Commit Graph
2577 Commits
Author SHA1 Message Date
Hugo abb2d50494 fix(worker): Use 16-bit int parsing for TCP port 2024-08-21 13:55:58 +01:00
Louis Ruch a3788ab978 fix(policy): Cascade delete policy when scope is deleted (#5014) 2024-08-14 09:03:17 -07:00
Sorawis Nilparuk (Bo) 350ac90a57 implement configurable getDownstreamWorker timeout (#5007)
* implement configurable getDownstreamWorker timeout

* add parsing test

* typos

* fix tests

* fix worker tests

* 0 is a valid value
2024-08-13 14:27:39 -07:00
Hugo 903039e885 fix(daemon): Return 404 if alias interceptor ResolveRequestIds fails (#5006) 2024-08-13 14:24:01 +01:00
Johan Brandhorst-Satzkorn a77769fdb6 internal/server: only use non-nil tags (#4996) 2024-08-06 09:17:40 -07:00
Damian Debkowski 5707a64b20 fix(db): remove storage_plugin_storage_bucket_secret-rewrapping-job table (#4993) 2024-08-02 09:08:16 -07:00
Jim 28b465e4b8 refact: to use go-dbw CreateItems, DeleteItems (#4974)
* refact: to use go-dbw CreateItems, DeleteItems

Latest version of go-dbw updated the signature of
CreateItems(...) and DeleteItems(...) on a happy
note this latest version of go-dbw actually does
batch inserts and updates for this functions.

* all: regenerate protos with new protoc-gen-go version
2024-08-01 11:18:53 -04:00
bbbe971ed1 docs: Move permissions to config for usage docs (#4962)
* docs: Move permissions to config for usage docs

* docs: Update permissions concepts (#4970)

* docs: Update permissions concepts

* docs: Delete comments

* docs: Structural edits and adding workflow

* docs: Fix wording

* docs: Change guide name, add resource table

* Rab manage roles refactor (#4980)

* refreshes the manage-roles docs

* adds href for common-workflows/manage-roles to configuration/identity-access-management

* docs: Fix a couple typos

* docs: Style updates

* docs: Fix image links, update alt text

* docs: Add more info/next steps sections

* docs: Remove number for single instruction

* fixes screenshot

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* updates path to resource-table.mdx

* sets aliases scope to Global

* updates aliases scope in resource table

* clarifies assigned scope id

* Update website/redirects.js

Co-authored-by: Michael Li <michael.li@hashicorp.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
2024-07-30 17:21:09 -04:00
Damian Debkowski 85b9adea81 feat(loopback): support dynamic credentials (#4982) 2024-07-30 10:15:57 -07:00
Lisbet Alvarez 126c4f55a0 chore: update ui commit to 219eba6 (#4969) 2024-07-26 10:51:15 -07:00
Irena Rindos 2191aa1d03 refact(session connection): remove session connection state table (#4617)
* refact(session connection): remove session connection state table
2024-07-23 14:19:21 -04:00
Lisbet Alvarez eb6e1b558d chore: bump ui commit to 25a99a4 (#4957) 2024-07-23 10:03:50 -07:00
Lisbet Alvarez bf41d23dbe chore: bump ui commit to 10c128e (#4950) 2024-07-22 10:33:57 -07:00
Damian Debkowski 1be0e5d413 fix: pass along storage bucket credential id for sb update job (#4947) 2024-07-22 12:06:35 -04:00
Lisbet Alvarez 59d5f854cb chore: bump ui commit to 03376f0 (#4946) 2024-07-19 11:07:08 -07:00
Danielle Miu 603719aa9b make gen for version 0.17.0 2024-07-18 11:32:24 -04:00
Lisbet Alvarez 184b1bf043 update ui commit to 96b6486 (#4942) 2024-07-17 16:09:54 -07:00
Guy J Grigsby 3316ef5228 Update attributes description for AuthenticateRequest to match proto (#4937)
update attributes description for AuthenticateRequest to match proto and generate updated code.
2024-07-17 13:21:48 -06:00
Damian Debkowski a20aae9879 update persisted storage bucket credential states from worker status 2024-07-17 14:23:11 -04:00
Damian Debkowski 4131c4b324 feat(cmd): display remote storage states for workers 2024-07-17 14:23:11 -04:00
Damian Debkowski c0cf5c4e1b feat(api): return remote storage states for worker 2024-07-17 14:23:11 -04:00
Elim Tsiagbey 11272b6c2a feat: update storage to support dependency calls 2024-07-17 14:23:11 -04:00
Damian Debkowski 00e4c5448b feat: workers filtered by sbc state 2024-07-17 14:23:11 -04:00
Elim Tsiagbey 130010a2ca feat(testing): add loopback plugin support for overriding the error state with SBC State 2024-07-17 14:23:11 -04:00
Damian Debkowski 9bc5e492f6 feat(sbc): add upsert worker storage bucket job 2024-07-17 14:23:11 -04:00
Elim TsiagbeyandDamian Debkowski 670a43ca22 feat(worker): set storage bucket states for worker status
Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
2024-07-17 14:23:11 -04:00
Damian Debkowski 162a857a29 feat(sbc): Add domain changes for SBC 2024-07-17 14:23:11 -04:00
Damian Debkowski 7a3c484147 feat(storage): add UpsertStorageBucket & GetStorageBucketStates methods 2024-07-17 14:23:11 -04:00
Elim Tsiagbey 012ec400f0 feat: Update StorageBucketSecret to StorageBucketCredentialManagedSecret
Update domain code to replace references of `StorageBucketSecret` to `StorageBucketCredentialManagedSecret`
2024-07-17 14:23:11 -04:00
Damian Debkowski 88c67e4eea feat(proto): define storage bucket state in worker status 2024-07-17 14:23:11 -04:00
Damian Debkowski dc21e714a5 feat(db): tracking storage bucket by worker 2024-07-17 14:23:11 -04:00
Lisbet Alvarez 488c4ea44e bump ui commit (#4936) 2024-07-17 08:57:41 -07:00
Jeff MitchellandJohan Brandhorst-Satzkorn 4e0c2d79ac Add grant scope IDs to role list (#4893)
This adds grant_scope_ids in the output of role listing. The lookup for grant scope IDs was changed to allow taking in a set of roles instead of just a single role, and the results are collated afterwards.

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-06-25 13:05:52 -04:00
Michael Li e2872275dc chore: Update UI version (#4897) 2024-06-20 11:11:51 -04:00
Johan Brandhorst-SatzkornandJeff Mitchell c6f3c375f3 api: remove deprecated grant_scope_id field (#4886)
* api: remove deprecated grant_scope_id field

The grant_scope_id field was deprecated in 0.15.0, so we can remove
it for 0.17.0.

* Fix tests

* Fix more tests

* Remove an option and some related code that stuck around

* Fix bats tests

---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
2024-06-17 12:09:33 -07:00
Jeff Mitchell d547e0d459 Add test ability to reinitialize worker auth roots on startup (#4895) 2024-06-17 12:26:55 -04:00
Irena Rindos b54608b9f2 worker auth: use new previous pkix field (#4894)
* worker auth: use new previous pkix field
2024-06-14 13:20:50 -04:00
Irena RindosandDanielle Miu 61e7ab4738 Allow descriptions to contain newlines and other whitespace (#2599)
* Allow names and descriptions to contain newlines and other whitespace

* separate validate name from validate description

* update changelog

---------

Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
2024-06-06 13:03:42 -04:00
Irena Rindos 08f391c5d6 workerauth: satisfy NodeIdLoader interface (#4870)
* workerauth: satisfy NodeIdLoader interface
2024-06-06 13:03:05 -04:00
David Bond 0c25dbad13 Use appropriate gRPC error codes for OIDC (#4877)
This commit makes modifications to the OIDC request handlers to return appropriate gRPC
status codes on errors. Before this change, boundary presents the internal error codes to
clients. This causes problems for reverse proxies, as these status codes are mapped to
non-standard HTTP response codes which are ultimately all turned into 500 responses when
4xx status codes are more appropriate and descriptive of the error returned.

Some modifications in this commit include calls to `event.WriteError` so that the
internal error is written to the controller log for visibility. Comments about
potential duplicate logs are now removed as `event.WriteError` is not called when using
functions from the `handlers` package.

Signed-off-by: David Bond <davidsbond93@gmail.com>
2024-06-06 14:59:43 +01:00
Michael Li 2467f9107a test(db): Fix skip command (#4860) 2024-06-03 10:02:32 -04:00
Michael Li e18e3ab783 test: Fix tests due to time (#4855)
* test(billing): Calculate time deltas from a fixed time

Some time calculations are impacted when using the current day vs. the start of the month.

* test(db): Conditionally skip tests at end of month

Certain tests fail when run on the last day of the month because of edge cases in the setup of test data (for example, if today is May 31 and NZ time is June 1). This adds conditional logic to skip those tests when run on the last day of a month.

* CR: typo
2024-05-31 17:08:57 -04:00
Todd e0a7c9acdd Document the deprecation of include_terminated (#4602)
* Document the deprecation of include_terminated

* Update the changelog
2024-05-24 12:04:08 -07:00
Sepehr 1f48ba5d1a Telemetry: storage bucket proto (#4824)
* oss:feat(storage): add observation tag in proto for telemetry

* oss:feat(storage): add observation tag in proto service

* oss:feat(storage): generate proto files with changes

* oss:feat(storage): add storage bucket id to target proto
2024-05-24 10:34:15 -07:00
Uruemu S Aganbi 1aa8c2e1d7 Add observation tags for Session Recording Service (#4825)
* Add observation tags to session_recording.proto

* remove scope_info observation tags

* Remove quotes and add tag to storage_bucket_id

* Add tags for session recording service

* Update proto definitions

- Remove gotags on messages
- Remove quotes
2024-05-24 11:30:48 -04:00
Johan Brandhorst-Satzkorn ec289420d3 clientagentcmd: use "localhost" to call client agent (#4816)
The client agent serves on "localhost:9300" by default. It appears
on some systems this resolves to ::1:9300 and on some systems
127.0.0.1:9300. We should use the same address on the client
as the server to avoid any incompatibilities between systems.
2024-05-22 14:17:30 -07:00
Johan Brandhorst-Satzkorn a1391db090 internal/cmd: rename ferry files to client_agent (#4815)
This was missed in the big rename PR
2024-05-22 13:49:06 -07:00
Johan Brandhorst-SatzkornandRobin Beck e64443c66f Rename daemon CLI command to cache (#4808)
* internal/cmd/wrapper: add deprecation wrapper

The deprecation wrapper can be used to display a warning to callers
when a command is deprecated.

* all: rename daemon to cache

Rename the boundary daemon command to boundary cache. This
avoids confusion with future client/daemons.

* changes daemon to cache in nav

---------

Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
2024-05-22 11:11:48 -07:00
Todd 6936a5448c update status cli to optionally return some fields (#4810) 2024-05-22 09:51:58 -07:00
Johan Brandhorst-Satzkorn 8ff18f6c3c internal/cmd: rename ferry to client-agent
Renames the ferry command and related flags and env vars to
client-agent following the new naming decision.
2024-05-22 09:51:58 -07:00