Commit Graph
326 Commits
Author SHA1 Message Date
Jeff Mitchell a67d5c8abb When logging urls, also log method 2020-09-16 10:21:35 -04:00
Jeff Mitchell 37e9fed2e3 Allow not destroying dev databases (#366)
This also shifts some logic around to better prepare for non-dev-mode
workloads, although it does not actually call the KMS creation functions
and initial auth method creation from non-dev commands yet.
2020-09-16 10:10:06 -04:00
Jeff Mitchell c4e2b88022 Add database URL. (#365)
* Add database URL.

This allows specification of either a file://, env://, or other string.
If it starts with file:// or env:// the actual value will be read from
those resources.

* Tidy up the KMS output

* Also run migrations in test mode when specifying the URL
2020-09-16 09:28:39 -04:00
Jeff Mitchell 4ef0c57a39 Fix r_default description typo 2020-09-16 08:53:36 -04:00
Jeff Mitchell 3c13e4765d Verbose isn't actually used right now so don't expose it; fix some wording for scope id flag 2020-09-16 08:50:43 -04:00
Jeff Mitchell 570e52cabb Add missing set-grants to role command 2020-09-16 07:03:11 -04:00
Todd Knight f96fa25157 Add Auth Account id to Auth Token response (#363) 2020-09-15 14:33:38 -07:00
Jeff Mitchell f4ad22b247 Move default port to a TCP target attribute (#361) 2020-09-15 15:20:49 -04:00
Jeff Mitchell eb88d0381a Fix default port update handling 2020-09-15 02:15:33 -04:00
Jeff Mitchell a598fdfb13 Fix targets CLI command 2020-09-15 02:09:07 -04:00
Jeff Mitchell 97985883df Fix token storage 2020-09-15 02:07:10 -04:00
Jeff Mitchell a00ee7a948 Add Result types to Go SDK and properly populate body/map fields (#358) 2020-09-15 01:08:21 -04:00
Jeff Mitchell 1b2f73d1d4 Fix some old logic in some CLI commands (#357) 2020-09-14 12:45:56 -04:00
Jeff Mitchell 6201357902 Use scope-specific token DEKs (#342) 2020-09-14 12:30:11 -04:00
Todd Knight b998591add Adding and updating host address validation checks (#350) 2020-09-12 22:07:56 -07:00
Todd Knight 33e7b4538e WorkerCoordination and GetSession API refactoring (#354)
* Possible api changes.

* Worker API update.

* Updating import alias name.

* Moving session down a level as a member of the GetSessionResponse.

* Marshal the auth flag into the GetSessionResponse proto instead of the session.
2020-09-12 21:54:18 -07:00
Jeff Mitchell 2914b4c14c Use base58 for a few more user-facing values (#356) 2020-09-12 21:43:08 -04:00
Jeff Mitchell 1f80edbffc Add missing default-port flag to targets command (#355) 2020-09-12 14:06:28 -04:00
Jeff Mitchell 41ed95bdec Remove old-style pathing (#353) 2020-09-11 17:41:03 -04:00
Jeff Mitchell c689af4306 Implement a TOFU mechanism on auth to worker (#348)
This sets us up to better support multiple connections per session at
some future point.
2020-09-10 23:25:40 -04:00
Jim e119466233 stop oplogging tokens and allow for a time skew (#343) 2020-09-10 16:37:45 -04:00
Jeff Mitchell 60396e4384 Properly populate ScopeInfo from group member actions (#340) 2020-09-09 11:37:23 -04:00
Jeff Mitchell ff0d49b6e4 Use previous method of getting recovery wrapper 2020-09-09 01:29:35 -04:00
Jeff Mitchell f8237fb945 Move some packages into SDK, out of internal 2020-09-09 01:24:25 -04:00
Jeff Mitchell 36f975a952 Add some recovery KMS functions needed for external clients (#339) 2020-09-09 01:15:29 -04:00
Jeff Mitchell f94f21fd97 Update API codes (#336) 2020-09-08 23:57:26 -04:00
Todd Knight 99d5456d7a Scopes type field and types in updates allowed (#335) 2020-09-08 16:04:19 -07:00
Todd Knight c3ecea172d Generate new version of SDK resources and Add Tests (#331) 2020-09-08 16:27:51 -04:00
Jim 96e4b1cdba add option db.WithSkipVetForWrite(true) so the db tests don't get intercepted by app validation (#332) 2020-09-07 13:20:49 -04:00
Todd Knight 1c2c078e0a Adding Authz checks that support new pathing (#328) 2020-09-04 14:48:11 -07:00
Jim 3d944a616f fix name typo (#330) 2020-09-04 17:11:51 -04:00
Jeff Mitchell 23156afa11 Add in most of the proxy flow (#326) 2020-09-03 13:24:34 -04:00
Jeff Mitchell 1822c47ef5 Migrate KMS code to the new database DEKs (#324) 2020-09-03 13:23:46 -04:00
Todd Knight c55153ff3d Fix allowed scope checks and added tests for creating in global scope. (#327) 2020-09-03 08:02:30 -07:00
Michael Gaffney 4ae3a52056 Define session database schema (#322)
* Define session database schema

* Update comments

* Add insert trigger for session state

* Add canceling state and update foreign keys to 'set null' on delete
2020-09-03 10:49:27 -04:00
Todd Knight 37e56ab46b Pathing updated to support new and old styles (#323) 2020-09-02 19:43:41 -07:00
Jim f29869b715 support for additional deks: oplog, session and token and new CreateKeysTx() (#321) 2020-09-02 14:37:19 -04:00
Jeff Mitchell ee35a92f7f Fix space issue in protobuf that apparently doesn't matter? Also apparently postgres migrations weren't run. 2020-09-02 13:38:07 -04:00
Jim f3dd62d5d8 database DEKs (#317) 2020-09-02 07:42:03 -04:00
Todd Knight 544e78b593 Target Handler and SDK CRUDL & add|set|remove-host-sets methods. (#310) 2020-09-01 15:05:46 -07:00
Todd Knight 24ec9620ca fix: Correct missed name updates to OutgoingInterceptor. 2020-09-01 10:08:18 -07:00
Jeff Mitchell c4522aa813 Update host sets and auth system to new paradigm (#319) 2020-09-01 12:31:54 -04:00
Todd Knight 0aba6db720 Enable Split Cookies (#318) 2020-09-01 09:23:41 -07:00
Jeff Mitchell a4c20164f3 Add add/remove/set hosts functions to host-sets command (#316) 2020-08-31 10:06:21 -04:00
Jim 09112d1e96 refactor and remove kms/common pkg (#315) 2020-08-29 19:06:21 -04:00
Jeff Mitchell 514856c020 Fix broken CLI output 2020-08-28 15:58:15 -04:00
Jeff Mitchell b8c8d29008 Switch ordering of CLI create/update vs static commands (#314) 2020-08-28 13:31:20 -04:00
Jeff Mitchell 1f065316ee Initial (#313) 2020-08-28 01:28:26 -04:00
Jeff Mitchell 20aef738c4 Add host-catalogs CLI command. (#312) 2020-08-28 00:17:09 -04:00
Jeff Mitchell 17ecb6f2ce Separate accounts/host catalogs/host sets into their own packages (#311) 2020-08-27 20:43:33 -04:00