CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,223 Commits 7 Branches 2 Tags
be074ecbb3678e181ccc1c316ecd48c9ea87957d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Louis Ruch 0a921beb42 chore: Add DHC changelog entry 2023-06-12 16:28:30 -07:00
Louis Ruch 6eb1c9919f chore: update sdk/api deps 2023-06-09 16:42:30 -07:00
Louis Ruch 99a4c1f781 chore: update sdk/api deps 2023-06-05 14:21:03 -07:00
Louis Ruch 07dbaaf052 chore(plugins): Update plugin deps (#3266) 
* chore(plugins): Update plugin deps
 2023-06-02 10:05:37 -07:00
Louis Ruch 281f217dcc feat(plugins): Refactor host plugins to boundary plugins (#3262) 2023-06-02 08:04:50 -07:00
Louis Ruch 86220fefa7 chore: Update plugin tags 2023-06-01 08:40:38 -07:00
Louis Ruch 4e5c3d6a5d Merge pull request #3251 from hashicorp/louis-mod 
chore(deps): Update plugin deps
 2023-05-31 08:53:35 -04:00
Louis Ruch 9cd82a0526 chore(deps): Update plugin deps 2023-05-31 08:49:30 -04:00
Louis Ruch 203d4bb048 fix(storage): Remove client 2023-05-31 12:18:23 +00:00
Louis Ruch f0e95d7267 docs(storage): Update comments 2023-05-31 12:18:23 +00:00
Louis Ruch 95398d3b65 fix(dev): Fix panic in controller-only dev mode 
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0xb8 pc=0x16626b0]

goroutine 1 [running]:
github.com/hashicorp/boundary/internal/cmd/commands/dev.(*Command).Run(0xc000b90000, {0xc00003e110, 0x1, 0x1})
        github.com/hashicorp/boundary/internal/cmd/commands/dev/dev.go:484 +0x490
github.com/mitchellh/cli.(*CLI).Run(0xc0003323c0)
        github.com/mitchellh/cli@v1.1.5/cli.go:262 +0x5f8
github.com/hashicorp/boundary/internal/cmd.RunCustom({0xc00003e100?, 0x60?, 0x0?}, 0x0?)
        github.com/hashicorp/boundary/internal/cmd/main.go:189 +0xa16
github.com/hashicorp/boundary/internal/cmd.Run(...)
        github.com/hashicorp/boundary/internal/cmd/main.go:95
main.main()
        github.com/hashicorp/boundary/cmd/boundary/main.go:16 +0xc7
 2023-05-31 12:18:22 +00:00
Louis Ruch 9a3006e42a feat(storage): Include type plugin in API response for buckets 2023-05-31 12:18:22 +00:00
Louis Ruch 7207353066 docs(ssh): Update docs to reflect ssh default port is not required 2023-05-31 12:18:21 +00:00
Louis Ruch 78ca8beb77 fix(cli): Update storage CLI gen and help text 2023-05-31 12:18:19 +00:00
Louis Ruch e83f5bcd4c feat(storage): Rename NewLocalFS to NewSyncingFS 2023-05-31 12:18:17 +00:00
Louis Ruch 042c46e00e test(storage): Avoid panic in test when writing to closed channel 2023-05-31 12:18:17 +00:00
Louis Ruch ba0dd857f3 feat(target): Add CLI support for storage bucket association 2023-05-31 12:18:15 +00:00
Louis Ruch 0d96a20024 feat(target): Add domain support for storage bucket association 2023-05-31 12:18:15 +00:00
Louis Ruch 7263d08bc5 feat(storage): Add target storage_bucket relation 2023-05-31 12:18:15 +00:00
Louis Ruch 1662445e8e feat(storage): Wire up storage buckets in session recording 2023-05-31 12:18:14 +00:00
Louis Ruch 7ab3c66544 feat(storage): Add support for Storage Bucket CLI 2023-05-31 12:18:14 +00:00
Louis Ruch 8ea61054cd feat(storage): Add support for Storage Bucket API 2023-05-31 12:18:14 +00:00
Louis Ruch 38723f8112 feat(storage): Add RemoteFs to storage interface 2023-05-31 12:18:13 +00:00
Louis Ruch 34942e001b feat(loopback): Create directories in object key 2023-05-31 12:18:12 +00:00
Louis Ruch 798a1f952a feat(storage): Add support for storage plugins 2023-05-31 12:18:12 +00:00
Louis Ruch 351444f1bd refact(plugin): Move host loopback plugin into internal/plugin/loopback 2023-05-31 12:18:12 +00:00
Louis Ruch def8e47f32 feat(storage): Add pluginInfo to storageBucket 2023-05-31 12:18:10 +00:00
Louis Ruch 52fbc6410c feat(storage): Add interface, options and errors 2023-05-31 12:18:09 +00:00
Louis Ruch 595a576caa chore: update changelog 2022-12-09 12:05:28 -08:00
Louis Ruch aca22cacb9 chore: Update changelog 2022-11-29 13:57:20 -08:00
Louis Ruch f23a28cf01 chore: Add white space (#2516) 2022-10-04 09:56:37 -07:00
Louis Ruch 441ca59ea3 chore: update sdk/api deps (#2505) 2022-09-28 15:44:50 -07:00
Louis Ruch b31e6a8abc cli(ssh): Use type instead of SubtypeFromId (#2497) 2022-09-26 14:04:15 -07:00
Louis Ruch b7684a857a feat(ssh): Use HostId as HostKeyAlias for connect ssh helper (#2490) 2022-09-22 17:51:30 -07:00
Louis Ruch b78d83e242 log(vault): Log formatted duration instead of nanoseconds (#2481) 2022-09-21 12:04:29 -07:00
Louis Ruch 42696d5da6 enos(smoke): Test brokered credential consumption instead of manually (#2456) 
passing private key to boundary connect
 2022-09-16 15:41:38 -07:00
Louis Ruch c73a13aa3e scheduler: log details when starting scheduler (#2459) 2022-09-15 11:44:45 -07:00
Louis Ruch 506fdfa5c3 cli(ssh): Do not print private key if consumed (#2451) 2022-09-14 12:46:34 -07:00
Louis Ruch 50490d71ae chore(targets): Improve help and errors around ssh targets (#2445) 2022-09-13 13:05:36 -07:00
Louis Ruch b908cfb860 chore: prep for next release 2022-09-13 10:16:48 -07:00
Louis Ruch 5812a42ba3 feat(scheduler): set intervals from config (#2443) 2022-09-13 10:01:49 -07:00
Louis Ruch cb8a541b02 chore: prep for next release 2022-09-07 11:38:55 -07:00
Louis Ruch d7c4c648ec bug(vault): Correctly handle credential stores with expired tokens (#2399) 
* bug(vault): Correctly handle credential stores with expired tokens

Boundary makes use of a database view to perform CRUD operations on
Vault credential stores and libraries. This view did not include
credential stores with tokens that have expired in Vault, causing
errors when attempting to perform any action against them.
 2022-09-06 07:50:15 -07:00
Louis Ruch 929a385fdb fix: move 'drop target_all_subtypes' after whx views 2022-08-24 09:33:37 -07:00
Louis Ruch 564affa294 chore: Add 0.10.2 changelog 2022-08-23 15:36:27 -07:00
Louis Ruch 66d536eb5d chore: prep for next release 2022-08-11 15:59:11 -07:00
Louis Ruch 5b3672536e chore: prep for next release 2022-08-11 14:34:00 -07:00
Louis Ruch d01f374490 bug(db): Fix credential purpose migration (#2351) 
* bug(db): Fix credential purpose migration
 2022-08-11 10:41:48 -07:00
Louis Ruch ad9a47a7f9 chore: update changelog for release 2022-08-09 15:40:30 -07:00
Louis Ruch 7fafadd70b db: Add credential_sha256 to session_credentials (#2339) 
* db: Add credential_sha256 to session_credentials
 2022-08-08 18:54:42 -07:00
Louis Ruch dcccaf1bcf bug(cmd): Ensure RunShutdownFuncs is called when an early error occurs (#2333) 
* bug(cmd): Ensure RunShutdownFuncs is called when an early error occurs
 2022-08-08 09:13:47 -07:00
Louis Ruch 82a39f8582 chore: update api/sdk deps 2022-08-05 13:22:20 -07:00
Louis Ruch 53dbd51f14 Only consume ssh brokered credentials if the target is tcp (#2323) 2022-08-05 10:22:07 -07:00
Louis Ruch 9b6b767edb chore: Update changelog 2022-08-03 10:20:59 -07:00
Louis Ruch fc25178827 bug(server): Start ops listener even if controller is nil (#2314) 2022-08-02 17:18:09 -07:00
Louis Ruch 47739566bc bug(vault): Fix token len check (#2291) 2022-07-25 11:08:06 -07:00
Louis Ruch 5c80942453 docs(credentials): Update website domain docs (#2287) 2022-07-25 10:12:10 -07:00
Louis Ruch 52c1a4f9f9 feat(targets): Support extraWorkerFilterFunc in target 2022-07-22 14:50:57 -07:00
Louis Ruch d6c1402223 bug(cli): Correctly generate private key file (#2274) 2022-07-21 15:07:01 -07:00
Louis Ruch 7d1a989ea7 feat(cli): Support using brokered private key in ssh subcommand (#2267) 
* feat(cli): Support using brokered private key in ssh subcommand
 2022-07-20 15:17:15 -07:00
Louis RuchandJeff Mitchell a17e973712 feat(credentials): Refactor credential purposes (#2260) 
* feat(credentials): Refactor credential purposes

 * Application credentials have been refactored to Brokered credentials
 * Egress credentials have been refactored to Injected Application
credentials

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2022-07-19 15:16:24 -07:00
Louis Ruch ef5ac07f02 Add ssh_private_key support for Vault libraries and targets (#2263) 
* Add support for ssh_private_key credential type in Vault libraries

* Add support for ssh_private_key credential type

* Support jsonpointer for Vault library mapping overrides
 2022-07-19 10:31:53 -07:00
Louis Ruch 4cacd0a605 bug(scheduler): Fix controller id length check (#2226) 
* bug(scheduler): Fix controller id length check

The job_run table has a foreign key to the server_controller private_id.
While this column is called a prviate_id it does not implement the wt_private_id
postgres domain type, and therefore does not have a minimum length of 10 characters.
 2022-06-22 13:20:27 -07:00
Louis Ruch 07406c2d18 chore(release): prep for next release 2022-06-20 12:26:22 -07:00
Louis Ruch 08c2e71272 chore(release): prep changelog for release 2022-06-18 13:49:28 -07:00
Louis Ruch 26bc992f38 chore(release): Update API and SDK deps 2022-06-16 17:27:17 -07:00
Louis Ruch 9671daf6e0 Revert "refactor(user_passsword) change all references of user_password into username_password (#2189)" 
This reverts commit ab58b24142.
 2022-06-16 11:11:39 -07:00
Louis Ruch 618bcb451e fix(target): fix type check (#2202) 2022-06-15 14:14:24 -07:00
Louis Ruch 5ef9496e0a feat(cli): Support credential brokering with sshpass (#2191) 2022-06-15 09:30:45 -07:00
Louis Ruch 68eb6e2bed chore(targets): remove deprecated credential libraries on target resources (#1533) 2022-06-15 08:56:24 -07:00
Louis Ruch b5a4dd0b44 Merge pull request #2174 from hashicorp/llb-static-credential-store 
Static Credential Store
 2022-06-14 13:20:50 -07:00
Louis Ruch 631de0e5e2 chore(changelog): Update changelog 2022-06-14 13:04:35 -07:00
Louis Ruch 4b365db634 feat(target): Add support for static credentials during authorize-session 2022-06-14 13:04:35 -07:00
Louis Ruch c14fe05036 feat(credential): Add support for retrieving static credentials 2022-06-14 13:04:28 -07:00
Louis Ruch 58d9d42a88 feat(session): Add support for session static credentials 2022-06-14 13:01:17 -07:00
Louis Ruch 00dfea1244 feat(target): Add support for static credential as target credential sources 2022-06-14 13:01:17 -07:00
Louis Ruch 58d546cdd4 feat(credential): Add static credential store and username_password credential 2022-06-14 13:01:17 -07:00
Louis Ruch b6ca61a7f6 refact(cred-libs): Update user_password to username_password (#2154) 
* refact(cred-libs): Update user_password to username_password
 2022-06-13 09:01:01 -07:00
Louis Ruch 9663404f1a feat(scheduler): Support unlimited job runs (#2173) 2022-06-11 13:23:28 -07:00
Louis Ruch c4285b29cc fix(target): Correctly return egress credentials assocaited with target (#2167) 2022-06-10 12:26:19 -07:00
Louis Ruch 6f4cee88bf fix(vault_store): Correctly return expected errors (#2081) 
* fix(vault_store): Correctly return errors
 2022-05-17 12:20:01 -07:00
Louis Ruch 9b48dbc2fd fix(logs): Remove erroneous scheduler run logs at first run. (#1980) 
The Scheduler is dependant on the server being inserted into the
database. Adding an upsert server call before starting scheduler
and tickers removes the race that caused log spam due to a missing
foreign key relationship.
 2022-04-12 08:17:14 -07:00
Louis Ruch e6b7b7f60a feat(db): Suppress not found events during db lookups (#1979) 2022-04-08 18:04:12 -07:00
Louis Ruch f8b27645d9 fix(scheduler): Update job run query to not error on running conflict (#1914) 2022-03-11 15:11:14 -08:00
Louis Ruch 4ed4575802 chore(fmt): make fmt 2022-02-16 15:52:37 -08:00
Louis Ruch 64fd93e088 chore(release): Bump API version and changelog for 0.7.5 2022-02-16 15:35:03 -08:00
Louis Ruch 8cab9a4315 feat(scheduler): Update job description on conflict (#1852) 2022-02-11 17:20:19 -08:00
Louis Ruch aaaf0241ff bug(host): Fix sync job failure blocking other set syncs (#1841) 
During the plugin_host_set_sync job, a single set failing to  sync
can cause all following syncs to fail.
 2022-02-04 12:02:37 -08:00
Louis Ruch 74e2bcdb52 chore(release): Bump website version to 0.7.4 2022-01-18 11:48:25 -08:00
Louis Ruch 221acff4cc chore(release): Bump Boundary version to 0.7.4 2022-01-13 14:22:47 -08:00
Louis Ruch ecbeab9035 chore(release): bump api/sdk versions 2022-01-13 14:22:37 -08:00
Louis Ruch 61fe77572e chore: make tools & make gen 2022-01-13 14:03:46 -08:00
Louis Ruch ac78ee6315 Merge pull request #1819 from hashicorp/louis-scheduler 
feat(scheduler): Add support for run now option
 2022-01-13 12:22:06 -08:00
Louis Ruch c4506ec743 feat(scheduler): Add support for run now option 2022-01-13 11:51:53 -08:00
Louis Ruch f8b2e99e11 Merge pull request #1815 from hashicorp/louis-decode-type 
feat(target): Decode based on credential type
 2022-01-10 10:45:26 -08:00
Louis Ruch a90f1f4eb1 feat(target): Decode based on credential type 2022-01-10 09:57:27 -08:00
Louis Ruch 58aca600a4 Merge pull request #1804 from hashicorp/louis-egress 
Egress credentials
 2021-12-17 12:51:01 -08:00
Louis Ruch 425a56179f feat(worker): Implement egress credentials 
Egress credentials Issued during AuthorizeSession are stored in the
session repo. These credentials are retrieved and stored in-memory on the
worker during the LookupSession call. Each proxy handler will need to
handle the credentials as required.
 2021-12-17 11:27:10 -08:00
Louis Ruch 5fe23ab14d feat(session): Store session credentials 
Creates a new session_credential table and repository functions
to add and list credentials attached to a session. All credentials
are encrypted using the session scope id.
 2021-12-17 11:26:52 -08:00
Louis Ruch ff3be7a74b Merge pull request #1802 from hashicorp/louis-recover 
feat(server): Add grpc_middleware recovery interceptor
 2021-12-16 21:03:03 -08:00