CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
892 Commits 7 Branches 2 Tags
d65d4dbf6f60347fea7d29d085915a8613b7b2d4
Commit Graph
892 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Louis Ruch d65d4dbf6f Fix examples in website (#891) 2021-01-28 20:42:35 -08:00
Todd Knight 57d4bf2bfd Removing dev migration feature and checks (#892) 2021-01-28 19:28:31 -07:00
Todd Knight 955ae41215 Support upgrading from old migration table name (#889) 2021-01-28 14:30:08 -07:00
Jeff Mitchell 3461dcbd0c Remove down and dev migrations (#890) 
* Remove down and dev migrations

This won't be the pattern going forward, so this removes these from the
code.
 2021-01-28 16:12:14 -05:00
Jeff Mitchell d7a24b6b34 Run go mod tidy 2021-01-28 10:41:15 -05:00
Jeff Mitchell 54b9c8c3dc Add perms-table to make gen and commit migrations update 2021-01-28 08:56:55 -05:00
Todd Knight d2bb8820ea Wrap postgres up migrations into a single transaction (#887) 2021-01-27 15:58:22 -07:00
Jeff Mitchell c1576dddda Add depowners file 2021-01-27 16:46:39 -05:00
Jim 1c744c28ab oidc schema changes. (#874) 2021-01-27 10:55:28 -05:00
Jim f7aad2e0c8 add a new oidc key+ key version for encrypting oidc state payloads returned in auth URLs. (#884) 2021-01-26 14:37:10 -05:00
Jeff Mitchell 6cd97a4a6e Add support for recursive listing (#885) 2021-01-25 19:37:40 -05:00
Todd Knight 1f9fcad1cd Adding Migrate Command (#872) 2021-01-25 14:43:50 -07:00
Jeff Mitchell 5de4befb58 Upgrade some deps (#886) 
These are Jeff-managed deps, and the changelogs have been evaluated.
 2021-01-25 10:41:56 -05:00
Jeff Mitchell 6b58a3317d Add recursive listing to roles (#881) 
This also lays the framework for adding recursive listing to the rest of the resources.
 2021-01-23 13:39:04 -05:00
Jeff Mitchell 0629526319 Add read/list/cancel:self actions and support for ACL subactions. (#882) 
Update perms table in anticipation of session support for these.
 2021-01-22 16:38:19 -07:00
Louis Ruch 558f9220a5 ICU-744/Refactor internal/target to new domain errors (#865) 
* Refactor internal/target to new domain errors
 2021-01-22 13:46:20 -08:00
Jeff Mitchell ee33a18caa Add scope repo function to recursively list (#879) 
A simple function that returns an appropriate set of scopes based on the
incoming scope ID. Includes a test.
 2021-01-21 21:03:30 -05:00
Pete Pacent 93394156bf Adding roadmap and release notes updates (#859) 
* Adding roadmap and release notes updates

* fixing typo
 2021-01-21 16:18:39 -08:00
Jeff Mitchell 526e24cd19 Goimports reordering 2021-01-21 17:04:01 -05:00
Jeff Mitchell 717a3b52ee Add worker tagging (#862) 
This allows workers to have tags assigned to them, which can then be filtered to control which targets they are allowed to serve.
 2021-01-21 16:27:20 -05:00
Todd Knight 595a86508e Fix lockup when initalizing database. (#875) 2021-01-20 18:10:45 -07:00
Jeff Mitchell 2bafd8a07c Bump go-mod-upgrade 2021-01-20 12:12:33 -05:00
Jeff Mitchell 46644300d9 Switch to execabs for os/exec in connect cmd (#873) 
* Switch to execabs for os/exec in connect cmd

This is more of an abundance-of-caution change (e.g. defense in depth)
but it doesn't seem like we should be using binaries from the current
directory for `boundary connect` executions (unless given an explicit
path).

* Update changelog
 2021-01-20 12:09:55 -05:00
Jeff Mitchell dcb15cffbd Add authorized actions output on resources (#870) 2021-01-20 10:53:01 -05:00
Todd Knight ec6151d174 Organize DB Schema Migration Code and DB Init Checks (#842) 
Create Schema Manager and propagate contexts into the DB calls downstream.
Add checks at controller startup and database init for correct schema version and schema migration dirty bit being set.
 2021-01-19 10:40:41 -07:00
Michael Gaffney c141a050e5 Document Postgres permission requirements (#871) 
* Add semantic line feeds

* Document Postgres permission requirements

Closes #823
 2021-01-15 17:32:28 -05:00
Brandon Romano 3c22dcd54d Website StackMenu updates for 1/14 (#863) 2021-01-14 09:46:11 -08:00
Louis Ruch 84656dbfea ICU-747,ICU-748/refactor internal/oplog and internal/perms to use domain errors (#854) 
* Refactor internal/oplog to domain errors

* Refactor internal/perms

* Update changelog
 2021-01-13 15:50:07 -08:00
Jeff Mitchell 27919ab11b Groundwork for returning authorized actions (#860) 
This returns authorized actions on targets to users when they perform an operation on a target, including listing. It also prevents users from seeing values in listing targets on which they have no permissions.
 2021-01-13 14:42:37 -05:00
Louis Ruch 8151b30ce9 ICU-743/Domain errors internal/kms refactor (#848) 
* Domain errors internal/kms refactor

* Update changelog

* Update internal/host error op

* Incorrect error returned in read_writer
 2021-01-12 08:50:19 -08:00
Jeff Mitchell 9de928318d Skip curl output when using automatic versioning and reading (#858) 
This makes it so that the actual output is the update/delete.

Fixes #856
 2021-01-08 17:30:41 -05:00
Louis Ruch 31ece74a92 Fix worker example config (#855) 2021-01-08 13:30:53 -08:00
Jeff Mitchell 84c617dc49 Run make gen after the gofumpt update 2021-01-08 10:32:02 -05:00
Michael GaffneyandJeff Mitchell 94cb79bbdd See how Boundary would look with gofumpt applied (#853) 
* See how Boundary would look with https://github.com/mvdan/gofumpt applied

Results of running `gofumpt -w -s .`

* Update tools file and Makefile for gofumpt

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2021-01-07 10:02:32 -05:00
Jeff Mitchell cca0fbea2b Fix typo on controller config docs 2021-01-06 15:32:14 -05:00
Louis Ruch dbc796759b ICU-934/Verify controller config block (#851) 
* Verify controller config block

* update changelog
 2021-01-06 10:41:38 -08:00
Yoko 9a9efd16e2 [Docs] Common workflow update (#850) 
* Direct to Learn for 'Common Workflow'

* Clearn up

* Fix a typo
 2021-01-05 17:56:19 -08:00
Louis Ruch 4e31fdb10e Swap assert.Eqaul actual/expected (#849) 2021-01-05 17:34:04 -08:00
Jeff Mitchell f8577519b6 Prep for 0.1.4 2021-01-05 09:26:21 -05:00
Jeff Mitchell 77525298bd Use modified version of keyring lib 2021-01-04 21:29:46 -05:00
Jeff Mitchell 5b5602969f Update go-keyring to use forked version (#846) 
This may help with #830.
 2021-01-04 21:05:42 -05:00
Jeff Mitchell 2323a8551c Update no-resources flag 2021-01-04 16:59:54 -05:00
Jeff Mitchell 6580d85388 Remove erronious IsGlobalUnicast check. (#845) 
Fixes the issue raised at https://www.boundaryproject.io/docs/configuration/worker#complete-configuration-example
 2021-01-02 19:49:39 -05:00
Jim 7cade6f8aa just a few typos. (#840) 2020-12-23 16:21:35 -05:00
Louis Ruch 70a5899e99 ICU-739/iam domain error refactor (#841) 
* Refactor iam errors

* Update db and host doTx error ops

* Changelog
 2020-12-23 11:00:00 -08:00
Louis Ruch bfbb179741 ICU-738/Refactor internal/db to domain errors (#815) 
* Refactor internal/db to domain errors
 2020-12-21 10:07:34 -08:00
Jeff Mitchell b5d84495a3 Fix IDs being lowercased in role grants (#839) 
Fix IDs being lowercased in role grants

Fixes #794
 2020-12-18 13:25:28 -05:00
Jeff Mitchell e6c98f1454 Add logic to error on certain invalid listener configs (#838) 
This adds logic to error on certain invalid listener config:

* If an address in the worker's "controller" set is unspecified or
multicast or global unicast, error
* If the controller's cluster address is unspecified, ensure
public_cluster_addr is set

This has been a source of some confusing behavior on some GitHub tickets
and even on the team, so preventing it is probably a good idea.

It also relaxes the restriction around controller address matching cluster address in single-server mode when using DNS names.
 2020-12-18 12:12:25 -05:00
Sarah ThompsonandJeff Mitchell 1d3cdbe630 fixing base-image (#837) 
* fixing base-image - should be : and not -
running make packages

* make packages

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-18 11:34:29 -05:00
Jeff Mitchell 6a6b95dd01 Update go.mod API ref 2020-12-17 19:17:19 -05:00