CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,937 Commits 7 Branches 2 Tags
d9914a4b22dbe517d73865600dac6cde91009ad3
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Li d1bcbac5d1 chore(e2e): Rename for clarity (#6261) 2025-11-18 14:40:27 -05:00
Michael Li 6a0de4337b ce: test(e2e): Add connect method that can work in windows 
(cherry picked from commit 6aa5469160e81e5bb8bf38c8cf6ed0c34d6d81f5)
 2025-11-18 14:36:26 -05:00
Michael Li aedd7f002b fix(e2e): Update tmpfs permissions in worker docker container (#6253) 
* chore(e2e): Update docker terraform provider to 3.6.2

* chore(e2e): Use boundary directory to avoid permission issues

* fix(e2e): Use tmpfs block to open up permissions of directory
 2025-11-17 11:47:04 -05:00
Michael Li ebe88cac06 fix(e2e): Fix ipv6 address argument (#6245) 
* test(e2e): Add windows client private ip to output

* fix(e2e): Only assign ipv6 address if available
 2025-11-12 14:11:30 -05:00
Michael Li b3c6cb7929 test(e2e): Add RDP test for Vault LDAP (ce commits) (#6237) 
* refact(e2e): Add error output to SetupLdapWithOpenLdap

(cherry picked from commit 12874ec3227500ac03ece452e342f44d9f1ebc7a)

* test(e2e): Add method for setting up vault ldap with active directory

(cherry picked from commit 4f0fe7bba78d25005a5d98e203a3d0bc037a2b69)

* chore(e2e): Add domain controller ipv6 address to e2e tests

(cherry picked from commit 3215194053cd82a4e650522e56f4699946f62ef3)
 2025-11-10 13:31:47 -05:00
Michael Li 89c577ddd7 chore(e2e): Update go mod download to run on the correct user (#6227) 
* chore(e2e): Ensure go modules are downloaded for test user

* chore(e2e): Add additional debug lines in script

* chore(e2e): Exclude boundary-ui clone when zipping boundary src
 2025-11-07 12:03:27 -05:00
Michael Li 04d994bfbc chore(e2e): Update URL to avoid 502 Bad Gateway (#6225) 2025-11-06 14:15:23 -05:00
Michael Li 272cad00b2 chore(e2e): Enable Vault for RDP e2e tests (#6223) 
* chore(e2e): Update vault addresses

* chore(e2e): Install vault CLI on windows client
 2025-11-06 13:49:17 -05:00
Michael Li 06d69f699e refact(e2e): Rename credential methods for clarity (#6219) 
* refact(e2e): Rename method to usernamepassworddomain

* refact(e2e): Rename method to usernamepassword
 2025-11-04 14:29:05 -05:00
Michael Li 31277e0b23 chore(e2e): Change RDP scenario to use ipv4 only (#6218) 
* chore(e2e): go mod download

* chore(e2e): Change RDP scenario to use ipv4 only

(cherry picked from commit e65cc563e94523ba454acb1afa2b4b2306f985df)
 2025-11-04 14:16:59 -05:00
Michael Li 5885a40ab8 chore(e2e): Disable snap assist (#6214) 2025-10-29 18:21:32 -04:00
Michael Li 1497db1623 chore(e2e): Update artifact name (#6192) 2025-10-27 15:04:16 -04:00
Michael Li 1023a7c53d chore(e2e): Add steps to download opencv from workflow (#6177) 
* chore(e2e): Add steps to download opencv from github

* CR: comment

* CR
 2025-10-22 13:01:46 -04:00
Michael Li e4e724bbc5 test(e2e): Add support for Vault LDAP testing (#6175) 
* chore(e2e): Update vault version that has vault ldap feature

* chore(e2e): Fix firewall and security group rules

* chore(e2e): Setup ldaps

* CR: spacing
 2025-10-22 10:18:32 -04:00
Michael Li da9ed3d22e chore(e2e): Remove unused line (#6152) 2025-10-14 10:24:26 -04:00
Michael Li 710337eaee test(e2e): Add test for connect redis (#6102) 2025-10-02 11:16:53 -04:00
Michael Li a3bb48e4d4 fix(e2e): Address flakes in TestCliSearch (#6080) 
* fix(e2e): Address flake in session count

There was a failure where this returned 1 session when the test expected 0. This commit updates the search to only look at sessions within the created project in this test.

* fix(e2e): Address flake in cache status

This commit addresses a flake where the test attempted to stop and start a cache, but when it goes to start the cache, it claims that the cache is already running. A theory is that the test tries start the cache too quickly after stopping it. Now, we add in a status call to check the status of the cache before proceeding.
 2025-09-30 09:20:02 -04:00
Michael Li 3a7f5d08c5 chore(e2e): Allow AWS to select default db version (#6090) 
Rather than hard-coding a version and needing to update this every time it becomes deprecated, we just pick the current default that AWS has set (which should be close to the latest).
 2025-09-26 09:26:05 -04:00
Michael Li 102c1fb322 chore(e2e): Add rds:DescribeDBEngineVersions permission (#6089) 2025-09-25 14:08:57 -04:00
Michael Li 2593b62430 fix(e2e): Use worker config from variable (#6081) 2025-09-24 13:46:58 -04:00
Michael Li a63f32df28 chore(e2e): Add controller and worker ips to output of scenario (#6060) 2025-09-24 12:34:15 -04:00
Michael Li f8a5894e29 chore(e2e): Update windows worker module to support other configs (#6077) 2025-09-19 16:12:29 -04:00
Michael Li 487107e958 chore(e2e): Ensure permissions on key file are correct (#6062) 2025-09-18 16:27:43 -04:00
Michael Li 57d69637f8 chore(e2e): Update firewall rules for instances in the windows domain (#6059) 
* chore(e2e): Update firewall rules

* fix(e2e): Add ipv6_address
 2025-09-18 12:57:06 -04:00
Michael Li c2585d8fb8 chore(e2e): Allow worker task on windows instances to run indefinitely (#6043) 
* chore(e2e): Allow worker to run indefinitely

* chore(e2e): Add time sync to ensure windows instances are in sync

* CR: Remove semicolons
 2025-09-12 14:02:12 -04:00
Michael Li 74e41e02df chore(e2e): Remove unused secrets in aws cleanup job (#6037) 2025-09-08 15:34:30 -04:00
Michael Li 7bee1e6b38 chore(e2e): Add workflow dispatch option (#6032) 2025-09-05 14:50:23 -04:00
Michael Li 8647e3f347 chore(e2e): Add support for Windows Server 2016 (#5994) 
* chore: Fix spacing

* chore(e2e): Add support for windows server 2016

* fix(e2e): Pass region into worker module

* CR: Rename scenario

* CR: enos fmt

* CR: Add username to enos vpc

* CR: Add vault environment variables
 2025-08-21 16:11:42 -04:00
Michael Li 41e5cacb7c chore(e2e): Enable audio service (#5988) 2025-08-20 11:43:23 -04:00
Michael Li f91e10630d chore(e2e): Ensure domain controller reboots (#5986) 2025-08-20 10:40:27 -04:00
Michael Li 049109fb10 chore(e2e): Increase test timeout to 30m (#5987) 2025-08-19 12:20:11 -04:00
Michael Li 71fc7a5ec4 chore(e2e): Add module for rdp member server (#5976) 
* chore(e2e): Add module for rdp member server

* CR: Update Domain mode to be compatible with newer versions of Windows

* CR: Add comments to ports

* CR: Simplify adding computer to the domain
 2025-08-12 18:02:18 -04:00
Michael Li 8a61d8c2cd chore(e2e): Add option for specifying windows format (#5948) 2025-07-24 12:12:02 -04:00
Michael Li 81e04be6e0 chore(e2e): Set correct availability zones for scenarios (#5937) 
* chore(e2e): Set correct az for rdp target

* chore(e2e): Set correct az for vault
 2025-07-18 17:05:16 -04:00
Michael Li 9778cb95f8 chore(e2e): Fix availability zone check (#5935) 2025-07-17 16:30:27 -04:00
Michael Li 9ce79ab8fe chore(e2e): Add recovery key to boundary config (#5933) 2025-07-15 14:07:50 -04:00
Michael Li e000aeafcd chore(e2e): Fix bucket lifecycle warning (#5912) 
The provider was returning the following warning, which will become an error in future versions of the provider.

No attribute specified when one (and only one) of [rule[0].filter,rules[0].prefix] is required
 2025-07-09 12:14:49 -04:00
Michael Li f9c1053659 chore(e2e): Update service user permissions for windows testing (#5827) 
* chore(e2e): Add service user permission for RDP testing

* chore(e2e): Remove extraneous resource

This resource is managed outside of this module. This would raise conflicts on each apply due to one already existing.
 2025-06-10 16:41:41 -04:00
Michael Li bfa22e9561 chore(e2e): Remove unused code (#5821) 2025-06-05 16:42:03 -04:00
Michael Li 1fdf2167ad test(e2e): Check all addresses in output (#5820) 2025-06-02 14:31:13 -04:00
Michael Li 284cb5e7aa chore(e2e): Set auth_storage_path to a non-temp directory (#5786) 2025-06-02 09:27:58 -04:00
Michael Li d935291f07 test(e2e): Better skip message (#5743) 2025-05-16 15:19:55 -04:00
Michael Li e97ce924b4 test(e2e): Skip pagination tests until large estimated count bug is addressed (#5742) 
See ICU-16649
 2025-05-16 14:32:08 -04:00
Michael Li 90b7d2c0d6 chore(e2e): Add encryption to target ec2 instance (#5672) 2025-04-28 08:29:22 -04:00
Michael Li 14e0b00cce chore(e2e): Update to use ubuntu 22 (#5664) 2025-04-18 10:38:31 -04:00
Michael Li 4304ec0c1c chore(e2e): Address issue with deleting roles/policies (#5646) 
On destroy, there was an issue with deleting IAM roles due to the following error: DeleteConflict: Cannot delete entity, must detach all policies first

This commit adds an option to force the policy detachment, preventing the error.
 2025-04-15 11:31:12 -04:00
Michael Li 132a52c5d9 chore(e2e): Set up ec2 instance storage with encryption (#5580) 2025-03-06 09:55:18 -05:00
Michael Li e5b3f822c5 test(e2e): Address flake in search test (#5572) 
* test(e2e): Address flake in search test

* CR: Add ticket
 2025-03-06 09:46:11 -05:00
Michael Li 14808d197f test(e2e): Differentiate between public and private vault addresses (#5553) 2025-02-20 10:27:43 -05:00
Michael Li 26608ede70 chore: Add note for modifying /etc/hosts (#5499) 2025-01-31 09:28:38 -05:00
Michael Li 80c9f07a48 chore(hcp): Update use of module (#5469) 2025-01-24 10:04:45 -05:00
Michael Li 00a5a8f4c5 test(e2e): Address flakiness in bytes up/down test (#5450) 2025-01-22 11:14:00 -05:00
Michael Li 272c7cf4d3 chore: Add permissions to CI user (#5446) 2025-01-22 10:59:10 -05:00
Michael Li 54c9dc850d chore: Handle case with multiple artifacts (#5442) 2025-01-21 14:11:35 -05:00
Michael Li 554195f49f test(e2e): Add test for connect http (#5423) 
* test(e2e): Add comment to test

* test(e2e): Add test for connect http

* CR
 2025-01-09 12:43:21 -05:00
Michael Li 0a54be59b5 chore: Modify tparse check (#5425) 2025-01-09 09:50:18 -05:00
Michael Li 91c060ca44 test(e2e): Add increased retries due to worker status report changes (#5424) 2025-01-08 15:46:37 -05:00
Michael Li 02fe1b42d3 test(e2e): Extend vault oidc test to authenticate using the OIDC auth method (#5409) 
* refact(e2e): Rename file for consistency

* test(e2e): Extend test to authenticate using oidc auth method

* CR: Add checks for account attributes

* CR: Use any instead of interface

* CR: Use %q
 2025-01-07 14:04:54 -05:00
Michael Li 5077463aa0 chore: Only use dependabot for internal action updates (#5414) 2025-01-07 13:57:21 -05:00
Michael Li ab94d5cf59 chore(e2e): Modify bucket policy to 7 days (#5410) 2025-01-06 17:29:03 -05:00
Michael Li 629d7a93ee chore(e2e): Modify gcp label to meet format constraints (#5400) 
GCP label constraints include the following:

The value can only contain lowercase letters, numeric characters, underscores and dashes. The value can be at most 63 characters long. International characters are allowed.
 2025-01-03 10:47:08 -05:00
Michael Li 3d0f667151 chore(e2e): Update vault addresses in AWS scenarios (#5395) 2025-01-02 09:42:23 -05:00
Michael Li 157c305753 chore: Install tools if cache restore fails (#5394) 
On occasion, the cache restore fails, causing the test pipeline to fail due to not having tparse. This adds a failsafe in the event that there's something wrong with the cache restore.
 2024-12-23 14:55:35 -05:00
Michael LiandJohan Brandhorst-Satzkorn 6ed077c69e test(e2e): Add test for vault oidc provider (#5384) 
* test(e2e): Simplify vault address in docker network

* test(e2e): Add oidc test using vault

* Update enos/modules/docker_vault/main.tf

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2024-12-19 17:06:01 -05:00
Michael Li 8d7a9d7e08 Merge pull request #5347 from hashicorp/moduli-flake-worker-test 
Observed one instance of a test failure when the test failed to connect to the target after changing an API tag on the worker.
 2024-12-11 10:26:08 -05:00
Michael Li 4e59352ded Merge pull request #5340 from hashicorp/judith/edu-web-codeowners 
* allow education to merge image prs and web to control the website source

* keep boundary team permissions to approve any PR

* let education approve PRs to the website nav too

* make spacing more reasonable
 2024-12-11 09:49:09 -05:00
Michael Li 08c245cd00 test(e2e): Update test to mitigate timing flake 
Observed one instance of a test failure when the test failed to connect to the target after changing an API tag on the worker.
 2024-12-10 16:38:29 -05:00
Michael Li e3fb05a519 chore: Update service user with required permission (#5344) 2024-12-10 12:57:02 -05:00
Michael Li 5896a3b44b chore(e2e): Add object expiration policy to s3 bucket (#5298) 
* chore(e2e): Add expiration date to aws bucket objects

* chore(e2e): Add user tag to bucket
 2024-12-05 09:51:53 -05:00
Michael Li ae0ca0c5aa test(e2e): Update module to account for docker image changes (#5295) 
There were some directory changes made to the openssh server docker container. These changes were made to account for that update.
 2024-12-02 16:20:07 -05:00
Michael Li 66e8ec0f41 test(e2e): Fix failure in migration test (#5277) 
* test(e2e): Fix log path to avoid error

* test(e2e): Be explicit about port definition to avoid dockertest issue

* test(e2e): Add check for health
 2024-11-22 15:05:46 -05:00
Michael Li 504050acb9 test(e2e): Add debug to search test (#5274) 
* test(e2e): Fix typo

* test(e2e): Add cache log to output on failure
 2024-11-21 13:50:19 -05:00
Michael Li 820eb395a3 chore(e2e): Increase worker instance size (#5251) 
* chore(e2e): Update to use t2.small instances

Using the updated AWS SDK required more memory and was causing workers to crash.

* chore(e2e): Add identifier to aws instance
 2024-11-18 15:02:19 -05:00
Michael Li 45542b3fab chore(e2e): Add required permission to service user (#5231) 2024-11-14 12:26:44 -05:00
Michael Li 50db63be95 test(e2e): Add retry to search test (#5187) 2024-10-18 18:06:56 -04:00
Michael Li 61f5986f0d chore(enos): Add ipv6 cleanup permission (#5174) 2024-10-17 10:38:24 -04:00
Michael Li 9398248c32 test(e2e): Add user name to AWS resources (#5149) 
This change makes it easier to identify who generated these resources when looking at the AWS console
 2024-10-07 14:12:00 -04:00
Michael Li 30145b1f9c chore: Update use of deprecated hub command (#5127) 2024-09-23 14:37:22 -04:00
Michael Li 40efebf7ab test(e2e): Add check for target authorize-session using scope name and target name (#5118) 2024-09-20 15:28:05 -04:00
Michael Li 08433affc8 doc(e2e): Update enos readme (#5033) 2024-09-06 14:17:40 -04:00
Michael Li 30b999e261 test(hcp): Define TF module for long-lived resources (#5045) 
* test(hcp): Define TF module for long-lived resources

* CR: Move outputs and variables to its own files
 2024-09-05 12:08:07 -04:00
Michael Li 05f281673e test(e2e): Add test for worker api tags (#5005) 
* test(e2e): Add test for worker api tags

* CR: Add additional check for an API tag that's the same as a config tag
 2024-08-14 11:58:27 -04:00
Michael Li edd7ec62f8 test(e2e): Add support for an hcp worker (#4939) 2024-07-23 10:59:39 -04:00
Michael Li 9c56eb5e16 chore: Update go-retryablehttp to 0.7.7 (#4930) 2024-07-15 16:16:30 -04:00
Michael Li dc80ba8d28 chore: Fail workflow if request does not succeed (#4926) 2024-07-11 11:25:17 -04:00
Michael Li 80abefda1b chore(e2e): Add audit logs to aws boundary instances (#4924) 2024-07-09 11:32:49 -04:00
Michael Li 6e5fd945a3 chore(e2e): Add instance ips to output (#4913) 2024-07-09 10:34:17 -04:00
Michael Li ad4957a3c7 chore(e2e): Clean up comments in enos.vars (#4903) 2024-07-08 10:18:30 -04:00
Michael Li 1909889a6f chore(e2e): Define docker attributes to prevent forced replacement on second launch (#4918) 
* chore(e2e): Define settings to prevent forced replacement

On a second `terraform apply`, there were a few attributes forcing the replacement (i.e. regeneration) of the resource. This commit defines some attributes explicitly to prevent the regeneration from occurring.

* chore(e2e): Add extra timeout for openssh server
 2024-07-08 10:08:34 -04:00
Michael Li 8b45b1c515 chore(e2e): Add boundary to path (#4901) 
This adds the boundary application to the path on the respective ec2 instances.
 2024-06-24 14:01:58 -04:00
Michael Li e2872275dc chore: Update UI version (#4897) 2024-06-20 11:11:51 -04:00
Michael Li 333b9e855d chore(e2e): Use public version of enos (#4872) 
* chore(e2e): Use public version of enos

* chore(e2e): Move vault module to this repo

terraform-enos-aws-vault is no longer supported
 2024-06-10 11:13:09 -04:00
Michael Li d408f65519 test(e2e): Add support for dynamic credentials (#4878) 
These changes are necessary to enable testing of dynamic credentials when creating storage buckets.
 2024-06-07 12:05:11 -04:00
Michael Li 3da1615ddb test(e2e): Add check for ldap account attribute mapping (#4867) 2024-06-04 14:24:15 -04:00
Michael Li 61db074b1e chore(e2e): Clean up UI docker scenario (#4843) 
* chore(e2e): Remove unused worker token

* chore(e2e): Remove unused variable
 2024-06-04 13:03:41 -04:00
Michael Li 2467f9107a test(db): Fix skip command (#4860) 2024-06-03 10:02:32 -04:00
Michael Li e18e3ab783 test: Fix tests due to time (#4855) 
* test(billing): Calculate time deltas from a fixed time

Some time calculations are impacted when using the current day vs. the start of the month.

* test(db): Conditionally skip tests at end of month

Certain tests fail when run on the last day of the month because of edge cases in the setup of test data (for example, if today is May 31 and NZ time is June 1). This adds conditional logic to skip those tests when run on the last day of a month.

* CR: typo
 2024-05-31 17:08:57 -04:00
Michael Li 8dd419ab85 chore(e2e): Add minio variables to UI test module (#4840) 2024-05-29 17:11:37 -04:00
Michael Li c986d20cef test(e2e): Rename daemon command to cache (#4833) 2024-05-29 12:02:26 -04:00
Michael Li d519759c53 chore(e2e): Add aws region to UI tests (#4831) 2024-05-28 17:32:31 -04:00