CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
856 Commits 7 Branches 2 Tags
9a9efd16e2c1def456a69efc3ddcb5b4bcec2f4e
Commit Graph
31 Commits
Author SHA1 Message Date
Jeff Mitchell f8577519b6 Prep for 0.1.4 2021-01-05 09:26:21 -05:00
Jeff Mitchell 6580d85388 Remove erronious IsGlobalUnicast check. (#845) 
Fixes the issue raised at https://www.boundaryproject.io/docs/configuration/worker#complete-configuration-example
 2021-01-02 19:49:39 -05:00
Louis Ruch 70a5899e99 ICU-739/iam domain error refactor (#841) 
* Refactor iam errors

* Update db and host doTx error ops

* Changelog
 2020-12-23 11:00:00 -08:00
Louis Ruch bfbb179741 ICU-738/Refactor internal/db to domain errors (#815) 
* Refactor internal/db to domain errors
 2020-12-21 10:07:34 -08:00
Jeff Mitchell b5d84495a3 Fix IDs being lowercased in role grants (#839) 
Fix IDs being lowercased in role grants

Fixes #794
 2020-12-18 13:25:28 -05:00
Jeff Mitchell e6c98f1454 Add logic to error on certain invalid listener configs (#838) 
This adds logic to error on certain invalid listener config:

* If an address in the worker's "controller" set is unspecified or
multicast or global unicast, error
* If the controller's cluster address is unspecified, ensure
public_cluster_addr is set

This has been a source of some confusing behavior on some GitHub tickets
and even on the team, so preventing it is probably a good idea.

It also relaxes the restriction around controller address matching cluster address in single-server mode when using DNS names.
 2020-12-18 12:12:25 -05:00
Jeff Mitchell 0614559f80 Prep for 0.1.3 2020-12-17 15:26:59 -05:00
Jeff Mitchell a6cca576a3 Attempt canceling sessions by the client (#831) 
* Attempt canceling sessions by the client

In some circumstances (like a Ctrl-C), the client knows it's shutting
down and the TOFU token will be lost. In this case it makes sense to
cancel the session rather than have it time out. This introduces a
command enum to the handshake message which can be used for the client
to send commands to the worker -- in this case the only specified
command is to cancel the session. It doesn't occur if the session is
already timed out or if we can't authorize connections as this generally
means the session is already invalid.
 2020-12-16 17:14:47 -05:00
Jeff Mitchell a5e920bb21 changelog++ 2020-12-14 16:55:13 -05:00
Jeff Mitchell 833f29e352 Switch connection limit for default target to -1 (#814) 
This makes the initial testing workflow less confusing for users
 2020-12-09 16:05:48 -05:00
Jeff Mitchell d4a6efb363 Pass endpoint to the client (#811) 
This allows us to automatically set TLS parameters, useful for `boundary
connect http` and some other features to come.
 2020-12-09 14:45:53 -05:00
Louis Ruch 71ed04db9b Update changelog for host repo error refactor (#812) 2020-12-09 10:15:41 -08:00
Louis Ruch d8f8d60418 Allow dash in account name (#806) 
* Allow dash in account name
 2020-12-02 09:56:19 -08:00
Jeff Malnick af2d9dfe90 fix: do not print info in output that could be JSON or YAML format (#799) 
* fix: print err msg for no credentials found to stderr
 2020-11-20 09:27:44 -08:00
Jeff Mitchell fc3fe4bf51 Bump changelog version 2020-11-16 14:01:05 -05:00
Jeff MalnickandJeff Mitchell a7fca44809 Fix authz flag (#787) 
* Fix authz flag

* add changelog bug fix for authz flag

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-13 10:06:37 -05:00
Randall MoreyandSusmitha Girumala 8813952439 Ui next release update (#778) 
* Update ui version to latest for next release

* Bump up ui version to pick up org label fix

* chore: update changelog with ui scope awareness

Co-authored-by: Susmitha Girumala <susmitha@hashicorp.com>
 2020-11-05 16:22:40 -08:00
Jeff Mitchell e2e4631929 Add ability to set public cluster address (#761) 2020-10-30 16:54:53 -04:00
Jeff Malnick 038540f9ad feat: add official Dockerfile for Boundary (#755) 2020-10-29 08:44:57 -07:00
Jeff Mitchell f063b8601c Fix IPv4-only check when no port is specified (#752) 
We have behavior that causes "0.0.0.0" to only listen on IPv4, however,
it also assumed there was a port suffixed. This changes it so that it
also works with a port-less address.
 2020-10-27 10:43:50 -04:00
Jeff Mitchell 3b9ef13f17 Update UI and Changelog (#741) 2020-10-22 12:24:36 -04:00
Jeff Mitchell be498b3015 Update changelog for release 2020-10-22 09:56:23 -04:00
Jeff Mitchell 813d21565f Allow authorize-session to be invoked with target name (#737) 2020-10-22 08:40:00 -04:00
Jeff Mitchell 09b865ab28 Add pass cred storage support (#731) 
* Add `pass` cred storage support

Make it the default on non-Windows/macOS

Document the token storage behavior
 2020-10-21 09:00:17 -04:00
Jeff Malnick bfa3edbbac feat: override PG host Docker-advertised address when set (#732) 2020-10-20 21:28:57 -04:00
Jim 547ae7c802 Fix database init when locale isn't english (#736) 
* use IsMissingTableError(error)

* update changelog
 2020-10-20 21:13:01 -04:00
Jeff MalnickandJeff Mitchell bf09616ad1 docs: update changelog with worker controllers setting bug fix (#730) 
* docs: update changelog with worker controllers setting bug fix from PR-705

* Update CHANGELOG.md

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-10-19 15:02:51 -07:00
Jeff Mitchell 1f48d97327 Support for Unix domain socket listeners (#705) 
The client already supports protocol-agnostic transport so handles
unix:/// schemes.
 2020-10-16 13:45:47 -04:00
Jeff Mitchell 97e8613eb7 Fix hyphenation of resource subcommand output (#689) 
* Fix hyphenation of resource subcommand output

Fixes #686
 2020-10-15 19:29:33 -04:00
Jeff Malnick 83c2a354f2 docs: add release notes for 0.1.0 (#600) 2020-10-09 16:11:48 -07:00
Jeff MalnickandJeff Escalante 9372c6c1d9 Docs: Release docs & changelog template (#419) 
* docs: add release downloads and notes page

* docs: add changelog

* build: remove redundant page

Co-authored-by: Jeff Escalante <jescalan@users.noreply.github.com>
 2020-09-24 10:17:22 -07:00