Commit Graph
599 Commits
Author SHA1 Message Date
Jim a8d75db00a prevent session state changes after session has terminated. (#540) 2020-10-06 12:16:44 -04:00
Jeff Malnick 6649c9f3a4 docs: include a "v" before version names (#549) 2020-10-06 08:43:01 -07:00
Jeff Malnick 199207aa60 docs: add complete config examples to controller and worker sections (#548) 2020-10-06 07:58:01 -07:00
Jeff Malnick b53aaadbb3 docs: break out the configuration complete examples into the main config overview (#546) 2020-10-06 07:40:29 -07:00
Jim dc379ed09f handle unlimited connections when terminating sessions. (#536) 2020-10-05 17:01:22 -04:00
Jeff Mitchell 9f11d12f6d Fix a missing authorize rename 2020-10-05 13:32:37 -04:00
Kyle MacDonald 4a5e384ee3 website: set up support for path redirection (#533)
* website: remove netlify specific _redirects file
* website: add basic support for redirects.js
2020-10-05 13:25:07 -04:00
Jim 09b43e5569 deprecate/remove LookupByName (#530) 2020-10-05 12:45:27 -04:00
Jeff Mitchell 3697f4cf3c Bump UI version 2020-10-05 12:39:31 -04:00
Todd Knight 8e6e2fc735 Session Workflow use "connect" instead of "proxy" and fix few typos for other workflow docs. (#524) 2020-10-05 09:23:04 -07:00
Jeff Malnick 475bda18e3 docs: add account resource to domain model docs (#532) 2020-10-05 08:54:06 -07:00
Jeff Mitchell 0c3d90fdd6 Erp, forgot to make gen 2020-10-05 11:03:48 -04:00
Jeff Mitchell 9237d6f787 Rename authorize to authorize-session (#531)
As pointed out by Rob, this makes it clearer what the action actually
is. We were sort of torn on it before, but I've definitely come around
to it.
2020-10-05 11:02:23 -04:00
Jeff Mitchell 0f7444a690 Create the perms table and a program to keep it up-to-date (#529) 2020-10-04 21:41:21 -04:00
Jeff Malnick 863554128a docs: add database config strings allowed (#521) 2020-10-02 18:20:54 -07:00
Jeff Mitchell d406ffc692 Fix some wording/speling 2020-10-02 20:12:02 -04:00
Jeff Mitchell 271da38765 Fix website build 2020-10-02 20:01:33 -04:00
Todd Knight f76d5aed9f Additional validation for add|set|remove methods. (#527) 2020-10-02 16:45:32 -07:00
Jeff Mitchell f8a2100603 Add various env vars to CLI (#528)
* Add auth method ID env var

* Add env var for host catalogs
2020-10-02 19:20:30 -04:00
Jeff Mitchell a1765d5838 Fix repo url 2020-10-02 14:27:58 -04:00
Jeff Mitchell 5b73367529 Update packages 2020-10-02 14:24:54 -04:00
Jeff Mitchell 6cf6f48a98 Update UI version 2020-10-02 14:23:05 -04:00
Jeff Mitchell eb4ea5d09b Prep packages-oss for beta 3 2020-10-02 14:07:12 -04:00
Jim bd547fd0d6 terminate a canceled session when its last connection is closed. (#520) 2020-10-02 10:01:46 -04:00
Jeff Mitchell ecbff200e3 Remove -x from go mod download in packagespec 2020-10-02 07:33:46 -04:00
Jeff Mitchell 43c2deddff Add permissions concepts and the beginning of the perms table (#526) 2020-10-01 23:10:23 -04:00
Todd Knight e0ad9ffbfa Make all date output be RFC1123. (#525) 2020-10-01 21:10:11 -04:00
Jeff Mitchell 8615d21a1f Remove connection from worker if in terminated state and all conns are closed, not just in canceling state 2020-10-01 20:49:13 -04:00
Todd Knight d1d94c19c8 List sessions CLI reports correct target id and status (#511)
* Including some missing session fields and improving reporting of sessions of CLI.
2020-10-01 15:57:01 -07:00
Jeff Mitchell 9bd6045c46 If the exec'd command executed on its own, don't print a term reason out, just pass through the code 2020-10-01 17:13:47 -04:00
Jeff Mitchell 3400e20fb6 Use the host_id as the HostAlias for SSH (#523)
This tells SSH to use the (random, autogen'd) host ID when doing host
key checking. That way we avoid having an IP/port mismatch every time we
connect.
2020-10-01 17:07:34 -04:00
Jeff Mitchell 617921ef65 Bump deps (#522) 2020-10-01 14:49:52 -04:00
Jeff Mitchell 70fa231377 Update dbassert 2020-10-01 13:47:20 -04:00
Todd Knight e0285a00ea Document CLI commands for session management (#514)
* Documentation for how to manage sessions using the CLI.  UI is still a TODO.

* Removing TODO under the UI tab.
2020-10-01 09:39:34 -07:00
Jeff Mitchell bf30a735dc Clean up slash suffix on -host value 2020-10-01 12:19:06 -04:00
Jeff Mitchell c3b4337b91 Add -path to boundary connect http 2020-10-01 12:16:18 -04:00
Jeff Mitchell fa700dc002 Add account ID templating (#518)
* Remove default role and create via the same mechanism as other initial resources
2020-10-01 10:51:54 -04:00
Jim 19aecfefae terminate "completed" sessions (#477) 2020-10-01 10:13:57 -04:00
Jeff Mitchell d851ab07d8 Add ability to pull user/account/auth-method ID from stored token (#517) 2020-10-01 01:52:08 -04:00
Jeff Mitchell 6ddfe407a3 Update allowed formats of ACL strings (#508) 2020-10-01 01:49:20 -04:00
Jeff Mitchell 4854f2c35f Add boundary connect http (#516) 2020-10-01 00:27:13 -04:00
Jeff Escalante 12e30dd201 fix 'edit this page' link (#512) 2020-09-30 18:29:48 -07:00
Pete Pacent 1e01f3fa1e Cleaning up doc toc (#515)
Removing external link in doc toc
2020-09-30 18:27:19 -07:00
James Bayer 0cddb443c8 Update organization.mdx (#513)
Minor addition for accuracy.
2020-09-30 18:25:12 -07:00
Jim 1e71c55920 deprecate access to underlying *sql.DB via internal/db.DB() (#506) 2020-09-30 18:11:59 -04:00
DevOps Rob 63dbf7cdc3 fixed sidebar typo (#510)
* fixed sidebar typo

* fixed remaining sidebar typo
2020-09-30 13:57:16 -07:00
Jeff Malnick cda345a00d docs: add friendly disclaimer about resource IDs to workflows (#509) 2020-09-30 13:03:47 -07:00
Michael Gaffney a9e806b673 Data warehouse (#475)
* Define initial warehouse schema

* Add session id as the primary key to the session accumulating fact table

* Insert a row to use instead of nulls in the time and date dimensions

* Add missing attributes and a partial index

* Rename files

* Refactor: move fact table to a separate migration

* Add domain types for the warehouse

* Add session connection transaction fact table

* Change columns to match ingress data types

* Add views for host dimension ingress

* Create source and target views for the host and user dimensions

* Generate random ID for dimension table primary key

* Formatting changes

* Add current dimension id to target views

* Implement upsert function for host dimension

* Use domain types for upsert function parameters

* Fix indentation

* Add wh_public_id domain type

* Fix value of type columns when the other columns are null

* Implement upsert function for user dimension

* Add warehouse domain types for timestamps and text fields

* Move fact table migrations to a higher number

* Add functions for getting the current date and current time IDs

* Rename backend to endpoint in column names

* Rename fact tables

The fact tables are actually accumulating fact tables not transactional
fact tables.

* Add default value to connection_authorized_time column

* Update session fact table

* Add session_max_seconds, session_connection_limit, and default_port to wh_host_dimension

* Move session table above connection table

* Add after insert trigger to session table for warehouse ingress

* Add fk from connection warehouse table to session warehouse table

* Implement insert trigger for session connections

* Update warehouse for a user having multiple auth accounts

* Rename warehouse columns to be consistent with operational tables

* Add connection specific columns to the connection fact table

* Update session calculations in warehouse

* Rename functions and formatting changes

* Rename session columns to match names of session states

* Implement warehouse triggers for session and connection state changes

* Run 'make migrations'

* Use a static start and end date for the warehouse date dimension

* Document warehouse functions

* Remove outdated TODO comments

* Add TODO comments for additional dimensions and fact table columns
2020-09-30 14:09:40 -04:00
Jeff Malnick d9a68ff52b docs: add manage identities workflow (#490) 2020-09-30 11:09:12 -07:00
Jeff Mitchell cefea936c3 Update ACLs to allow type=*. (#504) 2020-09-29 22:55:22 -04:00