CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
966 Commits 7 Branches 2 Tags
b967ff7f059a43171c029d8074b3f9c4ad4f97d2
Commit Graph
54 Commits
Author SHA1 Message Date
Jeff Mitchell e0099b4b85 Fix migration for Postgres 11 (#940) 2021-02-16 14:03:09 -05:00
Jeff Mitchell 9761f1deee Prep for release 2021-02-12 11:53:32 -05:00
Jeff Mitchell 0993747702 Change server default allowed origin (#931) 2021-02-12 11:04:09 -05:00
Jeff Mitchell e9da3a871d Switch on CORS by default if not specified (#928) 2021-02-11 20:10:48 -05:00
Jeff MitchellandJeff Malnick d279a906ce Allow public_cluster_addr to use an env var or file (#907) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-10 20:22:02 -05:00
Jeff Mitchell 5266eb3269 Don't error worker filters if a key isn't found, treat it as a non-match (#900) 2021-02-10 15:59:31 -05:00
Jeff Mitchell c6fa737e51 Add a duplicate authenticate:login API verb (#912) 2021-02-10 15:43:59 -05:00
Todd Knight 9576c46a4b Update changelog with fix for issue #909. 2021-02-05 13:22:18 -07:00
Louis RuchandJeff Mitchell 628a02ad15 Scope role grants (#913) 
* Add scope read grant to default roles

* Update CHANGELOG.md

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2021-02-05 09:41:48 -08:00
Jeff Mitchell 1afa3a4b6c Disallow an invalid grant format (#914) 2021-02-05 12:39:55 -05:00
Jeff Mitchell bd7322dfb8 Fix changelog whitespacing 2021-02-03 09:03:12 -05:00
Jeff Mitchell 61ec5b47e4 When running single-server mode, use public_cluster_addr if given (#904) 
When running single-server mode, use public_cluster_addr if given

Right now you don't need to specify a controller address and we use the
cluster listener address; this allows overriding it to the
public_cluster_addr if one is given.

If `controllers` is specified we allow it to be either the cluster
listener or the public cluster address if one is specified before trying
to parse and use it.
 2021-02-03 08:58:42 -05:00
Jeff Mitchell 3a3b664efb Changelog #901/902 2021-02-02 20:51:44 -05:00
Jeff Mitchell ba6c0df8ca Prep for 0.1.5 2021-01-29 18:36:14 -05:00
Jeff Mitchell 6cd97a4a6e Add support for recursive listing (#885) 2021-01-25 19:37:40 -05:00
Todd Knight 1f9fcad1cd Adding Migrate Command (#872) 2021-01-25 14:43:50 -07:00
Jeff Mitchell 717a3b52ee Add worker tagging (#862) 
This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.
 2021-01-21 16:27:20 -05:00
Jeff Mitchell 46644300d9 Switch to execabs for os/exec in connect cmd (#873) 
* Switch to execabs for os/exec in connect cmd

This is more of an abundance-of-caution change (e.g. defense in depth)
but it doesn't seem like we should be using binaries from the current
directory for `boundary connect` executions (unless given an explicit
path).

* Update changelog
 2021-01-20 12:09:55 -05:00
Jeff Mitchell dcb15cffbd Add authorized actions output on resources (#870) 2021-01-20 10:53:01 -05:00
Louis Ruch 84656dbfea ICU-747,ICU-748/refactor internal/oplog and internal/perms to use domain errors (#854) 
* Refactor internal/oplog to domain errors

* Refactor internal/perms

* Update changelog
 2021-01-13 15:50:07 -08:00
Louis Ruch 8151b30ce9 ICU-743/Domain errors internal/kms refactor (#848) 
* Domain errors internal/kms refactor

* Update changelog

* Update internal/host error op

* Incorrect error returned in read_writer
 2021-01-12 08:50:19 -08:00
Jeff Mitchell 9de928318d Skip curl output when using automatic versioning and reading (#858) 
This makes it so that the actual output is the update/delete.

Fixes #856
 2021-01-08 17:30:41 -05:00
Louis Ruch dbc796759b ICU-934/Verify controller config block (#851) 
* Verify controller config block

* update changelog
 2021-01-06 10:41:38 -08:00
Jeff Mitchell f8577519b6 Prep for 0.1.4 2021-01-05 09:26:21 -05:00
Jeff Mitchell 6580d85388 Remove erronious IsGlobalUnicast check. (#845) 
Fixes the issue raised at https://www.boundaryproject.io/docs/configuration/worker#complete-configuration-example
 2021-01-02 19:49:39 -05:00
Louis Ruch 70a5899e99 ICU-739/iam domain error refactor (#841) 
* Refactor iam errors

* Update db and host doTx error ops

* Changelog
 2020-12-23 11:00:00 -08:00
Louis Ruch bfbb179741 ICU-738/Refactor internal/db to domain errors (#815) 
* Refactor internal/db to domain errors
 2020-12-21 10:07:34 -08:00
Jeff Mitchell b5d84495a3 Fix IDs being lowercased in role grants (#839) 
Fix IDs being lowercased in role grants

Fixes #794
 2020-12-18 13:25:28 -05:00
Jeff Mitchell e6c98f1454 Add logic to error on certain invalid listener configs (#838) 
This adds logic to error on certain invalid listener config:

* If an address in the worker's "controller" set is unspecified or
multicast or global unicast, error
* If the controller's cluster address is unspecified, ensure
public_cluster_addr is set

This has been a source of some confusing behavior on some GitHub tickets
and even on the team, so preventing it is probably a good idea.

It also relaxes the restriction around controller address matching cluster address in single-server mode when using DNS names.
 2020-12-18 12:12:25 -05:00
Jeff Mitchell 0614559f80 Prep for 0.1.3 2020-12-17 15:26:59 -05:00
Jeff Mitchell a6cca576a3 Attempt canceling sessions by the client (#831) 
* Attempt canceling sessions by the client

In some circumstances (like a Ctrl-C), the client knows it's shutting
down and the TOFU token will be lost. In this case it makes sense to
cancel the session rather than have it time out. This introduces a
command enum to the handshake message which can be used for the client
to send commands to the worker -- in this case the only specified
command is to cancel the session. It doesn't occur if the session is
already timed out or if we can't authorize connections as this generally
means the session is already invalid.
 2020-12-16 17:14:47 -05:00
Jeff Mitchell a5e920bb21 changelog++ 2020-12-14 16:55:13 -05:00
Jeff Mitchell 833f29e352 Switch connection limit for default target to -1 (#814) 
This makes the initial testing workflow less confusing for users
 2020-12-09 16:05:48 -05:00
Jeff Mitchell d4a6efb363 Pass endpoint to the client (#811) 
This allows us to automatically set TLS parameters, useful for `boundary
connect http` and some other features to come.
 2020-12-09 14:45:53 -05:00
Louis Ruch 71ed04db9b Update changelog for host repo error refactor (#812) 2020-12-09 10:15:41 -08:00
Louis Ruch d8f8d60418 Allow dash in account name (#806) 
* Allow dash in account name
 2020-12-02 09:56:19 -08:00
Jeff Malnick af2d9dfe90 fix: do not print info in output that could be JSON or YAML format (#799) 
* fix: print err msg for no credentials found to stderr
 2020-11-20 09:27:44 -08:00
Jeff Mitchell fc3fe4bf51 Bump changelog version 2020-11-16 14:01:05 -05:00
Jeff MalnickandJeff Mitchell a7fca44809 Fix authz flag (#787) 
* Fix authz flag

* add changelog bug fix for authz flag

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-13 10:06:37 -05:00
Randall MoreyandSusmitha Girumala 8813952439 Ui next release update (#778) 
* Update ui version to latest for next release

* Bump up ui version to pick up org label fix

* chore: update changelog with ui scope awareness

Co-authored-by: Susmitha Girumala <susmitha@hashicorp.com>
 2020-11-05 16:22:40 -08:00
Jeff Mitchell e2e4631929 Add ability to set public cluster address (#761) 2020-10-30 16:54:53 -04:00
Jeff Malnick 038540f9ad feat: add official Dockerfile for Boundary (#755) 2020-10-29 08:44:57 -07:00
Jeff Mitchell f063b8601c Fix IPv4-only check when no port is specified (#752) 
We have behavior that causes "0.0.0.0" to only listen on IPv4, however,
it also assumed there was a port suffixed. This changes it so that it
also works with a port-less address.
 2020-10-27 10:43:50 -04:00
Jeff Mitchell 3b9ef13f17 Update UI and Changelog (#741) 2020-10-22 12:24:36 -04:00
Jeff Mitchell be498b3015 Update changelog for release 2020-10-22 09:56:23 -04:00
Jeff Mitchell 813d21565f Allow authorize-session to be invoked with target name (#737) 2020-10-22 08:40:00 -04:00
Jeff Mitchell 09b865ab28 Add pass cred storage support (#731) 
* Add `pass` cred storage support

Make it the default on non-Windows/macOS

Document the token storage behavior
 2020-10-21 09:00:17 -04:00
Jeff Malnick bfa3edbbac feat: override PG host Docker-advertised address when set (#732) 2020-10-20 21:28:57 -04:00
Jim 547ae7c802 Fix database init when locale isn't english (#736) 
* use IsMissingTableError(error)

* update changelog
 2020-10-20 21:13:01 -04:00
Jeff MalnickandJeff Mitchell bf09616ad1 docs: update changelog with worker controllers setting bug fix (#730) 
* docs: update changelog with worker controllers setting bug fix from PR-705

* Update CHANGELOG.md

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-10-19 15:02:51 -07:00