Jeff Mitchell
a67d5c8abb
When logging urls, also log method
2020-09-16 10:21:35 -04:00
Jeff Mitchell
37e9fed2e3
Allow not destroying dev databases ( #366 )
...
This also shifts some logic around to better prepare for non-dev-mode
workloads, although it does not actually call the KMS creation functions
and initial auth method creation from non-dev commands yet.
2020-09-16 10:10:06 -04:00
Jeff Mitchell
c4e2b88022
Add database URL. ( #365 )
...
* Add database URL.
This allows specification of either a file://, env://, or other string.
If it starts with file:// or env:// the actual value will be read from
those resources.
* Tidy up the KMS output
* Also run migrations in test mode when specifying the URL
2020-09-16 09:28:39 -04:00
Jeff Mitchell
4ef0c57a39
Fix r_default description typo
2020-09-16 08:53:36 -04:00
Jeff Mitchell
3c13e4765d
Verbose isn't actually used right now so don't expose it; fix some wording for scope id flag
2020-09-16 08:50:43 -04:00
Jeff Mitchell
570e52cabb
Add missing set-grants to role command
2020-09-16 07:03:11 -04:00
Todd Knight
f96fa25157
Add Auth Account id to Auth Token response ( #363 )
2020-09-15 14:33:38 -07:00
Jeff Mitchell
f4ad22b247
Move default port to a TCP target attribute ( #361 )
2020-09-15 15:20:49 -04:00
Jeff Mitchell
eb88d0381a
Fix default port update handling
2020-09-15 02:15:33 -04:00
Jeff Mitchell
a598fdfb13
Fix targets CLI command
2020-09-15 02:09:07 -04:00
Jeff Mitchell
97985883df
Fix token storage
2020-09-15 02:07:10 -04:00
Jeff Mitchell
a00ee7a948
Add Result types to Go SDK and properly populate body/map fields ( #358 )
2020-09-15 01:08:21 -04:00
Jeff Mitchell
1b2f73d1d4
Fix some old logic in some CLI commands ( #357 )
2020-09-14 12:45:56 -04:00
Jeff Mitchell
6201357902
Use scope-specific token DEKs ( #342 )
2020-09-14 12:30:11 -04:00
Todd Knight
b998591add
Adding and updating host address validation checks ( #350 )
2020-09-12 22:07:56 -07:00
Todd Knight
33e7b4538e
WorkerCoordination and GetSession API refactoring ( #354 )
...
* Possible api changes.
* Worker API update.
* Updating import alias name.
* Moving session down a level as a member of the GetSessionResponse.
* Marshal the auth flag into the GetSessionResponse proto instead of the session.
2020-09-12 21:54:18 -07:00
Jeff Mitchell
2914b4c14c
Use base58 for a few more user-facing values ( #356 )
2020-09-12 21:43:08 -04:00
Jeff Mitchell
1f80edbffc
Add missing default-port flag to targets command ( #355 )
2020-09-12 14:06:28 -04:00
Jeff Mitchell
41ed95bdec
Remove old-style pathing ( #353 )
2020-09-11 17:41:03 -04:00
Jeff Mitchell
c689af4306
Implement a TOFU mechanism on auth to worker ( #348 )
...
This sets us up to better support multiple connections per session at
some future point.
2020-09-10 23:25:40 -04:00
Jim
e119466233
stop oplogging tokens and allow for a time skew ( #343 )
2020-09-10 16:37:45 -04:00
Jeff Mitchell
60396e4384
Properly populate ScopeInfo from group member actions ( #340 )
2020-09-09 11:37:23 -04:00
Jeff Mitchell
ff0d49b6e4
Use previous method of getting recovery wrapper
2020-09-09 01:29:35 -04:00
Jeff Mitchell
f8237fb945
Move some packages into SDK, out of internal
2020-09-09 01:24:25 -04:00
Jeff Mitchell
36f975a952
Add some recovery KMS functions needed for external clients ( #339 )
2020-09-09 01:15:29 -04:00
Jeff Mitchell
f94f21fd97
Update API codes ( #336 )
2020-09-08 23:57:26 -04:00
Todd Knight
99d5456d7a
Scopes type field and types in updates allowed ( #335 )
2020-09-08 16:04:19 -07:00
Todd Knight
c3ecea172d
Generate new version of SDK resources and Add Tests ( #331 )
2020-09-08 16:27:51 -04:00
Jim
96e4b1cdba
add option db.WithSkipVetForWrite(true) so the db tests don't get intercepted by app validation ( #332 )
2020-09-07 13:20:49 -04:00
Todd Knight
1c2c078e0a
Adding Authz checks that support new pathing ( #328 )
2020-09-04 14:48:11 -07:00
Jim
3d944a616f
fix name typo ( #330 )
2020-09-04 17:11:51 -04:00
Jeff Mitchell
23156afa11
Add in most of the proxy flow ( #326 )
2020-09-03 13:24:34 -04:00
Jeff Mitchell
1822c47ef5
Migrate KMS code to the new database DEKs ( #324 )
2020-09-03 13:23:46 -04:00
Todd Knight
c55153ff3d
Fix allowed scope checks and added tests for creating in global scope. ( #327 )
2020-09-03 08:02:30 -07:00
Michael Gaffney
4ae3a52056
Define session database schema ( #322 )
...
* Define session database schema
* Update comments
* Add insert trigger for session state
* Add canceling state and update foreign keys to 'set null' on delete
2020-09-03 10:49:27 -04:00
Todd Knight
37e56ab46b
Pathing updated to support new and old styles ( #323 )
2020-09-02 19:43:41 -07:00
Jim
f29869b715
support for additional deks: oplog, session and token and new CreateKeysTx() ( #321 )
2020-09-02 14:37:19 -04:00
Jeff Mitchell
ee35a92f7f
Fix space issue in protobuf that apparently doesn't matter? Also apparently postgres migrations weren't run.
2020-09-02 13:38:07 -04:00
Jim
f3dd62d5d8
database DEKs ( #317 )
2020-09-02 07:42:03 -04:00
Todd Knight
544e78b593
Target Handler and SDK CRUDL & add|set|remove-host-sets methods. ( #310 )
2020-09-01 15:05:46 -07:00
Todd Knight
24ec9620ca
fix: Correct missed name updates to OutgoingInterceptor.
2020-09-01 10:08:18 -07:00
Jeff Mitchell
c4522aa813
Update host sets and auth system to new paradigm ( #319 )
2020-09-01 12:31:54 -04:00
Todd Knight
0aba6db720
Enable Split Cookies ( #318 )
2020-09-01 09:23:41 -07:00
Jeff Mitchell
a4c20164f3
Add add/remove/set hosts functions to host-sets command ( #316 )
2020-08-31 10:06:21 -04:00
Jim
09112d1e96
refactor and remove kms/common pkg ( #315 )
2020-08-29 19:06:21 -04:00
Jeff Mitchell
514856c020
Fix broken CLI output
2020-08-28 15:58:15 -04:00
Jeff Mitchell
b8c8d29008
Switch ordering of CLI create/update vs static commands ( #314 )
2020-08-28 13:31:20 -04:00
Jeff Mitchell
1f065316ee
Initial ( #313 )
2020-08-28 01:28:26 -04:00
Jeff Mitchell
20aef738c4
Add host-catalogs CLI command. ( #312 )
2020-08-28 00:17:09 -04:00
Jeff Mitchell
17ecb6f2ce
Separate accounts/host catalogs/host sets into their own packages ( #311 )
2020-08-27 20:43:33 -04:00