CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,729 Commits 7 Branches 2 Tags
cf0a95f2608821e33199a2589d8deec0235b390f
Commit Graph
1729 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Timothy Messier cf0a95f260 Merge pull request #1820 from hashicorp/tmessi-fix-docker-build-dev 
Replace XC_OSARCH with GOOS and GOARCH
 2022-01-13 08:55:26 -05:00
Timothy Messier 0c3218ec3e docs(website): Update cross-compiling notes 
This replaces references to XC_OSARCH with GOOS and GOARCH.

See: 1c8e0ed1e1
 2022-01-13 08:54:50 -05:00
Timothy Messier 36664d433b chore(makefile): Fix docker-build-dev target 
This target is updated to set GOOS and GOARCH instead of XC_OSARCH since
the build script was updated to use these environment variables for
cross-compiling.

See: 1c8e0ed1e1
 2022-01-13 08:54:50 -05:00
Irena Rindos 0a6e5470e0 Merge pull request #1793 from hashicorp/irindos-state-transitions 
bug(session): Allow only valid state transitions
 2022-01-13 05:50:43 -08:00
Irena Rindos edae7c899f bug(session): Allow only valid state transitions 2022-01-12 16:01:49 -05:00
Louis Ruch f8b2e99e11 Merge pull request #1815 from hashicorp/louis-decode-type 
feat(target): Decode based on credential type
 2022-01-10 10:45:26 -08:00
Louis Ruch a90f1f4eb1 feat(target): Decode based on credential type 2022-01-10 09:57:27 -08:00
Jim 591ec476e7 refactor: Update internal/db and oplog to use go-dbw package for database operations. (#1785) 
* chore: Add new dbw dependency

* refactor: Convert to use dbw.DB

* refactor (db): Change GetTicket(...) signature

* feature (db tests): Added TestDeleteWhere(...)
Adding this allows us to eliminate a leak of the gorm library

* refactor: Add ctx to ScanRows(...) signature
This is required to refactor all the deprecated errors pkg calls.
This refactor required adding a context to quite a few call chains
and in particular the job scheduler bits

* feature (db/tests): Add support for test opt: WithTestLogLevel(...)
This test only option allows callers to specify a log level for the
underlying db package (where supported/applicable) when calling
TestSetup(...)

* refactor (db): Simplify Db type
Only store the underlying *DB and create the *RW on demand when
needed.

* refactor (oplog): Port to using dbw pkg for db operations

* refactor (db): Remove gormDB(...) func

* tests (db): Add unit tests for TestDeleteWhere(...)

* chore: make fmt changes to formatting
 2022-01-05 14:38:38 -05:00
Noel Quiles 002d004114 website: Upgrade deps (#1807) 
* Update @hashicorp/react-subnav

* Upgrade deps to latest
 2021-12-23 16:41:34 -05:00
Jeff Mitchell 75a38e2505 Import TCP subtypes in test controller 2021-12-22 22:53:52 -05:00
Alex Carpenter c69e96969e fix: redirect /home to / (#1788) 2021-12-22 09:42:03 -05:00
A-440Hz 3afbfbf8c2 fix(cli): Remove duplication of target host sources (#1805) 
fix(cli): Remove duplication of target host sources
 2021-12-17 19:11:28 -08:00
Louis Ruch 58aca600a4 Merge pull request #1804 from hashicorp/louis-egress 
Egress credentials
 2021-12-17 12:51:01 -08:00
Louis Ruch 425a56179f feat(worker): Implement egress credentials 
Egress credentials Issued during AuthorizeSession are stored in the
session repo. These credentials are retrieved and stored in-memory on the
worker during the LookupSession call. Each proxy handler will need to
handle the credentials as required.
 2021-12-17 11:27:10 -08:00
Louis Ruch 5fe23ab14d feat(session): Store session credentials 
Creates a new session_credential table and repository functions
to add and list credentials attached to a session. All credentials
are encrypted using the session scope id.
 2021-12-17 11:26:52 -08:00
Timothy Messier 27ebfa1125 Merge pull request #1796 from hashicorp/llb-credential-type-mapping 
This allows users to set the type of credential that a credential
library will provide.

A User Password credential type and an Unspecified credential type are included
with the expectation that additional credential types will be added in the
future. This change also adds the credential type attribute to existing
credential libraries and sets it to Unspecified. The credential type can
only be set when a credential library is created.

The vault credential library includes functionality for converting a
Vault Secret into a User Password Credential. This mapping is enabled by
default, however, the user can override the attributes used for this
mapping.
 2021-12-17 14:03:58 -05:00
Louis Ruch ff3be7a74b Merge pull request #1802 from hashicorp/louis-recover 
feat(server): Add grpc_middleware recovery interceptor
 2021-12-16 21:03:03 -08:00
Louis Ruch d46daa573f feat(server): Add grpc_middleware recovery interceptor 2021-12-16 20:22:20 -08:00
Louis Ruch 1209b5180f release: Bump desktop version 2021-12-16 19:22:39 -08:00
Noel Quiles d9366640c7 website: Disable alert banner (#1799) 2021-12-16 13:17:42 -05:00
Louis Ruch 8f44e6d49f release: Bump website version number 2021-12-16 09:42:52 -08:00
Louis Ruch c30adc286b release: Update changelog for 0.7.3 2021-12-16 09:42:28 -08:00
Louis Ruch b8afd4f50c feat(cli): Display credential type in library list 2021-12-16 10:01:44 -05:00
Michael Gaffney 4636d34943 test(credential): Add credential mapping override to delete test 2021-12-16 10:01:43 -05:00
Michael Gaffney 888f8cea03 test(credential): Add credential mapping override to list test 2021-12-16 10:01:43 -05:00
Louis Ruch e75f1d2f73 feat(credential): Add mapping override update for API/SDK/CLI 
This change adds support for updating a credential mapping override on a
credential library.
 2021-12-16 10:01:43 -05:00
Louis Ruch da20a8b434 feat(credential): Add support for Vault KV2 2021-12-16 10:01:38 -05:00
Michael Gaffney 035182681a feat(credential): Allow updating of credential mapping overrides 2021-12-16 09:52:18 -05:00
Michael Gaffney 9cdfc5f986 docs(vault): Add comment about the default value of HttpMethod 2021-12-16 09:52:18 -05:00
Michael Gaffney ba8188e6d7 feat(credential): Add mapping override to credential library on lookup 
This change returns any mapping override set on a credential library
when the library is retrieved from the repository using the lookup
method.
 2021-12-16 09:52:18 -05:00
Michael Gaffney 0e637f47b5 feat(credential): Use credential type when issuing credentials 
This change uses the credential type attribute when issuing credentials
including mapping overrides.
 2021-12-16 09:52:16 -05:00
Michael Gaffney 17762ed01e test(vault): Fix use of assert library in tests 2021-12-16 09:43:34 -05:00
Louis Ruch 1cc35fb0df feat: Credential library mapping API/SDK/CLI on create path 
* feat(sdk): Add fields to credential library proto

Adds CredentialType and CredentialMappingOverrides to credential
library SDK.

* feat(api): Add fields to credenttial library service

Adds support for CredentialType and CredentialMappingOverrides
to the credential library service (API)

* feat(cli): Add feilds for credential library cmd

Adds support for CredentialType and CredentialMappingOverrides to the
credential library cmd command.
 2021-12-16 09:43:34 -05:00
Michael Gaffney c317901db4 feat(credential): add credential type to credential library on create 
This change adds a credential type attribute to credential library and
allows it to be set when creating a credential library.

Specifying the type of credential returned from a library allows for new
features and additional error checking to be added over time. A
User Password credential type and an Unspecified credential type are
included with the expectation that additional credential types will be
added in the future. This change also adds the credential type attribute
to existing credential libraries and sets it to Unspecified.

Known Limitations:

- Credential type is only supported on the repository create method.
  Support for the other CRUD methods will be added in the future.
 2021-12-16 09:43:32 -05:00
Louis Ruch f4b9b83caf fmt: Fix import groups 2021-12-15 22:34:16 -08:00
Louis Ruch 59734e97fa Merge pull request #1798 from hashicorp/louis-panic 
bug(credential): Fix panic in credential Issue
 2021-12-15 18:42:54 -08:00
Louis Ruch 9b39345c7f bug(credential): Fix panic in credential Issue 
Vault KV backend returns a nil secret and no error if the secret does not
exist. This caused a panic in during Issue:

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x20 pc=0x1388279]

goroutine 2639 [running]:
github.com/hashicorp/boundary/internal/credential/vault.(*Repository).Issue(0xc001222200, {0x3b932d0, 0xc001203350}, {0xc000dc6e90, 0xc}, {0xc0010e5e40, 0x0, 0x0})
        /home/louis/boundary/internal/credential/vault/repository_credentials.go:67 +0x2d9
github.com/hashicorp/boundary/internal/servers/controller/handlers/targets.Service.AuthorizeSession({{}, 0xc000cd4a38, 0xc000cd4840, 0xc000cd48d0, 0xc000cd4a50, 0xc000cd4870, 0xc000cd4858, 0xc000cd48b8, 0xc0001a8880}, {0x3b932d0, ...}, ...)
        /home/louis/boundary/internal/servers/controller/handlers/targets/target_service.go:1059 +0x1525
github.com/hashicorp/boundary/internal/gen/controller/api/services._TargetService_AuthorizeSession_Handler.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880})
        /home/louis/boundary/internal/gen/controller/api/services/target_service_grpc.pb.go:631 +0x78
github.com/hashicorp/boundary/internal/servers/controller.auditResponseInterceptor.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}, 0x461279, 0x40d234)
        /home/louis/boundary/internal/servers/controller/interceptor.go:262 +0x4e
github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880})
        /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a
github.com/hashicorp/boundary/internal/servers/controller.statusCodeInterceptor.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}, 0x203000, 0x203000)
        /home/louis/boundary/internal/servers/controller/interceptor.go:207 +0x34
github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880})
        /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a
github.com/hashicorp/boundary/internal/servers/controller.errorInterceptor.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}, 0x18e2b40, 0x0)
        /home/louis/boundary/internal/servers/controller/interceptor.go:156 +0x4e
github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880})
        /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a
github.com/hashicorp/boundary/internal/servers/controller.auditRequestInterceptor.func1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880}, 0x1a1c860, 0xc0010e5280)
        /home/louis/boundary/internal/servers/controller/interceptor.go:248 +0x198
github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203350}, {0x1a0dd40, 0xc000dc8880})
        /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a
github.com/hashicorp/boundary/internal/servers/controller.requestCtxInterceptor.func1({0x3b932d0, 0xc001203260}, {0x1a0dd40, 0xc000dc8880}, 0x18, 0xc0010e52a0)
        /home/louis/boundary/internal/servers/controller/interceptor.go:140 +0x5de
github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1.1.1({0x3b932d0, 0xc001203260}, {0x1a0dd40, 0xc000dc8880})
        /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:25 +0x3a
github.com/grpc-ecosystem/go-grpc-middleware.ChainUnaryServer.func1({0x3b932d0, 0xc001203260}, {0x1a0dd40, 0xc000dc8880}, 0xc00331abb8, 0x18675e0)
        /home/louis/go/pkg/mod/github.com/grpc-ecosystem/go-grpc-middleware@v1.3.0/chain.go:34 +0xbf
github.com/hashicorp/boundary/internal/gen/controller/api/services._TargetService_AuthorizeSession_Handler({0x1ada420, 0xc00093a180}, {0x3b932d0, 0xc001203260}, 0xc001200840, 0xc000465260)
        /home/louis/boundary/internal/gen/controller/api/services/target_service_grpc.pb.go:633 +0x138
google.golang.org/grpc.(*Server).processUnaryRPC(0xc000cca540, {0x3bb4c58, 0xc0005a9c80}, 0xc001208480, 0xc0004a7440, 0x499e2b8, 0x0)
        /home/louis/go/pkg/mod/google.golang.org/grpc@v1.40.0/server.go:1297 +0xccf
google.golang.org/grpc.(*Server).handleStream(0xc000cca540, {0x3bb4c58, 0xc0005a9c80}, 0xc001208480, 0x0)
        /home/louis/go/pkg/mod/google.golang.org/grpc@v1.40.0/server.go:1626 +0xa2a
google.golang.org/grpc.(*Server).serveStreams.func1.2()
        /home/louis/go/pkg/mod/google.golang.org/grpc@v1.40.0/server.go:941 +0x98
created by google.golang.org/grpc.(*Server).serveStreams.func1
        /home/louis/go/pkg/mod/google.golang.org/grpc@v1.40.0/server.go:939 +0x294
 2021-12-15 16:13:30 -08:00
Louis Ruch 155d8e1cbd release: Bump website version number 2021-12-15 14:04:40 -08:00
Louis Ruch d74611b6f6 release: Update changelog for 0.7.2 2021-12-15 14:03:47 -08:00
Carlos Alcaide Corvo 86eead3a3e Bump UI version (#1795) 2021-12-15 13:11:19 -08:00
Louis Ruch 72a15b8d2d bug(target): Add *-host-sources actions to target service (#1794) 2021-12-15 10:06:35 -08:00
Michael Gaffney 67bad4cd6e Update Go version to 1.17.5 (#1789) 2021-12-14 11:58:34 -05:00
Kevin Wang a954d725b2 feat(website): versioned-docs (#1632) 
feat: versioned docs
 2021-12-13 13:28:52 -08:00
Chris Marchesi 115e22eab2 Update AWS host provider (#1784) 
* Update AWS host provider

* Apply @talanknight's suggestion
 2021-12-13 10:55:08 -08:00
Hugo 6c9bfc5bbc Merge pull request #1783 from hashicorp/hugoamvieira-envfile-workerdesc 
feat(config): Env/file support for Worker description
 2021-12-13 15:07:45 +00:00
Hugo Vieira 5f36057f65 feat(config): Env/file support for Worker description 2021-12-10 18:21:52 +00:00
Jim baa1d88f1f feature: Add client ip to inbound request information (#1678) 
* feature: Add client ip to inbound request information
* feature (workers): Add the user's client IP to a session's connection information (#1749)
 2021-12-09 20:41:08 -05:00
Irena Rindos 2cfa027406 Merge pull request #1776 from hashicorp/irenarindos-env-file-database 
feat(config): Add env and file support for database max connections
 2021-12-09 10:40:51 -08:00
Irena Rindos 7bf787ec40 feat(config): Add env and file support for database max connections 2021-12-09 13:02:42 -05:00
Mike Wickett ae7e64b2f1 update alert banner content (#1778) 2021-12-09 12:10:18 -05:00