CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,643 Commits 7 Branches 2 Tags
d66b92abe023e75f736b7e4df99bd7e4798b2d91
Commit Graph
112 Commits
Author SHA1 Message Date
Ashlee M Boyer e6be6431b2 docs: Migrate link formats (#2777) 
* Adding docs-content-check-legacy-links-format workflow

* Adding test-link-rewrites workflow

* Migrating links to new format
 2023-01-20 15:17:34 -08:00
Ashlee M Boyer a437bdae0a [docs] Adjusting more links for rewrite project (#2791) 
* Removing in query param from tutorial link

* Updating link to renamed tutorial

* Fixing broken link syntax
 2023-01-13 19:05:21 -05:00
Irena RindosandDan Heath 12415990ac Add default port and address to target doc (#2775) 
* add default port and address to target doc

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-01-11 14:48:21 -05:00
Irena Rindos 5ac590f305 Update documentation to add ingress and egress filters (#2771) 
* Update documentation to add ingress and egress filters
 2023-01-10 13:43:22 -05:00
Hugo Vieira 1f9063e042 docs(target): Introduce direct address targets and explain tradeoffs 2023-01-09 15:39:55 +00:00
Johan Brandhorst-Satzkorn 240278cbf1 fix(docs): Use "root" to reference the root key (#2700) 
The "root" identifier is how we identify the root key in configuration,
so it is the phrase we should use in this documentation.
 2022-12-12 11:24:58 -05:00
Dan HeathandJeff Mitchell 70a1302cd9 Update Vault credential library templating section (#2679) 
* Update Vault credential library templating section

* Add request body to intro

* Update website/content/docs/concepts/domain-model/credential-libraries.mdx

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

* Minor rewrite

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2022-12-07 17:03:27 -05:00
Johan Brandhorst-Satzkorn 6d25b35b4e Add KMS rotation/destruction feature to the changelog and docs (#2600) 
* Add initial changelog entry

* feat(docs): Add initial stab at docs for KMS rotation/destruction

* fixup! Add initial changelog entry

* Review comments
 2022-12-01 13:32:35 -05:00
Dan Heath c506107127 Document vault credential library templating (#2635) 
* Document credential library injection

* Add caveat about versions < 0.11.1, remove link
 2022-11-29 10:41:50 -05:00
Johan Brandhorst-SatzkornandDan Heath df02501dcc Create new "previous-root" key purpose for root key migrations (#2639) (#2648) 
* Update go-kms-wrapping dependency

* Apply changes suggested by Jeff

* Fix listener test

* Add note about config fix to CHANGELOG

* Review comments

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2022-11-24 20:07:37 -05:00
Dan Heath 4509981e5b Fix pull-down placement (#2610) 2022-11-11 15:57:07 -05:00
Jeff Mitchell cede1aec93 Add initial templating support to Vault credential libraries (#2569) (#2575) 
Add initial templating support to Vault credential libraries

This adds support for templating various account and user values into
Vault dynamic credential library POST bodies and GET/POST paths.

It also unifies how parameters are used in grants, with backwards
compatibility.
 2022-10-27 09:01:05 -04:00
stephan242 220456d092 Remove duplicate sentence (#2560) 2022-10-25 11:14:50 -04:00
Irena Rindos e588623ebd docs(vault): add Vault worker filter documentation (#2404) 
* docs(vault): add Vault worker filter documentation
 2022-09-15 13:18:22 -04:00
Jeff Mitchell 53b5e532d5 Remove deprecated methods/fields on targets (#2393) 2022-09-15 09:20:08 -04:00
Yoko Hyakuna fa619b0910 Address reported bugs (#2449) 2022-09-13 19:48:06 -04:00
Jeff MitchellandIrena Rindos 01fb949d0b Add controller-led worker auth flow (#2413) 
This adds an action to the API that allows pulling out an activation
token that can be given to a worker in its config (directly or via env
or file). The worker can pass this along with its normal request in
place of its normal nonce and the server will automatically accept it.

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>
 2022-09-02 14:32:41 -04:00
Jeff Mitchell 30ede3b137 Fix various website issues (#2344) 
I found some invalid links and some missing KMS information; this fixes
those.
 2022-08-09 17:56:29 -04:00
Loann Le 3fb09dd247 Boundary documentation: updated domain model page (#2259) 
* updated domain model

* updated image ext

* resized images

* updated content

* updated images

* resizing images

* fixed one image

* modified text

* removed image
 2022-07-26 14:45:33 -06:00
Loann LeYoko HyakunaRobin BeckXingLu Wang
 		24cf580045 Boundary documentation: modified Boundary's overview page (#2264) 
* modified overview page

* updated text and image

* fixed spelling errors

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* cleaned up content

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>

* incorporate feedback

* updated image

* updated background color

* modified font

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
 2022-07-25 11:21:30 -06:00
Louis Ruch 5c80942453 docs(credentials): Update website domain docs (#2287) 2022-07-25 10:12:10 -07:00
Loann LeandRobin Beck d5633952db Boundary documentation: content cleanup in prep for devdot migration (#2249) 
* cleaning up docs

* Update website/content/docs/concepts/domain-model/groups.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/managed-groups.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/roles.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/scopes.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/sessions.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/configuration/worker/pki-worker.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/getting-started/deploy-and-login.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2022-07-12 13:29:35 -06:00
Jeff Malnick 1f66685864 feat: set default connection limit to unlimited (-1) instead of 1 (#2234) 
This avoids the confusion behavior of a session terminating as soon
as a single connection using that session is closed.
 2022-07-06 12:02:56 -04:00
Jeff Mitchell 79440c5d82 Add worker resource to perms table (#2241) 2022-07-05 11:34:01 -04:00
Robin Beck 0ff4be119e updates learn links (#2230) 2022-06-23 12:06:39 -06:00
Robin BeckXingLu WangLoann LeJeff MitchellirenarindosIrena RindosLouis RuchXingLu Wang
 		c05fa66096 Hashiconf docs changes (#2178) 
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

Co-authored-by: irenarindos <irena.rindos@gmail.com>

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>

Co-authored-by: Louis Ruch <louisruch@gmail.com>

Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com>

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
 2022-06-22 02:37:49 -04:00
Jeff MitchellandJim 7c139d28b2 Have hclog payloads use json tags (#2171) 
* Have hclog payloads use `json` tags

Previously a global setting for the `structs` lib was causing the `json`
tag to be used, but this could have side effects from other packages, or
could be affected by other packages' behavior. This behavior was removed
earlier but it means this format call no longer uses `json` tags; this
behavior reverts it.

It also normalizes using mapstructure in a few other places.

* Update some tests

* Fix incorrect op const

* Fix more tests

* refactor (events): tell filter to use json tags (fix related tests)

Explicitly tell the filter to use the "json" tags so we don't have to
re-tag everything with a mapstructure tag via bexpr.WithTagName("json")

Update docs

Co-authored-by: Jim <jlambert@hashicorp.com>
 2022-06-13 19:02:11 -04:00
Jeff Mitchell d6362f9e5e Restrict anonymous user capabilities (#2156) 2022-06-09 11:30:01 -04:00
PPacent ce7292d9c8 Docs: Adding service discovery concept page (#1886) 
* Adding service discovery concept page
 2022-03-31 14:54:53 -07:00
irenarindos 32dd594029 docs(connections): Update domain model for session connections 2022-03-15 12:11:31 -04:00
Irena Rindos bc6689fb16 docs(permissions): break permissions into sections (#1893) 
* docs(permissions): break permissions into sections

* fixup! docs(permissions): break permissions into sections
 2022-03-08 10:36:11 -05:00
Irena Rindos 718e746480 docs(targets): remove default port option (#1883) 2022-03-03 10:44:25 -08:00
Hugo Vieira 1576af70cc feat(config): Add env and file support to Worker Tags 
This feature allows the user to set the `tags` field to a string
that points to either an environment variable or file.
We then dynamically pull out the value and parse it into the config.

This can also be done at the keys level, where you set your keys
directly in Boundary's config file, but point the values to env/file.
 2021-12-07 19:21:04 +00:00
Todd 1c36b1e4d7 Add plugin details to host catalog, host set, and host domain model pages (#1715) 
* Add plugin information to host catalogs, host sets, and hosts.
 2021-11-17 14:11:06 -07:00
Jeff Mitchell 7174a91f32 Update data-encryption documentation to clarify what is encrypted (#1722) 2021-11-17 14:42:59 -05:00
Jeff Mitchell 1782f6a4e4 Enhance worker connection security (#1641) 
This stores worker connection nonces within the database to ensure
uniqueness of connections. Prior the connection required any attacker to
be able to decrypt the incoming encrypted authentication message in
order to replay (and if the attacker has access to the KMS you have
bigger problems), but with this change even if an attacker does have
access to the KMS key, they cannot reuse the same message. (If they're
able to encrypt against the KMS key, they can still act as a worker with
a new message, so this only really helps if they only have decryption
capabilities.)
 2021-10-27 20:32:07 -04:00
Jim b3d8b50307 Sink documentation (#1449) 2021-08-05 19:31:02 -04:00
Todd Knight 39cc245966 Make gen after make tools. Includes make fmt of existing non generated files. (#1438) 2021-08-02 10:46:09 -07:00
Michael Gaffney 28f48df026 Add documentation for credentials to website (#1356) 2021-06-25 15:31:10 -04:00
Robin Beck e69ca4f0cb fixed roles and accounts link references (#1323) 2021-06-18 09:16:48 -06:00
Carlos Alcaide Corvo aea1da77b6 Bump @types/node to latest release of v15 (#1296) 
* Bump @types/node to latest release of v14

* Bump major version to v15
 2021-06-11 09:41:17 -07:00
Jeff Mitchell f50ed866ef Add resource/filtering docs for OIDC managed groups (#1297) 2021-06-09 08:55:02 -04:00
Jim Lambert aa41676dc9 make gen changes prior to staging release 2021-06-08 13:12:26 -04:00
Jeff Mitchell 179a49657e Managed Groups service (#1262) 2021-06-02 14:01:37 -04:00
Jeff Mitchell 22d5c88a0b Add Output Fields support (#1192) 2021-05-04 20:57:35 -04:00
Jeff Mitchell 727d1c7085 Add "no-op" action and use it as default for scope permissions (#1138) 
Because of listing visibility, if no actions are assigned to a user for
an individual resource, it's excluded from the list. This is fine and
good. However, when we made a change in 0.2.0 to restrict the
information returned from listing for the anonymous user for scopes and
auth methods, it exposed the fact that because of the way this
visibility works we had to add `read` to scopes by default -- thereby
rather defeating the purpose of restricting what goes back to `u_anon`
requests.

The purpose of "no-op" is to never be used for real actions within the
API, but as something that can be granted to specifically enable
visibility for the targeted user. This makes the controls over list
visibility much more granular.
 2021-04-23 10:13:37 -04:00
Jeff Mitchell 344880dafc Fix indentation in tags example 2021-04-14 16:27:37 -04:00
Jim 24dd92f3f9 update fmt formatting. (#1113) 2021-04-13 19:48:39 -04:00
Jeff Mitchell 941e74388a Fix curl string building (#1106) 
I'm not sure why it was doing it the other way with assuming the string
being built would always have a space at the end, but, this way is
easier to understand and fixes a bug where there wasn't a space being
left between some fields.
 2021-04-13 16:08:51 -04:00
Todd Knight 14c222709c Make oidc auth callback redirect on most errors (#1105) 2021-04-13 09:21:26 -07:00