CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,455 Commits 7 Branches 2 Tags
cad044926f7da1b2bc9bdeca09481e6e2db47d64
Commit Graph
3455 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Li cad044926f chore(e2e): Add always condition (#3866) 2023-10-19 11:09:09 -04:00
Michael Li 7d581abac7 test(e2e): Add check for vault worker filters (#3859) 2023-10-19 09:08:10 -04:00
Jeff Mitchell eb20b80c71 Migrate some credential bits around (#3864) 2023-10-18 17:48:44 -04:00
Dan Heath a601316efd docs: Update release notes (#3852) 
* docs: Update release notes

* docs: Update link to github advisory
 2023-10-18 13:41:39 -04:00
Michael Li 7f596bafa9 test(bats): Fix grant due to deprecation (#3853) 2023-10-17 13:42:11 -04:00
Hugo b6debe93a5 chore: Bump Boundary version 2023-10-17 15:58:17 +01:00
Hugo 2afe33fb94 chore: Update CHANGELOG for v0.14.1 2023-10-17 15:58:17 +01:00
Hugo a6de891c53 chore: Bump gRPC to v1.58.3 
gRPC v1.58.3 fixes a vulnerability in the HTTP stack where a malicious
HTTP/2 client which rapidly creates requests and immediately resets them
can cause excessive server resource consumption.

See https://github.com/grpc/grpc-go/pull/6708 for more details.
 2023-10-17 15:58:17 +01:00
Michael Li 609357c483 test(e2e): Add test for creating an auth method (#3846) 
* test(e2e): Add test for creating an auth method

* CR: Add an additional check for user auto-creation
 2023-10-17 09:41:42 -04:00
Adam BouhmadJohan Brandhorst-SatzkornDan HeathJeff Mitchell
 		7d57a99e34 README Updates (#3760) 
* Update README.md

* Update README.md

* Update README.md

simplfy the boundary messagaging

* Update README.md

* Upload Boundary Desktop GIF for readme

* Add Boundary Desktop GIF example

* Update README.md to include gif of Desktop Client

* Update gif example

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md

* Update README.md to include "What is Boundary" video

* Update README.md

* Update README.md

* Update README.md

* Update README.md

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update README.md

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update README.md

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update README.md

* Update README.md

* Update README.md

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update README.md

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update Readme

* Overhaul Readme: Structure, GIFs and more

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2023-10-12 15:49:09 -07:00
HugoandHugo 774832f23e chore: Bump to Go version 1.21.3 (#3820) 
Go 1.21.3 fixes a vulnerability in the HTTP stack where a malicious
HTTP/2 client which rapidly creates requests and immediately resets them
can cause excessive server resource consumption.

More detail in https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo

Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>
 2023-10-12 17:17:25 +01:00
dependabot[bot] dc51613fba chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#3827) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 08:44:46 -04:00
dependabot[bot] c319b3bfc3 chore(deps): bump golang.org/x/net in /plugins/kms/mains/ocikms (#3829) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:33:07 -04:00
dependabot[bot] 7cb634197b chore(deps): bump golang.org/x/net in /plugins/kms/mains/azurekeyvault (#3826) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:32:20 -04:00
dependabot[bot] c510732257 chore(deps): bump golang.org/x/net in /plugins/kms/mains/transit (#3830) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:29:41 -04:00
dependabot[bot] fb6bd61aa6 chore(deps): bump golang.org/x/net in /plugins/kms/mains/alicloudkms (#3828) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:26:43 -04:00
dependabot[bot] 1afcefcd7b chore(deps): bump golang.org/x/net in /plugins/kms/mains/awskms (#3831) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:26:07 -04:00
dependabot[bot] 52a7295668 chore(deps): bump golang.org/x/net in /plugins/kms/mains/gcpckms (#3832) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:24:57 -04:00
dependabot[bot] a6433a479f chore(deps): bump golang.org/x/net in /plugins/boundary/mains/aws (#3835) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:24:24 -04:00
dependabot[bot] ef01825aee chore(deps): bump golang.org/x/net from 0.9.0 to 0.17.0 in /sdk (#3833) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:23:30 -04:00
dependabot[bot] 19f2f35ad2 chore(deps): bump golang.org/x/net in /plugins/boundary/mains/azure (#3834) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:22:58 -04:00
dependabot[bot] 1f598988e6 chore(deps): bump actions/setup-python from 4.7.0 to 4.7.1 (#3837) 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.7.0 to 4.7.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/61a6322f88396a6271a6ee3565807d608ecaddd1...65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 06:21:39 -04:00
Jim 1ed0a13004 refact (kms): convert to the new stdlib slices pkg (#3836) 2023-10-11 20:45:50 -04:00
Dan Heath 8e985488ba docs: Clarify SSH options and session recording (#3749) 
* doc: Clarify SSH options and session recording

* docs: Copy edits based on review feedback

* docs: Update Note to match revision
 2023-10-11 15:22:09 -04:00
Dan Heath 3cd9c241f9 docs: Update worker auth storage path (#3759) 2023-10-11 15:12:08 -04:00
Mark Collao d42369551a Update security-scan.yml 2023-10-11 12:55:04 -05:00
Dan HeathandAdam Bouhmad c979012638 Dheath hashiconf assembly (#3818) 
* docs: Update ldap status

* docs: Add new `remote-command` option

* docs: Update terminology

* docs: Add health check metric

* docs: get rid of blank line

* docs: Add copy edits from review feedback

* docs: Update storage bucket credentials doc

* docs: Add new lines to make code blocks readable

* docs: Edits from code review

* docs: Clarify paragraph on credential rotation

* docs: Update field definition in domain model

* docs: Release notes 0.14.0

* docs: Update LDAP entry

* docs: Revise dynamic credential description

* docs: Add superscripts

* docs: Add worker health metric, reorder items

* docs: Fix typo

* Update website/content/docs/release-notes/v0_14_0.mdx

Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>

* docs: Updates from code review

* docs: Add default port deprecation

---------

Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>
 2023-10-11 11:32:44 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] ae85c5d7ff Result of tsccr-helper -log-level=info -pin-all-workflows . (#3786) 
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
 2023-10-11 09:17:52 -04:00
irenarindos ce0d5d7ce7 chore: update changelog to include Next 2023-10-11 08:16:37 -04:00
Michael Li 578d87081a test(e2e): Add test with scp operations (#3812) 
* chore(e2e): Allow ssh to targets to assist with debugging

* test(e2e): Add test with scp operations

* CR: Use io.CopyN to optimize memory allocation

This mitigates the need to allocate a 256K string
 2023-10-10 14:55:51 -04:00
Michael Li 43ae62506f Revert "chore(e2e): Set terraform version to 1.5 until issue is addressed (#3797)" (#3815) 
This reverts commit 031e143dfb.
 2023-10-10 12:07:06 -04:00
Michael Li 9c9e033271 chore(enos): Move terraform-enos-aws-boundary to boundary (#3773) 
* chore(enos): Move `terraform-enos-aws-boundary` to `boundary`

* chore(enos): Rename module tag

* chore(enos): Refactor module names

* fixup! chore(enos): Move `terraform-enos-aws-boundary` to `boundary`

* fixup! chore(enos): Move `terraform-enos-aws-boundary` to `boundary`

* chore(enos): Refactored hard-coded module tag
 2023-10-10 09:28:04 -04:00
Michael Li 9acff95fd6 chore(e2e): Add logs for aws dependencies error (#3796) 2023-10-09 09:32:34 -04:00
Jeff Mitchell d7e44f6822 Bump nodeenrollment to remove multierrors (#3809) 2023-10-07 14:45:05 -04:00
Timothy Messier 88bb253554 fix(cli): Remove websocket message size limit (#3808) 
When the boundary client establishes a connection to the websocket used
to communicate with a worker, it was configured with a max websocket
message size of 32KiB. This was the default behavior for v1.8.7 of
nhooyr/websocket. However, there are cases where the worker can send
messages to the client that are larger than 32KiB. When this happens the
client returns an error and terminates the connection.

Notably this seems to only currently impact sessions made to SSH
Targets, although it could theoretically impact any target type
depending on the details of how the worker performs the writing of the
messages. The issue can be reproduced by attempting to scp a large
enough file from an SSH Target to the client. In this case the
connection gets terminated and results in a partial transfer of the
file.

This message size limit appears to be unnecessary, and the default
behavior is changing in v1.8.8 of nhooyr/websocket to make the message
size unlimited. Since this version is not yet released, this commit
switches the dependency to a fork with a version that is v1.8.7 plus the
patch to disable the limit. Once v1.8.8 is release this dependency can
be set back.

See:
    https://github.com/nhooyr/websocket/pull/254
    https://github.com/nhooyr/websocket/pull/256
 2023-10-06 11:45:29 -04:00
Devon Anderson 2180ad4241 Bump UI commit (#3804) 2023-10-06 08:12:14 -05:00
Jeff Mitchell 602bbcc43e Fix intermittent startup issues on slow systems (#3803) 
With a suitably slow system -- say, if you're waiting on a Windows
Terminal to output text inside a virtual machine -- the expected order
of things can be thrown off. One specific way this can happen is that
the worker can attempt to dial and have its dial fail because of the
slowness causing the dial context to time out. If, because of the
slowness, we also haven't released the log gate yet, then the event with
the failure information will be queued, along with the context that was
used.

Unfortunately, in some of these error cases, the context that was used
was the dial context instead of the system base context. In many other
places in the function it was the system base context so this is just a
mismatch, probably from code written at different times.

Normally this wouldn't be a problem as we'd fall back to the underlying
logger, but when we release the log gate, things happen differently:
it's a synchronous function and on error it causes us to abandon
system startup entirely.

This commit fixes the issue with using the incorrect context. It's an
open question whether we should change the behavior around errors when
replaying queued events, falling back to the underlying logger instead
of erroring.
 2023-10-05 20:34:57 -04:00
Jeff Mitchell fc0d43459c Bump password dep to fix issue entering password in Windows CLI (#3800) 2023-10-05 12:32:35 -04:00
Hugo b541f8ff38 chore(plugins/aws): Bump to v0.2.1 (#3798) 
This new version fixes a problem with static credentials set as
environment variables.
 2023-10-05 15:38:40 +01:00
Michael Li 031e143dfb chore(e2e): Set terraform version to 1.5 until issue is addressed (#3797) 2023-10-04 16:20:52 -04:00
Michael Li a4023b846f chore(e2e): Get logs from the postgres container (#3792) 2023-10-03 15:35:38 -04:00
Irena Rindos 4a410ef4b7 chore: update dockerfile to use alpine 3.18 (#3793) 2023-10-03 14:44:23 -04:00
Devon Anderson 642ddc53c7 Bump UI commit (#3790) 2023-10-02 17:20:16 -05:00
Timothy Messier c9b043a14b chore(ci): Remove install script for golangci-lint (#3789) 
Just run a known version from the official repository.
 2023-10-02 16:43:09 -04:00
Jim d50b069599 chore: enable security scanner (#3788) 2023-10-02 15:18:49 -04:00
Devon Anderson d2265a2ff3 Bump UI commit (#3787) 2023-10-02 09:36:43 -05:00
Devon Anderson 12b6f5faef Bump UI commitsh and update changelog (#3784) 2023-09-28 15:09:54 -04:00
Devon Anderson 75a103fc47 Bump UI commit (#3783) 2023-09-28 08:47:56 -04:00
Michael Li 16a29ae9ab chore(enos): Provide boundary edition when building UI (#3781) 2023-09-27 17:40:45 -04:00
irenarindos 8ad9efdcf8 chore: update CHANGELOG 2023-09-27 15:41:33 -04:00