CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
958 Commits 7 Branches 2 Tags
909026ed3da9339fd889fce5f0225cfd55d7f6c4
Commit Graph
156 Commits
Author SHA1 Message Date
Jeff Mitchell 1906a7311b Fix some documentation that was not correct 
TLS listener docs were pulled from Vault but we don't actually have
SIGHUP enabled yet.
 2021-02-22 15:44:40 -05:00
Susmitha Girumala 3c33d05c96 docs: Add desktop client videos (#947) 
* Add desktop client videos

* docs: refactor desktop video style

* docs: add wrapper for tabs to load videos correctly

* docs: add desktop video to homepage
 2021-02-18 14:12:51 -05:00
Jeff Mitchell b40fb8bd07 Minor update to TLS doc 2021-02-18 13:48:13 -05:00
Jeff Mitchell 505eed246d Minor update to data encryption bang box 2021-02-18 13:46:44 -05:00
Aiman Ismail b452c1f46f Fix typo Boundary name (#946) 2021-02-18 08:28:52 -08:00
Jeff Malnick 2d850ac95c docs: clarify generated resources doc (#945) 2021-02-17 11:44:21 -08:00
Jeff Malnick 54ba53e894 docs: update link to releases page for DT client download (#944) 2021-02-17 10:28:17 -08:00
Jeff Mitchell e426fcf20e Gofumpt 2021-02-16 14:14:53 -05:00
Pete Pacent db6b54d260 Update desktop.mdx (#938) 
Add disclaimer for desktop client doc and releases link
 2021-02-16 10:17:36 -08:00
Jeff Malnick b8fe4083c1 Add initial Desktop docs (#930) 
* docs: initial desktop docs
 2021-02-12 15:38:41 -08:00
Jeff Mitchell 22462cdd84 Add read:self and cancel:self to sessions; add dev unpriv user (#923) 
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed.

* Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing.

* Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
 2021-02-11 13:14:18 -05:00
Jeff MitchellandJeff Malnick d279a906ce Allow public_cluster_addr to use an env var or file (#907) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-10 20:22:02 -05:00
Jeff Mitchell 5266eb3269 Don't error worker filters if a key isn't found, treat it as a non-match (#900) 2021-02-10 15:59:31 -05:00
Jeff Mitchell cb3980cb8c Remove list:self from main (#915) 
* Remove list:self from main

As per futher discussions, we won't be supporting this, in favor of
simply read:self and cancel:self (since listing now already filters out
items on which you have no permissions).

This doesn't remove list:self entirely from the code base as much of
that will simply be converted to read:self and cancel:self -- that will
be in a later PR. However, with this removed if we want to release we
won't expose an API publicly that isn't going to stick around.
 2021-02-05 14:01:03 -05:00
Jeff Mitchell 1afa3a4b6c Disallow an invalid grant format (#914) 2021-02-05 12:39:55 -05:00
Jeff MitchellandJeff Malnick 6d2ab34087 Add initial filtering docs (#898) 
* Add initial filtering docs

Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-01 16:03:46 -08:00
Louis Ruch d65d4dbf6f Fix examples in website (#891) 2021-01-28 20:42:35 -08:00
Jeff Mitchell 0629526319 Add read/list/cancel:self actions and support for ACL subactions. (#882) 
Update perms table in anticipation of session support for these.
 2021-01-22 16:38:19 -07:00
Pete Pacent 93394156bf Adding roadmap and release notes updates (#859) 
* Adding roadmap and release notes updates

* fixing typo
 2021-01-21 16:18:39 -08:00
Michael Gaffney c141a050e5 Document Postgres permission requirements (#871) 
* Add semantic line feeds

* Document Postgres permission requirements

Closes #823
 2021-01-15 17:32:28 -05:00
Louis Ruch 31ece74a92 Fix worker example config (#855) 2021-01-08 13:30:53 -08:00
Jeff Mitchell cca0fbea2b Fix typo on controller config docs 2021-01-06 15:32:14 -05:00
Jeff Mitchell 2323a8551c Update no-resources flag 2021-01-04 16:59:54 -05:00
Simon FreyandJeff Mitchell ea878e49fa Move listener address in worker config example (#834) 
* Move listener address in worker config example

This fixes: The address wrongly being documented as part of the `worker` block, despite belonging into the listener

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-17 10:11:35 -05:00
Manuel Aude Morales 07eb7ddc62 Update run-and-login.mdx (#833) 
Fix typo.
 2020-12-17 10:08:42 -05:00
Jeff Mitchell b809d3f12a Add kube connect subcommand (#816) 2020-12-14 16:52:11 -05:00
Jeff MalnickandJeff Mitchell d9a6bd1a60 docs: add workflow for transparent usage of Boundary by SSH client (#796) 
* docs: add workflow for transparent usage of Boundary by SSH client

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-10 12:48:06 -08:00
Jeff Mitchell c33f4fe5d7 Fix old "boundary proxy" CLI example (#804) 
Fixes #800
 2020-11-30 12:41:33 -05:00
Jeff Mitchell 1189ebdfc6 Fix wording on HA doc (client -> host) (#803) 2020-11-30 12:35:40 -05:00
Jeff Malnick 2badd4ecf8 docs: fix misleading statement about what scope a role can be created (#798) 2020-11-20 09:27:21 -08:00
Susmitha Girumala 7f1a12ecaa Update ui build to use 'admin' folder instead of 'core' (#792) 
* Update ui build to use 'admin' folder instead of 'core'

Post release of v0.1.2, ui/core folder has been renamed to ui/admin.
Update ui build scripts to be aware of the path change.

* Update packagespec to reflect "admin" ui folder change
 2020-11-18 16:29:48 -05:00
Susmitha Girumala 353360bbcf Update doc clickthrough videos for ui v0.1.2 changes (#789) 2020-11-16 16:01:29 -05:00
Jeff MalnickandJeff Mitchell 11c7c8dbe8 feat: make auth token staleness and duration configurable (#777) 
* feat: make auth token time to live and staleness configurable

* docs: add configuration docs for auth token TTL and staleness

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-16 10:39:18 -08:00
Jim ec9e69321d fix docs for adding roles and principals (#782) 2020-11-06 12:30:37 -08:00
Christian Frichot ea2e0d2be1 docs: typo on encryption page (#770) 2020-11-03 10:40:14 -05:00
Christian Frichot 7e26f0f8c8 docs: update installation steps with templated account.id grant string (#769) 2020-11-03 10:39:56 -05:00
Jeff Mitchell e2e4631929 Add ability to set public cluster address (#761) 2020-10-30 16:54:53 -04:00
Jeff MitchellandJeff Malnick 1ec3e8276f Add Unix listener docs (#750) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2020-10-26 12:10:01 -04:00
Jeff MalnickandJeff Mitchell e8d871aec2 docs: specify address for worker listener configuration (#749) 
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-10-26 11:51:41 -04:00
Karthick K 3848765560 Update systemd.mdx (#747) 
need to change ${TYPE} to server for the systemd services to work
 2020-10-25 08:07:05 -07:00
Susmitha Girumala 83e54fe088 doc: Update host set videos in "Manage Targets" to reflect v0.1.1 UI (#742) 2020-10-23 11:03:07 -07:00
Jeff Malnick 86f9752034 docs: add KMS section to controller configuration overview (#744) 
* docs: add KMS section to controller configuration overview

* docs: add config encrypt|decrypt KMS configuration guide
 2020-10-23 10:01:47 -07:00
Jeff Mitchell 09b865ab28 Add pass cred storage support (#731) 
* Add `pass` cred storage support

Make it the default on non-Windows/macOS

Document the token storage behavior
 2020-10-21 09:00:17 -04:00
Byungjin Park (BJ) 3b347d24d6 Update data-encryption.mdx (#734) 2020-10-20 11:41:53 -07:00
Byungjin Park (BJ) e8e6249ec1 Fix typo in production.mdx (#728) 2020-10-19 07:55:12 -07:00
Jeff MalnickandJeff Mitchell 49daf1b016 docs: how to install without generated resources (#713) 
* docs: add getting started with no generated resources and KMS recovery workflow

* Update website/content/docs/installing/no-gen-resources.mdx

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-10-17 16:00:55 -07:00
Jeff Malnick fb94971a99 docs: fix ExecStart command in systemd docs (#717) 2020-10-16 09:52:14 -07:00
Patrick Bernal 1c75a07cb3 fix typo (#712) 
host_catalog_id was doubled in hcl code snippet.
 2020-10-16 08:46:08 -07:00
Jeff Mitchell fc93632895 Update CORS example to reduce some confusion 2020-10-15 22:08:28 -04:00
Jeff MalnickandJeff Mitchell 685b7c1e63 docs: add details on not saving token to system key manager (#698) 
* docs: add details on not saving token to system key manager in getting started; use tabs to clean up the getting started flow

* Add more information

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-10-15 15:30:06 -07:00