CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,470 Commits 7 Branches 2 Tags
aae9258f5bba5b5b53b9cd11ca157f8fbfe3b8a2
Commit Graph
4470 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] aae9258f5b chore(deps): bump golang.org/x/crypto from 0.18.0 to 0.31.0 in /api (#5354) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.18.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.18.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-12 10:19:04 -08:00
Michael Li 8d7a9d7e08 Merge pull request #5347 from hashicorp/moduli-flake-worker-test 
Observed one instance of a test failure when the test failed to connect to the target after changing an API tag on the worker.
 2024-12-11 10:26:08 -05:00
Michael Li 4e59352ded Merge pull request #5340 from hashicorp/judith/edu-web-codeowners 
* allow education to merge image prs and web to control the website source

* keep boundary team permissions to approve any PR

* let education approve PRs to the website nav too

* make spacing more reasonable
 2024-12-11 09:49:09 -05:00
Michael Li 08c245cd00 test(e2e): Update test to mitigate timing flake 
Observed one instance of a test failure when the test failed to connect to the target after changing an API tag on the worker.
 2024-12-10 16:38:29 -05:00
Michael Li e3fb05a519 chore: Update service user with required permission (#5344) 2024-12-10 12:57:02 -05:00
Judith Malnick dec2f5e813 make spacing more reasonable 2024-12-09 11:01:14 -08:00
Judith Malnick 32576f273f let education approve PRs to the website nav too 2024-12-09 10:52:39 -08:00
David Kanney f62e67584e chore: Clarify GrantHash behavior when there are no GrantTuples (#5334) 
* chore: Simplify appending

* test(grants): De-dupe hash comparison

* chore(grants): Remove TODO & add clarifying comment

* test(grants): Add test cases to enforce empty grants behavior
 2024-12-06 16:45:38 -05:00
Judith Malnick d9ed6223d0 keep boundary team permissions to approve any PR 2024-12-06 13:35:54 -08:00
vanphan24Johan Brandhorst-SatzkornDan HeathstellarsquallRobin Beck
 		c32dcecb6e Update multi-hop.mdx - Added HCP-managed worker multi-hop (#5286) 
* Update multi-hop.mdx - Added HCP-managed worker multi-hop

Added new section for the use case of multi-hop through CHP-manage worker

* Update multi-hop.mdx

added link to worker tags docs page

* Update multi-hop.mdx

changed to active voice.

* adds cluster ID note

* adds multi-hop egress filter screenshot

* fixes screenshot paths

* Apply suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-12-06 13:57:47 -07:00
Judith Malnick 5af4f6cc42 allow education to merge image prs and web to control the website source 2024-12-06 11:40:34 -08:00
Michael Li 5896a3b44b chore(e2e): Add object expiration policy to s3 bucket (#5298) 
* chore(e2e): Add expiration date to aws bucket objects

* chore(e2e): Add user tag to bucket
 2024-12-05 09:51:53 -05:00
Mohit KumarandDan Heath 1cf231a147 docs: clarify behavior of launchctl stop and unload for client agent (#5265) 
* docs: clarify behavior of launchctl stop and unload for client agent

* docs: update unload command and clarify permanent disabling of Boundary client agent

* docs: remove "Note" wrapper and clarify unload/reload command for Boundary client agent

* docs: Capitalize Client Agent

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-12-04 15:24:20 -05:00
Damian Debkowski 65c8af1f23 chore: update go dependency (#5303) 2024-12-04 10:58:39 -08:00
Dan HeathandRobin Beck 57b8e7830e docs: Update meta content - Operations (#5247) 
* docs: Update meta content - Operations

* Update website/content/docs/operations/session-recordings/validate-session-recordings.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:38:19 -05:00
Dan HeathandRobin Beck daf9f8b61c docs: Update meta content - Troubleshoot (#5280) 
* docs: Update meta content - Troubleshoot

* docs: Update title

* Update website/content/docs/troubleshoot/faq.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:36:55 -05:00
Dan HeathandRobin Beck c0a8775951 docs: Update meta content - API and clients (#5281) 
* docs: Update meta content - API and clients

* docs: Update titles

* Apply batch suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:34:57 -05:00
Dan HeathandRobin Beck d35175006e docs: Update meta content - Integrations and Develop Boundary (#5283) 
* docs: Update meta content - Integrations and Develop Boundary

* Update website/content/docs/developing/index.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:33:06 -05:00
Dan HeathandRobin Beck fae78bbb47 docs: Update meta content - HCP and Enterprise (#5284) 
* docs: Update meta content - HCP and Enterprise

* docs: Update titles

* Update website/content/docs/enterprise/licensing.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/enterprise/supported-versions.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:30:49 -05:00
Dan HeathandRobin Beck 2290ffc260 docs: Update meta content - Configuration (#5225) 
* docs: Update meta content - Configuration

* docs: Revisions

* docs: Edits

* docs: Update KMS topics

* docs: Updates credential management topics

* docs: Updates IAM topics

* docs: Updates session recording topics

* docs: Updates configuration topics

* docs: Update titles

* Apply batch suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:28:17 -05:00
Johan Brandhorst-Satzkorn c85fad27f6 internal/event: avoid reusing canceled context (#5304) 
Don't error in ReleaseGate if the context used for the original
event has been cancelled. Any error in ReleaseGate causes the
controller to terminate its startup. If a user was trying to send
a request to the Boundary controller as it started up, the context
tied to the request would be reused to attempt logging the
observation associated with the request after the logging gate
was released. This would always fail, as the context associated
with the request was canceled.

We now use a new context timeout for events logged after the release
gate is released, if the original context was canceled.
 2024-12-04 09:50:25 -08:00
Dan HeathandRobin Beck 22a9074724 docs: Update meta content - Concepts (#5224) 
* docs: Update meta content - Concepts

* docs: Revisions

* Update website/content/docs/concepts/domain-model/credentials.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/scopes.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Update exec flag description

* Update website/content/docs/concepts/filtering/events.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Update domain model descriptions

* docs: Update domain model titles

* docs: Edits for consistency

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 11:01:09 -05:00
Dan Heath 2322357c05 docs: Update meta content - Release notes (#5285) 2024-12-04 10:52:10 -05:00
Ryan Derr dc51dfba92 Update Tags For CRT (#5296) 2024-12-03 12:06:19 -06:00
Johan Brandhorst-Satzkorn 3d5c6ab33a Update release dir owner group (#5299) 
* Update release dir owner group

The old group only contains a service account. I updated it to the self managed release engineering group instead.

* Remove release engineering as code owners

Actually lets just remove this group, as per their justification in #4057
 2024-12-03 09:48:30 -08:00
hashicorp-tsccr[bot]hashicorp-tsccr[bot]Michael Li
 		b84f62fae1 SEC-090: Automated trusted workflow pinning (2024-12-01) (#5293) 
* Result of tsccr-helper -log-level=info gha update -latest .github/

* chore: Fix usage of slack-github-action

---------

Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2024-12-03 09:56:01 -05:00
Bharath Gajjala 58cc322c63 Refactor redundant append operations in test setup (#5211) 
* Refactor redundant append operations in test setup

- Simplified code by removing unnecessary if-else conditions in the wantUserIds and wantGroupIds blocks.

Fixes #5205

* chore: fmt fix
 2024-12-03 08:47:51 -05:00
Michael Li ae0ca0c5aa test(e2e): Update module to account for docker image changes (#5295) 
There were some directory changes made to the openssh server docker container. These changes were made to account for that update.
 2024-12-02 16:20:07 -05:00
Louis Ruch 088564c385 feat(aws): Update plugin dep (#5288) 
* feat(aws): Update plugin dep

* chore: Update go version
 2024-11-27 13:03:53 -08:00
Elim Tsiagbey b6458732ed chore: update module name (#5282) 
The module name for `go.mod` should be `gcp` not `aws` since it is in the `gcp` package
 2024-11-25 15:55:40 -05:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 69b60c82df Result of tsccr-helper -log-level=info gha update -latest .github/ (#5226) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2024-11-25 15:09:24 -05:00
Michael Li 66e8ec0f41 test(e2e): Fix failure in migration test (#5277) 
* test(e2e): Fix log path to avoid error

* test(e2e): Be explicit about port definition to avoid dockertest issue

* test(e2e): Add check for health
 2024-11-22 15:05:46 -05:00
Johan Brandhorst-Satzkorn 10370edf59 internal/commands/server: prevent test panic on timeout (#5249) 
Previously, if one of these tests failed to start their servers before
the timeout, there was a risk that the goroutine started to run
the server would invoke t.Errorf after the test itself had concluded.
Replace t.Errorf with fmt.Printf to avoid the panic, and include
the test name for debugging.
 2024-11-22 09:57:41 -08:00
Dan HeathandJohan Brandhorst-Satzkorn 4f9f281398 docs: Add resolved issue to release notes (#5260) 
* docs: Add resolved issue to release notes

* Update website/content/docs/release-notes/v0_18_0.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* docs: Revise gerund for standards

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-11-21 17:44:39 -05:00
Damian Debkowski bc10cbb35b chore: update dependencies (#5269) 
* chore: update go-retryablehttp

* chore: update x/net

* chore: update protobuf

* fix: missing dependency

* chore: update jwt dependency
 2024-11-21 11:12:41 -08:00
Michael Li 504050acb9 test(e2e): Add debug to search test (#5274) 
* test(e2e): Fix typo

* test(e2e): Add cache log to output on failure
 2024-11-21 13:50:19 -05:00
Robin BeckDan HeathJohan Brandhorst-Satzkorn
 		1a19f70edf Install boundary docs enhancements (#5261) 
* adds install-boundary/install-clients page

* renames install-boundary/install to deploy, adds workflow notes

* renames install-boundary/deploy, adds redirect for install-boundary/install

* adds TOC for install-boundary section

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* style fixes

* add next steps

* fixes TF configuration note

* use lowercase for Boundary installer

* removes beta warning and adds a note instead

* Apply suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-11-20 15:54:52 -07:00
Elim Tsiagbey 194629488d chore: bump gcp plugin dependency (#5266) 
This picks up latest GCP Plugin bug fixes
 2024-11-20 16:59:29 -05:00
Robin BeckDan HeathJohan Brandhorst-Satzkorn
 		a92c0c7ed2 adds target aliases and transparent sessions usage docs (#5243) 
* adds target aliases and transparent sessions usage docs

* fixes relative link

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/configuration/target-aliases/create-target-alias.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* fixes paragraph formatting

* add authenticaton requirement

* adds example link

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* clarifies host selection for session

* use DNS-like aliases in example

* fixes indentation

* Update website/content/docs/concepts/aliases.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* adds callout box for 0.16 clusters

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-11-20 13:49:07 -07:00
amitsk6Johan Brandhorst-SatzkornDan Heath
 		69fc3a47d0 docs: add ssh host key error to known issues (#5250) 
* docs: ssh error due to change in host key

* style: remove trailing whitespace

* Update website/content/docs/api-clients/client-agent.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* docs: rephrase  message

* Update website/content/docs/api-clients/client-agent.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-11-20 09:12:30 -05:00
Johan Brandhorst-Satzkorn 0c8ea69851 Update CODEOWNERS (#5259) 2024-11-19 11:37:46 -08:00
Michael Gaffney e086fd3007 test(batch): Fix data races in tests 
Fixes: 9b984b0ab6
 2024-11-19 08:49:57 -05:00
Johan Brandhorst-Satzkorn 963e276721 Update CHANGELOG.md (#5253) 2024-11-18 16:32:41 -08:00
Michael Li 820eb395a3 chore(e2e): Increase worker instance size (#5251) 
* chore(e2e): Update to use t2.small instances

Using the updated AWS SDK required more memory and was causing workers to crash.

* chore(e2e): Add identifier to aws instance
 2024-11-18 15:02:19 -05:00
Deniz Onur Duzgunandmickael e 91128ba37a ci: update the security-scanner gha token (#5112) 
* ci: update the security-scanner gha token

* security-scan : fix codeql download

---------

Co-authored-by: mickael e <mickael@hashicorp.com>
 2024-11-18 09:47:24 -05:00
Johan Brandhorst-Satzkorn a2be306eb4 More managed groups limit fixes (#5245) 
* internal/handlers/managed_groups: ensure membership lookup is unlimited

Previously, we would only show the first 10,000 members in the group,
giving the impression that a complete list was performed. Now we
list all members.

* internal/handlers/accounts: ensure group lookup is unlimited

Previously, we would only show the first 10,000 managed group
memberships. Now we list all group memberships of an account.
 2024-11-15 10:27:20 -08:00
Johan Brandhorst-Satzkorn d830bdd416 internal/auth/oidc: ensure all managed groups are tested on auth (#5242) 
Previously, we would list the managed groups with an implied
filter of db.DefaultLimit (10,000), which would incorrectly remove
a user from managed group memberships if there were more
than 10,000 managed groups in an auth method. Explicitly
set the list limit to unlimited to ensure all managed groups are
updated appropriately.
 2024-11-14 15:47:08 -08:00
Dan HeathandYoko Hyakuna 53e77e313a docs: Update meta content - Getting started (#5214) 
* docs: Update meta content - Getting started

* Update website/content/docs/getting-started/dev-mode/connect-to-dev-target.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/getting-started/index.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

---------

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
 2024-11-14 13:57:25 -05:00
Dan Heath 3d6a629c97 docs: Update meta content - Install (#5218) 2024-11-14 13:48:59 -05:00
Dan Heath 9ac1129289 docs: Update meta content - Overview (#5203) 
* docs: Update meta content - Overview

* docs: Delete extra line

* docs: Remove newlines
 2024-11-14 13:46:30 -05:00