CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
572 Commits 7 Branches 2 Tags
8615d21a1f8e00a003d609bca6f1dd4eef5a72ff
Commit Graph
119 Commits
Author SHA1 Message Date
Todd Knight d1d94c19c8 List sessions CLI reports correct target id and status (#511) 
* Including some missing session fields and improving reporting of sessions of CLI.
 2020-10-01 15:57:01 -07:00
Jeff Mitchell 9bd6045c46 If the exec'd command executed on its own, don't print a term reason out, just pass through the code 2020-10-01 17:13:47 -04:00
Jeff Mitchell 3400e20fb6 Use the host_id as the HostAlias for SSH (#523) 
This tells SSH to use the (random, autogen'd) host ID when doing host
key checking. That way we avoid having an IP/port mismatch every time we
connect.
 2020-10-01 17:07:34 -04:00
Jeff Mitchell bf30a735dc Clean up slash suffix on -host value 2020-10-01 12:19:06 -04:00
Jeff Mitchell c3b4337b91 Add -path to boundary connect http 2020-10-01 12:16:18 -04:00
Jeff Mitchell fa700dc002 Add account ID templating (#518) 
* Remove default role and create via the same mechanism as other initial resources
 2020-10-01 10:51:54 -04:00
Jeff Mitchell d851ab07d8 Add ability to pull user/account/auth-method ID from stored token (#517) 2020-10-01 01:52:08 -04:00
Jeff Mitchell 6ddfe407a3 Update allowed formats of ACL strings (#508) 2020-10-01 01:49:20 -04:00
Jeff Mitchell 4854f2c35f Add boundary connect http (#516) 2020-10-01 00:27:13 -04:00
Jeff Mitchell d479f307a4 Minor tweak to role output formatting 2020-09-29 20:41:32 -04:00
Jeff Mitchell a38f40606e Create default roles in scopes to allow authentication and listing scopes/auth methods (#502) 2020-09-29 20:38:16 -04:00
Jeff Mitchell c1a1f8bb1b Separate out docker dep into package (#482) 
This also then removes support for docker-based containing starting (for
now) from platforms other than windows/darwin/linux as there are build
issues on several.
 2020-09-28 16:05:15 -04:00
Jeff Mitchell cf3fa4522d Swap base58 libraries (#472) 
* Swap base58 libraries

This doesn't reduce binary size but it removes a metric ton of
dependencies.
 2020-09-26 14:01:49 -04:00
Jeff Mitchell c30fd5620e Add account add/set/remove to CLI (#473) 2020-09-26 13:58:48 -04:00
Jeff Mitchell 725abffebf Add some more text to dev flags 2020-09-25 17:40:10 -04:00
Jeff Mitchell bec3d702fb Add -database-url to dev mode (#459) 
Create default dev mode login name of "admin" and password of "password"
 2020-09-25 17:36:47 -04:00
Jeff Mitchell 220ca253be Add boundary config get-token (#455) 2020-09-25 17:06:53 -04:00
Jeff Mitchell b60e356b6c Add username to SSH as well (#441) 2020-09-25 12:26:16 -04:00
Jeff Mitchell b650695e82 Add rdp/postgres subcommands (#437) 2020-09-24 21:16:12 -04:00
Todd Knight fd0da998e8 SDK error revamp (#432) 
SDK methods now return 1 error.  To differentiate between Client errors and Server errors I've also implemented the AsServerError function which returns an *api.Error if it is an error originating from the remote server or nil otherwise.
 2020-09-24 14:34:58 -07:00
Jeff Mitchell 94f9d952be Add connect -exec and ssh subcommand support (#434) 2020-09-24 17:29:12 -04:00
Jeff Mitchell e86c11db62 Add session lifecycle info to controller's INFO log. (#431) 
This required some plumbing, but nothing major.
 2020-09-24 14:12:34 -04:00
Jeff Mitchell 10a41c914e Force worker to use the local controller when running in combined mode (#429) 2020-09-24 13:14:45 -04:00
Jeff Mitchell 41a3c66ea1 Add names to init output (#428) 2020-09-24 12:54:40 -04:00
Jeff Mitchell 7fcbffbe88 Remove not-set value. (#427) 
I don't think the conditions exist here that necessitated it being
introduced into Vault, but I do sometimes see a baffling condition where
the address coming from the flag is empty. I don't think we need this so
take it out.
 2020-09-24 12:19:00 -04:00
Jeff Mitchell 31fe9292b3 Instantiate default resources (#425) 2020-09-24 03:31:26 -04:00
Jeff Mitchell 03436a73de Update CLI output functions to show scope info and cleanup (#416) 2020-09-23 03:01:39 -04:00
Jeff Mitchell 38ce9d9eac Combine controller and worker commands (#415) 2020-09-23 01:23:10 -04:00
Jeff Mitchell 0a4669e96d Remove dev mode from controller/worker, and streamline flags on dev command (#413) 2020-09-22 21:37:37 -04:00
Jeff Mitchell 262ff06042 Add public address config option (#405) 2020-09-22 08:28:10 -04:00
Christian Frichot 475c6cdebe Fix updated help text for the authenticate base command so it aligns with the password subcommand (#401) 2020-09-22 07:51:14 -04:00
Christian Frichot 9e6c016223 Add JSON formatted output for authenticate password cli command (#402) 2020-09-22 07:50:40 -04:00
Christian Frichot 874a7180ea Fix segfault with boundary sessions help output (#403) 2020-09-22 07:50:04 -04:00
Jeff Mitchell dd06615c2e Add database initialization command (#400) 2020-09-21 20:25:16 -04:00
Christian Frichot 72de1a6916 Fix WATCHTWER ENV variable names (#389) 2020-09-21 11:09:40 -04:00
Jeff Mitchell 33b0021547 Add Sessions CLI command and add session cleanup to worker (#388) 2020-09-21 02:22:59 -04:00
Jeff Mitchell 7ff4b7f106 Send connected RPC to controller (#386) 2020-09-20 23:09:42 -04:00
Jeff Mitchell 4669c95999 Pass more session info around, make proxy UX nicer (#385) 2020-09-20 21:18:07 -04:00
Jeff Mitchell f7e48ec836 Plumb connection limit to proxy and output it (#384) 2020-09-20 16:28:00 -04:00
Jeff Mitchell edffc7863d Change connection limit to -1 for unlimited so it works with TF (#383) 
* Migrate connection limit unlimited value to -1

* Fix authorization check
 2020-09-20 15:53:49 -04:00
Jeff Mitchell 5214f14105 Work on connection authorization (#381) 2020-09-20 12:51:08 -04:00
Jeff Mitchell 5bf555cca2 Remove connection idle timeout seconds for now (#379) 2020-09-19 14:01:49 -04:00
Jeff Mitchell e002326293 Plumb timeouts to worker and set appropriate deadlines (#378) 2020-09-19 13:51:50 -04:00
Jeff Mitchell 0a3f9b8357 Rename connection idle timeout duration -> seconds and sessions max duration -> seconds (#376) 2020-09-19 11:32:38 -04:00
Jeff MitchellandJim Lambert 62baef1b7e Add multi connection parameters through targets and into session creation (#375) 
* Update protos and gen

* Add new values to targets CLI command

* Lots more plumbing of new parameters through everything

* allow fields to be set to zero value.

* Disallow set but empty name/description strings in create/update verifiers

Co-authored-by: Jim Lambert <jlambert@hashicorp.com>
 2020-09-19 10:31:49 -04:00
Jeff Mitchell 07a7e9750a Tie together the database-driven session handling with the worker and add relevant CLI comands (#370) 2020-09-19 00:18:17 -04:00
Jeff Mitchell 0a44ed3edd Fix global scope lookup (#367) 
The changed auth logic + verify logic in the scope handler pass the
parent ID for validation, which is correct, as a scope lives in its
parent ID. However, the global scope has no parent, and the changes
resulted in an empty ID being passed in rather than the global scope
itself. This fixes that lookup.
 2020-09-16 11:15:42 -04:00
Jeff Mitchell 37e9fed2e3 Allow not destroying dev databases (#366) 
This also shifts some logic around to better prepare for non-dev-mode
workloads, although it does not actually call the KMS creation functions
and initial auth method creation from non-dev commands yet.
 2020-09-16 10:10:06 -04:00
Jeff Mitchell c4e2b88022 Add database URL. (#365) 
* Add database URL.

This allows specification of either a file://, env://, or other string.
If it starts with file:// or env:// the actual value will be read from
those resources.

* Tidy up the KMS output

* Also run migrations in test mode when specifying the URL
 2020-09-16 09:28:39 -04:00
Jeff Mitchell 570e52cabb Add missing set-grants to role command 2020-09-16 07:03:11 -04:00