CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,502 Commits 7 Branches 2 Tags
ae916727e56b51a135c3b7bd04a38c33c2768c17
Commit Graph
4502 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Johan Brandhorst-Satzkorn ae916727e5 Dockerfile: bump alpine version (#5411) 
Should hopefully resolve the wget warning
 2025-01-07 09:10:45 -08:00
Michael Li ab94d5cf59 chore(e2e): Modify bucket policy to 7 days (#5410) 2025-01-06 17:29:03 -05:00
Johan Brandhorst-Satzkorn a21f0f109a mod: update golang.org/x/net dependency (#5405) 
Fixes CVE-2024-45338, GO-2024-3333
 2025-01-03 15:33:28 -08:00
David Kanney 3b637e068c docs(CHANGELOG): Add session connection limit fix (#5404) 2025-01-03 13:34:50 -05:00
Johan Brandhorst-Satzkorn 7b30697ddd internal/session: fix race condition in connection cleanup (#5402) 
The totalClosed variable was accessed in both the Status and the Run
functions, which may be called from independent goroutines.
 2025-01-03 10:28:21 -08:00
Jeanne Franco ff68e41013 Add artifacts manifest (automatically generated) (#4992) 
* Add artifacts manifest (automatically generated)

* Add copywrite header
 2025-01-03 12:12:46 -05:00
Michael Li 629d7a93ee chore(e2e): Modify gcp label to meet format constraints (#5400) 
GCP label constraints include the following:

The value can only contain lowercase letters, numeric characters, underscores and dashes. The value can be at most 63 characters long. International characters are allowed.
 2025-01-03 10:47:08 -05:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 47538bddcc Result of tsccr-helper -log-level=info gha update -latest .github/ (#5398) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2025-01-02 11:42:50 -05:00
Michael Li 3d0f667151 chore(e2e): Update vault addresses in AWS scenarios (#5395) 2025-01-02 09:42:23 -05:00
Damian Debkowski 868d7b8a2d test(daemon): remove tests with multihop (#5397) 2024-12-30 12:21:52 -08:00
David Kanney 2342e4b644 fix(target): Assign session connection limit to SessionAuthorization.ConnectionLimit (#5396) 
* fix(target): Assign session connection limit to SessionAuthorization.ConnectionLimit

* test(target): Update TestAuthorizeSession & TestAuthorizeSessionTypedCredentials to check session connection limit
 2024-12-30 14:16:39 -05:00
Michael Li 157c305753 chore: Install tools if cache restore fails (#5394) 
On occasion, the cache restore fails, causing the test pipeline to fail due to not having tparse. This adds a failsafe in the event that there's something wrong with the cache restore.
 2024-12-23 14:55:35 -05:00
Damian Debkowski dd1482b5ac test(cluster): check worker status multiple times (#5393) 2024-12-23 11:39:58 -08:00
Johan Brandhorst-Satzkorn 1a6320794e cmd: propagate keyring reading errors (#5360) 
Reading a token from the keyring can sometimes fail for reasons
other than the token not being present in the keyring. This PR
introduces a new error used to indicate that the token requested
could not be found in the keyring and propagates errors from the
keyring up to the caller, so that the caller can act on them.

Additionally, this fixes a bug in the client cache where it would
incorrectly assume that a token had been removed from the
keyring, when in fact there was an error reading from the keyring.
 2024-12-23 09:21:18 -08:00
Damian Debkowski 98bb4c8c31 test(cluster): split tests between parallel and sequential packages (#5390) 2024-12-20 13:53:37 -08:00
Johan Brandhorst-Satzkorn 1b6b22ef4f internal/daemon/worker: improve runtime and reduce noise (#5387) 
TestRotationTicking would previously wait for 5 rotations, which is
pretty slow considering each rotation takes 20 seconds. Reduce
the number to 3, and use require instead of assert to remove
noise during flaky test runs.

This doesn't fix the flakiness of this test, but it should reduce the log spam.
 2024-12-20 12:02:22 -08:00
Dan HeathandJohan Brandhorst-Satzkorn 833ddb21ad docs: Update 0.18.x release notes (#5382) 
* docs: Update 0.18.x release notes

* docs: Update version numbers

* Apply batch of suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* docs: Add issue link and minor edits

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-12-20 10:06:03 -07:00
Michael LiandJohan Brandhorst-Satzkorn 6ed077c69e test(e2e): Add test for vault oidc provider (#5384) 
* test(e2e): Simplify vault address in docker network

* test(e2e): Add oidc test using vault

* Update enos/modules/docker_vault/main.tf

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-12-19 17:06:01 -05:00
Johan Brandhorst-Satzkorn 20f11ab01b Revert "internal/daemon: speed up multi-worker tests (#5370)" (#5386) 
Unfortunately, this started causing the enterprise tests to break in
an unexpected way. Reverting to spend some more time testing the changes.
 2024-12-19 09:29:48 -08:00
David Kanney 48e0289882 chore: bump boundary-plugin-gcp to latest version (#5381) 
* chore: bump boundary-plugin-gcp to latest version

* chore: go mod tidy
 2024-12-18 16:45:44 -05:00
Elim Tsiagbey e0eb393665 docs: Add docs for GCP DHC (#5364) 
* docs: Add docs for GCP DHC

- Add documentation for GCP dynamic host catalog
- Add changelog for GCP dynamic host catalog
 2024-12-18 15:20:19 -05:00
Dan Heath 3cb68b0afd docs: Rename directory (#5234) 2024-12-18 13:52:37 -05:00
Michael Milton ba08b8a5bc Update CHANGELOG (#5378) 2024-12-18 12:39:48 -05:00
adam buxtonandDan Heath 6e1ee86cbb add error #3001 (#5371) 
* add error #3001

* Update website/content/docs/troubleshoot/common-errors.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-12-18 10:56:06 -05:00
Elim Tsiagbey 090c1df06e chore: update boundary-plugin-gcp dependency to latest version (#5374) 2024-12-17 15:31:41 -05:00
Dan HeathandRobin Beck b442c1fa60 docs: Update meta content - CLI (#5343) 
* docs: Update meta content - CLI

* docs: Edits for consistency

* docs: More edits for consistency

* Apply batch of suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Apply batch suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Remove given id references

* Update read.mdx

* Update read.mdx

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-17 14:13:18 -05:00
Elim Tsiagbey a4f2a704fd test(e2e): add GCP dynamic host catalog e2e tests (#5294) 
* test(e2e): add GCP infra resources and tests for enos testing

- add 1 new `gcp_target` module that creates a GCP VM instance with labels for filtering
- add GCP dynamic host catalog e2e tests
 2024-12-17 14:06:14 -05:00
Johan Brandhorst-Satzkorn 862a30c389 internal/daemon: speed up multi-worker tests (#5370) 
Instead of sleeping, we can poll for the desired state. Also,
run shutdowns in parallel.
 2024-12-17 09:18:27 -08:00
Dan Heath b2bcd8f7be docs: Update release notes (#5346) 
* docs: Update release notes

* docs: Clarify affected versions, fix spacing
 2024-12-16 15:29:37 -05:00
Irena RindosandDan Heath fd8f0c1cc6 chore(docs): Remove community-only notation for KMS keys (#5164) 
* chore(docs): Remove community-only tag from kms keys

* docs: Clarify edition support

* docs: Minor edit, add `worker-auth` statement

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-12-13 09:12:53 -05:00
Johan Brandhorst-Satzkorn e5b655b9e5 Update CHANGELOG.md with 0.18.2 changes (#5361) 2024-12-12 15:54:17 -08:00
Johan Brandhorst-Satzkorn 87fc86847b all: update crypto dependency (#5356) 
This resolves a vulnerability in the SSH package that we're
not vulnerable to.
 2024-12-12 11:26:16 -08:00
dependabot[bot] aae9258f5b chore(deps): bump golang.org/x/crypto from 0.18.0 to 0.31.0 in /api (#5354) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.18.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.18.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-12 10:19:04 -08:00
Michael Li 8d7a9d7e08 Merge pull request #5347 from hashicorp/moduli-flake-worker-test 
Observed one instance of a test failure when the test failed to connect to the target after changing an API tag on the worker.
 2024-12-11 10:26:08 -05:00
Michael Li 4e59352ded Merge pull request #5340 from hashicorp/judith/edu-web-codeowners 
* allow education to merge image prs and web to control the website source

* keep boundary team permissions to approve any PR

* let education approve PRs to the website nav too

* make spacing more reasonable
 2024-12-11 09:49:09 -05:00
Michael Li 08c245cd00 test(e2e): Update test to mitigate timing flake 
Observed one instance of a test failure when the test failed to connect to the target after changing an API tag on the worker.
 2024-12-10 16:38:29 -05:00
Michael Li e3fb05a519 chore: Update service user with required permission (#5344) 2024-12-10 12:57:02 -05:00
Judith Malnick dec2f5e813 make spacing more reasonable 2024-12-09 11:01:14 -08:00
Judith Malnick 32576f273f let education approve PRs to the website nav too 2024-12-09 10:52:39 -08:00
David Kanney f62e67584e chore: Clarify GrantHash behavior when there are no GrantTuples (#5334) 
* chore: Simplify appending

* test(grants): De-dupe hash comparison

* chore(grants): Remove TODO & add clarifying comment

* test(grants): Add test cases to enforce empty grants behavior
 2024-12-06 16:45:38 -05:00
Judith Malnick d9ed6223d0 keep boundary team permissions to approve any PR 2024-12-06 13:35:54 -08:00
vanphan24Johan Brandhorst-SatzkornDan HeathstellarsquallRobin Beck
 		c32dcecb6e Update multi-hop.mdx - Added HCP-managed worker multi-hop (#5286) 
* Update multi-hop.mdx - Added HCP-managed worker multi-hop

Added new section for the use case of multi-hop through CHP-manage worker

* Update multi-hop.mdx

added link to worker tags docs page

* Update multi-hop.mdx

changed to active voice.

* adds cluster ID note

* adds multi-hop egress filter screenshot

* fixes screenshot paths

* Apply suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/connection-workflows/multi-hop.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-12-06 13:57:47 -07:00
Judith Malnick 5af4f6cc42 allow education to merge image prs and web to control the website source 2024-12-06 11:40:34 -08:00
Michael Li 5896a3b44b chore(e2e): Add object expiration policy to s3 bucket (#5298) 
* chore(e2e): Add expiration date to aws bucket objects

* chore(e2e): Add user tag to bucket
 2024-12-05 09:51:53 -05:00
Mohit KumarandDan Heath 1cf231a147 docs: clarify behavior of launchctl stop and unload for client agent (#5265) 
* docs: clarify behavior of launchctl stop and unload for client agent

* docs: update unload command and clarify permanent disabling of Boundary client agent

* docs: remove "Note" wrapper and clarify unload/reload command for Boundary client agent

* docs: Capitalize Client Agent

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-12-04 15:24:20 -05:00
Damian Debkowski 65c8af1f23 chore: update go dependency (#5303) 2024-12-04 10:58:39 -08:00
Dan HeathandRobin Beck 57b8e7830e docs: Update meta content - Operations (#5247) 
* docs: Update meta content - Operations

* Update website/content/docs/operations/session-recordings/validate-session-recordings.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:38:19 -05:00
Dan HeathandRobin Beck daf9f8b61c docs: Update meta content - Troubleshoot (#5280) 
* docs: Update meta content - Troubleshoot

* docs: Update title

* Update website/content/docs/troubleshoot/faq.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:36:55 -05:00
Dan HeathandRobin Beck c0a8775951 docs: Update meta content - API and clients (#5281) 
* docs: Update meta content - API and clients

* docs: Update titles

* Apply batch suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:34:57 -05:00
Dan HeathandRobin Beck d35175006e docs: Update meta content - Integrations and Develop Boundary (#5283) 
* docs: Update meta content - Integrations and Develop Boundary

* Update website/content/docs/developing/index.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 13:33:06 -05:00