CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,347 Commits 7 Branches 2 Tags
829ea02e6f5aed8f124785edf5889c4d52e5c8d6
Commit Graph
559 Commits
Author SHA1 Message Date
Irena Rindos 35679c6a5b chore(config): remove deprecated controllers field (#5125) 
* chore(config): remove deprecated controllers field
 2024-09-23 11:45:34 -04:00
Irena Rindos eb33649ded (clientagentcmd): plumb thru env var (#5123) 
* (clientagentcmd): plumb thru env var
 2024-09-20 12:33:48 -04:00
Ryan Derr 913e6d755f ICU-11661 Add scope name in options slice for authorized-sessions (#5108) 2024-09-13 15:09:38 -05:00
Irena Rindos 83b61275d5 (cmd): unhide client agent commands (#5097) 2024-09-11 11:20:18 -04:00
Jeff Mitchell 66af7dba98 Allow reloading some server timings (#5071) 
Allows changing grace period and a few other things timing-related via
HUP instead of just a restart.

Tested manually via config changes and HUP.
 2024-09-04 15:40:44 -04:00
Hugo 1c62470ba6 chore(cmd): Move FlagClientAgentPort and flagTargetDefaultPort to uint16 2024-08-21 13:55:58 +01:00
Hugo bf9dbd818e chore(cmd): Remove IntVar and move to Int64Var 2024-08-21 13:55:58 +01:00
Hugo 3195dcba4e chore(cmd): Remove UintVar and move to Uint64Var 2024-08-21 13:55:58 +01:00
Damian Debkowski 4131c4b324 feat(cmd): display remote storage states for workers 2024-07-17 14:23:11 -04:00
Johan Brandhorst-SatzkornandJeff Mitchell c6f3c375f3 api: remove deprecated grant_scope_id field (#4886) 
* api: remove deprecated grant_scope_id field

The grant_scope_id field was deprecated in 0.15.0, so we can remove
it for 0.17.0.

* Fix tests

* Fix more tests

* Remove an option and some related code that stuck around

* Fix bats tests

---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2024-06-17 12:09:33 -07:00
Jeff Mitchell d547e0d459 Add test ability to reinitialize worker auth roots on startup (#4895) 2024-06-17 12:26:55 -04:00
Johan Brandhorst-Satzkorn ec289420d3 clientagentcmd: use "localhost" to call client agent (#4816) 
The client agent serves on "localhost:9300" by default. It appears
on some systems this resolves to ::1:9300 and on some systems
127.0.0.1:9300. We should use the same address on the client
as the server to avoid any incompatibilities between systems.
 2024-05-22 14:17:30 -07:00
Todd 6936a5448c update status cli to optionally return some fields (#4810) 2024-05-22 09:51:58 -07:00
Johan Brandhorst-Satzkorn 8ff18f6c3c internal/cmd: rename ferry to client-agent 
Renames the ferry command and related flags and env vars to
client-agent following the new naming decision.
 2024-05-22 09:51:58 -07:00
Hugo 2983f80eaa fix(cmd): Support account attribute maps 2024-05-20 16:06:35 +01:00
Johan Brandhorst-Satzkorn 111b8fbecf internal/cmd/ferry: add sessions command (#4800) 2024-05-15 13:10:18 -07:00
Irena Rindos 6f09819e9f chore: fix workers tag cmd help strings (#4780) 2024-05-08 11:52:16 -04:00
Michael Milton f7e59d5d04 Add hidden ferry pause and resume commands (#4771) 
* Add hidden ferry pause and resume functions

* add check for 200 status

* include pause/resume status in ferry status, fix output

* put error string back to previous state
 2024-05-06 17:54:27 -04:00
Kerim Satirli e54519975b adds missing space in mlock warning (#4286) 2024-05-02 17:36:45 -04:00
dani 1a77e4da86 Boundary Plugin MinIO (#4621) 
feat(storage): Add storage support for MinIO via new built-in plugin
 2024-04-12 11:28:40 -04:00
Elim Tsiagbey 2c140b1e09 feat: Local Storage State API & CLI 
- add `local_storage_state` value to API & CLI
 2024-04-05 16:47:22 -04:00
Damian Debkowski aea473c77b feat: new worker config for minimumAvailableCapacity 2024-04-05 16:45:52 -04:00
Jeff Mitchell d396a33930 Fix controller-only in dev not showing events (#4594) 2024-04-03 20:56:51 -04:00
Todd 95c507fad5 Add hidden ferry commands and auto adding tokens to ferry daemon (#4572) 
* Add boundary ferry command (#4462)

* Add boundary ferry status (#4463)

* Add sending auth token automatically to ferry daemon (#4465)

* Hide ferry cmds, background error msgs, and dont retry background add-token requests (#4571)
 2024-03-25 15:04:13 -07:00
Todd cb1e9b570b Add CLI flags for creating an alias with a target (#4512) 
* Add CLI flags for creating an alias with a target

* Add bats tests
 2024-03-15 09:36:34 -07:00
Jeff Mitchell 7105270cd5 Make TestServer_ReloadWorkerTags non-parallel 
This will hopefully help with flakiness.

Note: this was tested on the Ent side
 2024-03-14 14:25:17 -04:00
Jeff Mitchell 19b19d6756 Comment out parallel statements causing test failures (#4528) 
It hasn't been investigated why this is happening (getting a number of
403 errors) but for now removing parallel fixes it.
 2024-03-13 21:12:26 -04:00
Jeff Mitchell 9408b2b299 Add some more fixes caught by race detector (#4488) 2024-03-07 14:46:10 -05:00
Irena Rindos e80e9a6da5 feat(dev): create initial alias targets for boundary dev (#4433) 
* feat(dev): create initial alias targets for boundary dev
 2024-02-29 15:52:27 -08:00
Todd 24a2089db8 Add aliases to table format output for target reads (#4416) 2024-02-29 15:52:27 -08:00
Todd 305bb09c35 Treat alias values like other required fields in API and CLI (#4404) 
* Treat Alias values like other required fields in API and CLI

* Fix protoc versions since we recently rebased on main which uses updated version
 2024-02-29 15:52:27 -08:00
Todd a6c96d69ae Add TargetAliasAuthorizeSessionArgumentsHostId api options (#4397) 
* Add host id api option
 2024-02-29 15:52:27 -08:00
Irena Rindos ba21e076bb cli(aliases): Support aliases for connect and targets in the CLI (#4356) 
* cli(aliases): Support aliases for boundary connect and boundary targets CLI
 2024-02-29 15:52:27 -08:00
Todd 78e10864c4 Add alias CLI CRUDL commands (#4353) 
* Add alias CLI CRUDL commands
 2024-02-29 15:51:24 -08:00
Michael Milton 2e69d59dd2 feat(billing): Add cli subcommand for monthly active user counts 2024-02-23 15:44:10 +00:00
Jeff Mitchell c3297bb96f Remove worker type from CLI output (#4396) 
This does not currently remove the field from the message on the API but
since it will now always show `pki` it's meaningless and causing
confusion for some users.
 2024-02-23 10:33:57 -05:00
Jeff MitchellandDamian Debkowski 35cef97bd4 Linter fixes PR 3 (#4415) 
* Linter fixes

* fix(bsr): update test to register TEST protocol once

---------

Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
 2024-02-16 08:30:16 -05:00
Jeff Mitchell 49803e653c Linter fixes numero 2 (#4408) 2024-02-14 17:14:31 -05:00
Jeff Mitchell 25bce9e8ff Fix linter warnings 2024-02-13 15:50:11 -05:00
Louis Ruch d59f089819 feat(policies): Update SDK/API to support setting/clearing attributes (#4385) 2024-02-09 09:37:34 -08:00
Irena Rindos da30653486 commands: fix plurals (#4369) 
* commands: fix plurals
 2024-02-07 12:45:28 -05:00
ToddandJim eb6d0dbd6a Use the intercepted token always. If the keyring matches, use it from there (#4355) 
* Use the intercepted token if present, use it through the keyring if keyring contains it

* fixup! Use the intercepted token if present, use it through the keyring if keyring contains it

* Apply suggestions from code review

Co-authored-by: Jim <jlambert@hashicorp.com>

---------

Co-authored-by: Jim <jlambert@hashicorp.com>
 2024-02-06 11:46:28 -08:00
Yong Zhang e34d3bb415 Fix example scope id for role grants (#4348) 
* Rename example scope id

* revert newline at eof
 2024-02-02 17:35:05 -08:00
Todd d500f24014 fix: boundary authenticate returns an API error code when auth fails (#4342) 2024-01-31 15:11:28 -08:00
Jeff Mitchell e91c4cbfe2 Remove support for 'id' field in grants (#4290) 2024-01-25 15:58:55 -05:00
Louis Ruch 7921ce22fd test(grant): Use ID to validate version check (#4274) 
* test(grant): Use ID to validate version check

* Update docs from id to ids

* Remove 'id' in 0.16.0
 2024-01-25 13:27:22 -05:00
Louis Ruch fe6126438e chore: Fix typos (#4285) 2024-01-25 09:43:40 -08:00
dani 6a55245394 fix(cli): StoragePolicyId indent on list scopes (#4279) 2024-01-25 12:27:36 -05:00
Jeff MitchellTimothy MessierTodd
 		f5dd457b34 Multiple grant scope IDs (#4251) 
Co-authored-by: Timothy Messier <tim.messier@gmail.com>
Co-authored-by: Todd <github@quaddi.com>
 2024-01-23 14:33:09 -05:00
Todd 0dac9005c1 Boundary auth without a keyring configured behaves like -keyring-type none (#4268) 2024-01-22 16:40:23 -08:00