects

* docs: credentials, install, domain model fixes

* docs: getting started, install-boundary fixes

* docs: installing, integrations, interoperability fixes

* docs: operations fixes

* docs: oss, release note, roadmap fixes

* docs: session recording, targets, use case fixes

* docs: vault and workers fixes
 2025-10-27 12:24:07 -04:00
Dan HeathandIrena Rindos 4ab203ab98 docs: Explain storage capacity in concept topic (#6187) 
* docs: Explain storage capacity in concept topic

* Update website/content/docs/session-recording/index.mdx

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>

---------

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>
 2025-10-24 11:15:58 -04:00
Johan Brandhorst-Satzkorn fe0d2b3465 Makefile: check for existence of dist in build-ui-ifne (#6119) 
The build-ui-ifne target is responsible for deciding
whether the UI assets already exist on disk, or need
to be built by cloning the UI repo and running its build
scripts.

The old configuration would check whether the UI
repo folder existed, and assume that as long as this
folder exists, it can be used to embed the UI assets.
However, if the clone or ui build fails at any point, the
Makefile target isn't able to retry the script.

Correct the path that is checked for to be the path that
is actually included in the assets.go file. This way, the
Makefile script will retry building the UI until a dist
folder is created.
 2025-10-23 16:33:01 -04:00