CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,696 Commits 7 Branches 2 Tags
d32245a33e7bb1fa2c0e6c6d7ce99e2a0ff21dcd
Commit Graph
65 Commits
Author SHA1 Message Date
Irena RindosandDan Heath fd8f0c1cc6 chore(docs): Remove community-only notation for KMS keys (#5164) 
* chore(docs): Remove community-only tag from kms keys

* docs: Clarify edition support

* docs: Minor edit, add `worker-auth` statement

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-12-13 09:12:53 -05:00
Dan HeathandRobin Beck 22a9074724 docs: Update meta content - Concepts (#5224) 
* docs: Update meta content - Concepts

* docs: Revisions

* Update website/content/docs/concepts/domain-model/credentials.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/scopes.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Update exec flag description

* Update website/content/docs/concepts/filtering/events.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Update domain model descriptions

* docs: Update domain model titles

* docs: Edits for consistency

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2024-12-04 11:01:09 -05:00
Dan HeathMichael LiRobin BeckRobin Beck
 		bbbe971ed1 docs: Move permissions to config for usage docs (#4962) 
* docs: Move permissions to config for usage docs

* docs: Update permissions concepts (#4970)

* docs: Update permissions concepts

* docs: Delete comments

* docs: Structural edits and adding workflow

* docs: Fix wording

* docs: Change guide name, add resource table

* Rab manage roles refactor (#4980)

* refreshes the manage-roles docs

* adds href for common-workflows/manage-roles to configuration/identity-access-management

* docs: Fix a couple typos

* docs: Style updates

* docs: Fix image links, update alt text

* docs: Add more info/next steps sections

* docs: Remove number for single instruction

* fixes screenshot

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* updates path to resource-table.mdx

* sets aliases scope to Global

* updates aliases scope in resource table

* clarifies assigned scope id

* Update website/redirects.js

Co-authored-by: Michael Li <michael.li@hashicorp.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
 2024-07-30 17:21:09 -04:00
Dan Heath d4e9bc02ae docs: Update roles in permissions concept (#4958) 
* docs: Update roles in permissions concept

* docs: Revise intro paragraph
 2024-07-24 11:05:22 -04:00
Irena RindosandDan Heath 7e36f32e52 update tls docs to include controller led (#4905) 
* update tls docs to include controller led

* docs: Minor style edits

* docs: Minor edits

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-06-27 11:43:39 -04:00
Todd 5a06e4fe66 Auto generate the permissions pages. (#4786) 
* Auto generate the permissions pages.

* Add add- set- remove- auto descriptions. Hide scope line when no scope provided

* Document the resource info struct
 2024-05-10 12:49:48 -07:00
Adam BouhmadandDan Heath 50de448fee Merge PKI & KMS docs (#4325) 
* Merge PKI & KMS docs

* Update worker-configuration.mdx

remove deprecated kms flag

* docs: Fix TOC

* docs: Create redirects

* docs: Fix some broken links

* modify overview page for post 0.15 changes

* Modify data-encryption docs for post 0.15

* modify configure-workers page for post 0.15

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2024-01-30 20:23:26 -05:00
Michael Li 95ad3eab48 docs: Update resource table format (#3432) 2024-01-26 14:32:01 -05:00
Louis Ruch 7921ce22fd test(grant): Use ID to validate version check (#4274) 
* test(grant): Use ID to validate version check

* Update docs from id to ids

* Remove 'id' in 0.16.0
 2024-01-25 13:27:22 -05:00
Jeff Mitchell 253d79116c Swap id field in grants to ids since that's now standardized (#4250) 
* Swap id field in grants to ids since that's now standardized

* Fix some tests I missed

* Update generated resource table
 2024-01-17 23:54:49 -08:00
Louis Ruch f26243e9af feat(recording): Delete Session Recording 2024-01-16 13:53:44 -08:00
Damian Debkowski b7739cd214 chore: generated files 2024-01-16 13:53:44 -08:00
Dan Heath 22e06eddc8 docs: Add enterprise badge (#3981) 
* docs: Add enterprise badge

* docs: Add heading-level enterprise alert

* docs: Add some missing tags
 2023-11-03 14:08:06 -04:00
Dan Heath de813c9af9 docs: Update oss references (#3588) 2023-08-16 13:47:23 -04:00
Dan Heath 3f4cd53d16 docs: Update headings for new style rule (#3396) 
* docs: Update headings for new style rule

* docs: Fix headings - Get started

* docs: Fix headings - Install

* docs: Fix headings - Concepts

* docs: Fix typos

* docs: Fix headings - Configuration

* docs: Fix headings - Operations

* docs: Fix headings - Troubleshoot

* docs: Fix headings - Clients and Develop

* docs: Fix headings - HCP and ENT

* docs: Fix headings - Release notes

* docs: Fix typos

* docs: Fix capitalization in TOC
 2023-07-07 14:42:11 -04:00
Dan Heath 8acc73dc6e docs: Add bsr key to requirements (#3330) 
* docs: Add bsr key to requirements

* docs: Rewrite for clarity

* docs: Add bsr key definition to security page
 2023-06-14 15:58:24 -04:00
Robin BeckDan HeathJeff MalnickMichael LiIrena RindosJohan Brandhorst-SatzkornXingLu WangJeff Mitchell
 		2179af63cb Hashidays Docs (#3313) 
docs: add 0.13 feature docs

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Jeff Malnick <malnick@gmail.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2023-06-12 23:53:27 -07:00
XingLu WangandDan Heath 4fc872fc15 Restructuring and addition to permissions docs (#3270) 
* docs: Create grants topic

* Update grants

* Restructuring of permissions docs

* Fixing links

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/security/permissions/index.mdx

* Update website/content/docs/concepts/security/permissions/index.mdx

* Update website/content/docs/concepts/security/permissions/advanced.mdx

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* docs: Add redirect for deleted file

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-06-12 10:04:43 -04:00
Johan Brandhorst-Satzkorn 97977f1995 update perms table for session recordings and storage buckets (#3253) 2023-06-01 12:45:27 -07:00
XingLu Wang 9d50db4c44 doc: Fix typo (#3185) 2023-05-02 16:36:20 -04:00
Ashlee M Boyer e6be6431b2 docs: Migrate link formats (#2777) 
* Adding docs-content-check-legacy-links-format workflow

* Adding test-link-rewrites workflow

* Migrating links to new format
 2023-01-20 15:17:34 -08:00
Johan Brandhorst-Satzkorn 240278cbf1 fix(docs): Use "root" to reference the root key (#2700) 
The "root" identifier is how we identify the root key in configuration,
so it is the phrase we should use in this documentation.
 2022-12-12 11:24:58 -05:00
Johan Brandhorst-Satzkorn 6d25b35b4e Add KMS rotation/destruction feature to the changelog and docs (#2600) 
* Add initial changelog entry

* feat(docs): Add initial stab at docs for KMS rotation/destruction

* fixup! Add initial changelog entry

* Review comments
 2022-12-01 13:32:35 -05:00
Johan Brandhorst-SatzkornandDan Heath df02501dcc Create new "previous-root" key purpose for root key migrations (#2639) (#2648) 
* Update go-kms-wrapping dependency

* Apply changes suggested by Jeff

* Fix listener test

* Add note about config fix to CHANGELOG

* Review comments

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2022-11-24 20:07:37 -05:00
Jeff Mitchell cede1aec93 Add initial templating support to Vault credential libraries (#2569) (#2575) 
Add initial templating support to Vault credential libraries

This adds support for templating various account and user values into
Vault dynamic credential library POST bodies and GET/POST paths.

It also unifies how parameters are used in grants, with backwards
compatibility.
 2022-10-27 09:01:05 -04:00
Jeff Mitchell 53b5e532d5 Remove deprecated methods/fields on targets (#2393) 2022-09-15 09:20:08 -04:00
Jeff MitchellandIrena Rindos 01fb949d0b Add controller-led worker auth flow (#2413) 
This adds an action to the API that allows pulling out an activation
token that can be given to a worker in its config (directly or via env
or file). The worker can pass this along with its normal request in
place of its normal nonce and the server will automatically accept it.

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>
 2022-09-02 14:32:41 -04:00
Jeff Mitchell 30ede3b137 Fix various website issues (#2344) 
I found some invalid links and some missing KMS information; this fixes
those.
 2022-08-09 17:56:29 -04:00
Loann LeandRobin Beck d5633952db Boundary documentation: content cleanup in prep for devdot migration (#2249) 
* cleaning up docs

* Update website/content/docs/concepts/domain-model/groups.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/managed-groups.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/roles.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/scopes.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/sessions.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/configuration/worker/pki-worker.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/getting-started/deploy-and-login.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2022-07-12 13:29:35 -06:00
Jeff Mitchell 79440c5d82 Add worker resource to perms table (#2241) 2022-07-05 11:34:01 -04:00
Robin BeckXingLu WangLoann LeJeff MitchellirenarindosIrena RindosLouis RuchXingLu Wang
 		c05fa66096 Hashiconf docs changes (#2178) 
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

Co-authored-by: irenarindos <irena.rindos@gmail.com>

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>

Co-authored-by: Louis Ruch <louisruch@gmail.com>

Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com>

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
 2022-06-22 02:37:49 -04:00
Jeff Mitchell d6362f9e5e Restrict anonymous user capabilities (#2156) 2022-06-09 11:30:01 -04:00
Irena Rindos bc6689fb16 docs(permissions): break permissions into sections (#1893) 
* docs(permissions): break permissions into sections

* fixup! docs(permissions): break permissions into sections
 2022-03-08 10:36:11 -05:00
Jeff Mitchell 7174a91f32 Update data-encryption documentation to clarify what is encrypted (#1722) 2021-11-17 14:42:59 -05:00
Jeff Mitchell 1782f6a4e4 Enhance worker connection security (#1641) 
This stores worker connection nonces within the database to ensure
uniqueness of connections. Prior the connection required any attacker to
be able to decrypt the incoming encrypted authentication message in
order to replay (and if the attacker has access to the KMS you have
bigger problems), but with this change even if an attacker does have
access to the KMS key, they cannot reuse the same message. (If they're
able to encrypt against the KMS key, they can still act as a worker with
a new message, so this only really helps if they only have decryption
capabilities.)
 2021-10-27 20:32:07 -04:00
Todd Knight 39cc245966 Make gen after make tools. Includes make fmt of existing non generated files. (#1438) 2021-08-02 10:46:09 -07:00
Carlos Alcaide Corvo aea1da77b6 Bump @types/node to latest release of v15 (#1296) 
* Bump @types/node to latest release of v14

* Bump major version to v15
 2021-06-11 09:41:17 -07:00
Jim Lambert aa41676dc9 make gen changes prior to staging release 2021-06-08 13:12:26 -04:00
Jeff Mitchell 179a49657e Managed Groups service (#1262) 2021-06-02 14:01:37 -04:00
Jeff Mitchell 22d5c88a0b Add Output Fields support (#1192) 2021-05-04 20:57:35 -04:00
Jeff Mitchell 727d1c7085 Add "no-op" action and use it as default for scope permissions (#1138) 
Because of listing visibility, if no actions are assigned to a user for
an individual resource, it's excluded from the list. This is fine and
good. However, when we made a change in 0.2.0 to restrict the
information returned from listing for the anonymous user for scopes and
auth methods, it exposed the fact that because of the way this
visibility works we had to add `read` to scopes by default -- thereby
rather defeating the purpose of restricting what goes back to `u_anon`
requests.

The purpose of "no-op" is to never be used for real actions within the
API, but as something that can be granted to specifically enable
visibility for the targeted user. This makes the controls over list
visibility much more granular.
 2021-04-23 10:13:37 -04:00
Jim 24dd92f3f9 update fmt formatting. (#1113) 2021-04-13 19:48:39 -04:00
Todd Knight 14c222709c Make oidc auth callback redirect on most errors (#1105) 2021-04-13 09:21:26 -07:00
Jeff Mitchell 90b30bad25 Use 202 for token polling endpoint instead of 204 (#1103) 2021-04-12 14:57:14 -04:00
JimTodd KnightJeff MitchellMichael Gaffney
 		dd0f34bc35 Add new OIDC auth method. (#1090) 
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>
 2021-04-08 20:54:32 -04:00
John Reese c096157cf9 Fix spelling errors found in the documentation (#1073) 2021-04-08 12:14:36 -04:00
Bryce Kalow bd8cc5464e feat(website): migrates nav data format and updates docs pages (#1049) 
* migrates nav data format and updates docs pages

* removes sidebar_title from content files

* updates api docs to work with new format
 2021-04-05 13:04:57 -04:00
Jeff Mitchell 6605b4c9f8 Revamp authenticate (#1025) 2021-03-24 16:07:43 -04:00
Jeff Mitchell 888e0c88a9 Slight website wordsmithing 2021-03-03 11:38:47 -05:00
Jeff Mitchell 341e7aff0d CLI Generation (#953) 2021-02-23 19:06:39 -05:00