CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,896 Commits 7 Branches 2 Tags
a2f8d87bfbdf454172c194f59920799c922bbfba
Commit Graph
2896 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Elim Tsiagbey a2f8d87bfb Add support for setting, adding & deleting LDAP account assoicated to a user (#3198) 2023-05-03 09:45:29 -04:00
Johan Brandhorst-Satzkorn e04438b7f8 authmethods: fix test broken by LDAP 
These tests were never updated for LDAP
 2023-05-02 18:00:24 -07:00
Johan Brandhorst-Satzkorn c503fca894 .github: fix test matrix script 
The test matrix script was excluding directories that
only contained external package tests (i.e. tests packages
with _test suffix). The following tests were not being run:

    ./internal/daemon/controller/common/scopeids
    ./internal/daemon/controller/handlers/authtokens
    ./internal/daemon/controller/handlers/groups
    ./internal/daemon/controller/handlers/host_catalogs
    ./internal/daemon/controller/handlers/host_sets
    ./internal/daemon/controller/handlers/hosts
    ./internal/daemon/controller/handlers/roles
    ./internal/daemon/controller/handlers/scopes
    ./internal/daemon/controller/handlers/sessions
    ./internal/daemon/controller/handlers/targets/tcp
    ./internal/daemon/controller/handlers/users
    ./internal/db/schema/internal/edition
    ./internal/db/schema/internal/provider
    ./internal/db/schema/migrations/oss
    ./internal/scheduler/cleaner
    ./internal/tests/api/accounts
    ./internal/tests/api/authmethods
    ./internal/tests/api/authtokens
    ./internal/tests/api/credentiallibraries
    ./internal/tests/api/credentials
    ./internal/tests/api/credentialstores
    ./internal/tests/api/groups
    ./internal/tests/api/hostcatalogs
    ./internal/tests/api/hosts
    ./internal/tests/api/hostsets
    ./internal/tests/api/managedgroups
    ./internal/tests/api/roles
    ./internal/tests/api/scopes
    ./internal/tests/api/sessions
    ./internal/tests/api/targets
    ./internal/tests/api/users
    ./internal/tests/api/workers
    ./internal/util
    ./testing/dbtest
    ./testing/internal/e2e/tests/aws
    ./testing/internal/e2e/tests/database
    ./testing/internal/e2e/tests/static
    ./testing/internal/e2e/tests/static_with_vault
 2023-05-02 17:34:39 -07:00
hashicorp-tsccr[bot]hashicorp-tsccr[bot]Michael Li
 		cc94accc4f SEC-090: Automated trusted workflow pinning (2023-04-27) (#3187) 
* Result of tsccr-helper -pin-all-workflows .

* chore: Disable cache from setup-go

---------

Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2023-05-02 16:37:11 -04:00
XingLu Wang 9d50db4c44 doc: Fix typo (#3185) 2023-05-02 16:36:20 -04:00
Haotian 762e0d7d0d fix(sql): move added file to correct folder (#3197) 
* move rename_constraints.up.sql from 67 to 69

* update sql replacement reference comments
 2023-05-01 13:16:10 -07:00
Haotian b806297afe style(db): rename constraint names to follow sql style guide (#2973) 
* programatically rename unique and foreign key constraints to enforce 'tablename_uq' and 'reftable_fkey' patterns

* manually rename unique constraints for names over 63 characters

* update changed constraint names in db update testcases
 2023-05-01 12:40:10 -07:00
Jim b974063a52 chore (boundary/dev): remove typo (#3194) 2023-05-01 15:12:17 -04:00
Jeff Mitchell c6d7dc01a0 Exit before filtering if no workers are listed (#3196) 
This is just an early error message to avoid running the filtering
function if there are no workers to begin with.
 2023-05-01 14:20:27 -04:00
Jim af1092e8e8 feat (boundary/dev): add connection info for dev ldap server when running via boundary dev (#3193) 
* chore (dev/ldap): update gldap dependency

This update fixes the dup entries returned when searching for users
and/or groups

* feat (boundary/dev): add connection info for dev ldap server
 2023-05-01 13:03:58 -04:00
Jim 667ea285be feature (boundary dev): add support for dev ldap auth method (#3192) 2023-04-28 11:35:54 -04:00
Josh Brand 9a050ec15a chore(e2e): Update test attributes for new builds (#3189) 2023-04-27 14:59:46 -04:00
Michael Li b88050a4c4 test(e2e): Fix assertion statement (#3190) 2023-04-27 13:35:52 -04:00
Hugo 5f45fb620b fix(perms): Tests use action.List in resource action set (#3188) 
`action.List` is a collection action, that is, it is not part of the set
of actions that can be executed against a single instance of any given
resource.

As part of the `ListPermissions` call, `idActions` is expected, that is,
all the actions that can be executed against a resource instance.
`action.List` will never be part of this. This commit updates the tests
to reflect this fact.
 2023-04-27 17:48:11 +01:00
Jeff Mitchell d28ea130ee Fix ListPermissions when separate id/type grants are used (#3183) 
This makes two changes:

1. ListPermissions assumed every grant string had a type field, which
   does not match all grant formats. It now infers type from ID for
   formats which do not specify type.

2. Allow ID-only grant strings to be valid so long as the type specified
   matches the type of the specified ID.
 2023-04-27 10:37:07 -04:00
Jeff Mitchell c4b987849b Bump go-bexpr dep to v0.1.12 (#3186) 
This normalizes behavior around missing map keys. See
https://github.com/hashicorp/go-bexpr/pull/38 for more information.
 2023-04-26 17:08:30 -04:00
Michael Li 6cdf9154a5 chore: Rename workflow file (#3184) 2023-04-26 12:34:27 -04:00
Michael Li cecc959a94 test(e2e): Clean up user if test fails (#3180) 2023-04-25 09:47:08 -04:00
Michael Li 33f3a5ff9c test(e2e): Add test that uses new worker resource (#3177) 2023-04-24 16:58:39 -04:00
Zhihe Li 98a6318760 Bump UI commit (#3178) 2023-04-24 11:28:36 -04:00
Jeff Mitchell 413ec67ace Fix description of port to not be optional 2023-04-21 12:40:17 -04:00
Jeff Mitchell bc47a60f2f Update sdk dep 2023-04-21 10:38:35 -04:00
Jeff Mitchell 8ae839f9ee Update api dep 2023-04-21 10:04:17 -04:00
Jeff Mitchell e7bf134710 Enhance tcp client port vet logic (#3175) 2023-04-21 09:34:59 -04:00
Jeff Mitchell 20391e3503 Add default client port to targets and use in connect command (#2767) 2023-04-21 06:50:53 -04:00
Dan Heath 6db6cc18e2 docs: Credential management documentation (#3147) 
* docs: Create credential management documentation

* docs: Copy edits

* docs: Update graphics

* docs: Additional copy edits

* docs: Fix typos

* docs: Reduce size of graphics

* docs: Fix pixel density in brokering graphic

* docs: Increase size of graphics

* docs: Fix pixel density in brokering graphic

* docs: Fix issue with brokering image size

* docs: Adjust cred brokering image width

* docs: Adjust width of brokering graphic

* docs: Specify width for gifs

* docs: Undo width settings on gifs

* docs: Test brokering gif at 75%

* doc: Test resized images in preview deployment

* docs: Resize gifs smaller

* docs: Resize gifs a bit larger

* doc: Cleanup extra graphics, test zoomable link

* docs: Test gif loop with original

* docs: Update gif with loop, fix legacy link

* docs: Clean up file names, add updated graphics

* docs: Increase size of terminal gif

* docs: Update terminal graphic

* docs: Update with larger terminal graphic

* docs: Move large graphics to DatoCMS
 2023-04-20 16:11:37 -04:00
Jim 40d888c7f2 fix (test): update how we determine when/if a test is running. (#3169) 2023-04-20 08:34:43 -04:00
Michael Li d25f4493d3 test(e2e): Improve reliability of enos docker scenario (#3167) 2023-04-19 17:03:38 -04:00
Damian Debkowski c5b1b7bbc7 fix(handler): return human readable error for json cred w/ empty object (#3109) 
* fix(handler): return human readable error for json cred w/ empty object

* fix(handler): sync error messages for create/update json cred

* fix(handler): sync error logic for create/update json cred
 2023-04-19 10:17:07 -07:00
Stan Ryzhov 5e9ffd57d4 test(e2e): add test to verify user is logged out on its auth-token deletion (#3160) 2023-04-17 22:16:55 -04:00
Hugo a69e963c87 chore: Update host plugins to the latest versions (#3164) 2023-04-17 17:40:04 +01:00
Jim a4f54cb98f refactor (events): QOL fix: turn off events for tests. (#3163) 2023-04-14 20:01:14 -04:00
dependabot[bot] 8c265bf7c1 chore(deps): bump actions/cache from 3.2.6 to 3.3.1 (#3131) 
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.6 to 3.3.1.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/69d9d449aced6a2ede0bc19182fadc3a0a42d2b0...88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-04-14 14:43:21 -04:00
Michael AnthonyandJosh Brand 073f8fe98e [QT-405] Create solo worker module (#3148) 
* Create solo worker module

---------

Co-authored-by: Josh Brand <jbrand@hashicorp.com>
 2023-04-12 14:21:23 -06:00
Michael Li 8c5464802d chore: Add write permission to milestone checker (#3155) 2023-04-10 08:46:49 -04:00
Michael Li f816611dd0 chore: Update milestone-checker to use newer version of node (#3154) 2023-04-07 14:36:35 -04:00
Michael Li 29c268d5ac chore: Fix issues detected by GitHub actions linter (#3139) 2023-04-07 12:05:05 -04:00
Stan Ryzhov c675dc07ec test(e2e): Verify different credentials are brokered to target (#3149) 
* test(e2e): Verify json credentials are brokered back

* test(e2e): Get expected json credentials from file

* test(e2e): Check private key credentials are brokered to target

* test(e2e): Regenerate test .pem file for every test
 2023-04-05 19:42:46 -04:00
Johan Brandhorst-Satzkorn c1a61b9e34 internal/tests/cluster: switch flaky test to polling (#3153) 
* internal/tests/cluster: switch flaky test to polling

Also extend deadline from 10 seconds to 1 minute, hopefully
this should fix any flakiness in this test.

* fixup! internal/tests/cluster: switch flaky test to polling
 2023-04-05 18:45:52 -04:00
Johan Brandhorst-Satzkorn ecdb77b584 internal/db/sqltest: fix sessions aggregate (#3152) 
The sessions aggregate was inserting host_id and host_set_id,
columns which are no longer present on the session table. Also
fix the test that guards against regressions like this in the future.
 2023-04-05 12:57:25 -04:00
Jim d59ca6b7d1 fix (workflows): use github ctx for repo name in legacy link checker (#3146) 2023-04-04 15:44:23 -04:00
Hugo 5926dc40ba fix(host/plugin): Remove dead code and duplicate imports 2023-04-04 18:51:04 +01:00
Hugo Vieira e467cbbfa2 feat(cmd): Display plugin host external name if present 2023-04-04 18:51:04 +01:00
Hugo Vieira 45dc8251ec feat(api): Support plugin host external_name field 2023-04-04 18:51:04 +01:00
Hugo Vieira 2ff9b8efac feat(host/plugin): Support External Name field 
The new `ExternalName` field is an optional field that is used to store
the cloud providers' human-identifiable name for a given compute
instance. This field is not user-editable, but it is kept in sync with
the cloud provider's through Boundary's `SetSyncJob`.
 2023-04-04 18:51:04 +01:00
Michael Li 26ebaefd70 test(migration): Use docker mirror (#3144) 2023-04-04 13:50:17 -04:00
Jeff MitchellandIrena Rindos bdf7bf7702 Do not allow PKI-KMS workers to have names updated via API (#3143) 
Do not allow PKI-KMS workers to have names updated via API

This would cause their public IDs to change, which we do not want.

Descriptions are also disallowed, since those come from the config file.

This also adds logic to allow upgrading from old KMS method to new, with
a test.

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>
 2023-04-03 17:44:41 -04:00
Irena RindosandDan Heath b4a8032649 docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour (#3140) 
* docs: Update website to include SIGHUP, SIGTERM, and SIGINT behaviour

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-04-03 15:58:45 -04:00
Mike Baum 55af9f3072 [QT-516] Add a step to the enos run workflow to automatically upload application logs when a scenario fails (#3137) 2023-04-03 14:42:30 -04:00
Jim 60723c070c feature (is_nil): support checking func for nil (#3142) 2023-04-03 14:20:07 -04:00