Commit Graph
2382 Commits
Author SHA1 Message Date
Johan Brandhorst-Satzkorn d9c6de4e8b deps: update runc dependency (#4349)
Fixes GHSA-xr7r-f8xq-vfvv
2024-02-01 13:19:24 -08:00
Todd d500f24014 fix: boundary authenticate returns an API error code when auth fails (#4342) 2024-01-31 15:11:28 -08:00
ToddandJohan Brandhorst-Satzkorn d6c9db968a Fix calculating uptime after system sleep (#4332)
* Fix calculating uptime after system sleep

* Update internal/clientcache/internal/daemon/status_handler.go

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-01-31 12:31:43 -08:00
Jeff Mitchell 18f863514e Finish sqltests for multi grant scopes (#4320) 2024-01-30 11:04:05 -05:00
Devon Anderson dbf19593ac Update Boundary to latest UI (#4322) 2024-01-30 07:49:12 -08:00
Todd 7e7e6369ae pass on the max search refresh timeout to server (#4321) 2024-01-29 15:38:45 -08:00
Jeff Mitchell 025fce6f95 Change error message and add beginnings of sql tests (#4319) 2024-01-29 16:02:16 -05:00
Devon Anderson 36c57cb918 Update Boundary to latest UI (#4318) 2024-01-29 12:26:42 -08:00
Todd 0705ed4e68 Do not try to autodiscover tokens when doing token lookups using provided tokens. (#4316) 2024-01-29 10:23:23 -08:00
Michael Li 25dff3322a test: Randomize docker network name (#4306)
We were observing TestAuthorizeSession_Errors failing in CI due to it complaining that a docker network with name TestAuthorizeSession_Errors already exists. Looking deeper, it turns out that internal/daemon/controller/handlers/targets/tcp and internal/daemon/controller/handlers/targets/ssh both have a test with that same name, and for some reason, they often run on top of each other, causing one of the tests to fail to create a docker network.

To prevent any conflicts with tests that have the same name, this commit randomizes the network name that is created.
2024-01-29 09:49:57 -05:00
dde833e8cf Decrease number of flags shown for daemon/search (#4312)
* Decrease number of flags shown for daemon/search
* Update changelog
---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-01-26 15:56:41 -08:00
Devon Anderson e85331448d Update Boundary to latest UI (#4313) 2024-01-26 18:53:55 -05:00
Jeff Mitchell 8e71caa2e3 Address some review feedback 2024-01-26 18:24:27 -05:00
Jeff Mitchell 296639e484 Add new GrantsForUser test (#4289)
* Add new GrantsForUser test

This exercises a wide array of granting possibilities and ensures that
we see all of the desired grants and none that we don't expect.

* Address review feedback
2024-01-26 11:59:40 -08:00
Jeff Mitchell 84c0e94097 Add a bit more useful worker auth output (#4308) 2024-01-26 14:54:00 -05:00
Michael Li 95ad3eab48 docs: Update resource table format (#3432) 2024-01-26 14:32:01 -05:00
Devon Anderson 6f1a7c1e41 Update Boundary to latest UI (#4307) 2024-01-26 13:52:36 -05:00
Todd b734c43cda return error when creating table fails (#4305) 2024-01-26 10:46:29 -08:00
Jim a61993abd7 fix (auth): event verify error (#4302) 2024-01-26 13:02:15 -05:00
Johan Brandhorst-Satzkorn 72c87e81cf internal/authtoken: use view for listing (#4284)
Use the existing auth token account view for listing
instead of a custom query. Testing shows that the
performance difference is negligible, and this is simpler.
2024-01-25 13:48:43 -08:00
Jeff Mitchell e91c4cbfe2 Remove support for 'id' field in grants (#4290) 2024-01-25 15:58:55 -05:00
Louis Ruch 7921ce22fd test(grant): Use ID to validate version check (#4274)
* test(grant): Use ID to validate version check

* Update docs from id to ids

* Remove 'id' in 0.16.0
2024-01-25 13:27:22 -05:00
Louis Ruch fe6126438e chore: Fix typos (#4285) 2024-01-25 09:43:40 -08:00
dani 6a55245394 fix(cli): StoragePolicyId indent on list scopes (#4279) 2024-01-25 12:27:36 -05:00
Johan Brandhorst-Satzkorn 133e928c6d internal/db/schema: update recording indexes (#4278)
The new index includes the new delete_time and
delete_after columns, which are used in the list query.
2024-01-25 08:56:15 -08:00
Todd e32a25f2a4 No longer enforce version matching between daemon and cli (#4271)
* No longer check version matching between daemon and cli

* Add Log Service Handler and report if the daemon is running in background mode
2024-01-24 16:26:15 -08:00
Jeff Mitchell 03825a5b8f Address some extra review feedback on multi scope grants (#4272) 2024-01-24 15:43:49 -05:00
Devon Anderson 7707524ebf Update Boundary to latest UI (#4270) 2024-01-23 12:56:14 -08:00
f5dd457b34 Multiple grant scope IDs (#4251)
Co-authored-by: Timothy Messier <tim.messier@gmail.com>
Co-authored-by: Todd <github@quaddi.com>
2024-01-23 14:33:09 -05:00
Todd d0eb670dcf s/Full Fetch/Recheck Support/ in logs and expose filter query param to search command (#4269)
* s/Full Fetch/Recheck Support/  and expose filter query param to command
2024-01-22 17:39:52 -08:00
Todd 0dac9005c1 Boundary auth without a keyring configured behaves like -keyring-type none (#4268) 2024-01-22 16:40:23 -08:00
Louis Ruch fa69ddcb8a fix(db): Set max storage policy days (#4267) 2024-01-22 16:00:17 -08:00
Jim 6a37c93d77 fix: properly handle rows.Err() (#4261)
* fix (auth): properly handle rows.Err()

* fix (auth/ldap): properly handle rows.Err()

* fix (auth/oidc): properly handle rows.Err()

* fix (auth/password): properly handle rows.Err()

* fix (authtoken): properly handle rows.Err()

* fix (credential): properly handle rows.Err()

* fix (credential/static): properly handle rows.Err()

* fix (credential/vault): properly handle rows.Err()

* fix (db): properly handle rows.Err()

* fix (db/schema): properly handle rows.Err()

* fix (db/migrations): properly handle rows.Err()

* fix (host): properly handle rows.Err()

* fix (host/plugin): properly handle rows.Err()

* fix (host/static): properly handle rows.Err()

* fix (iam): properly handle rows.Err()

* fix (kms): properly handle rows.Err()

* fix (oplog): properly handle rows.Err()

* fix (pagination/purge): properly handle rows.Err()

* fix (plugin): properly handle rows.Err()

* fix (job/scheduler): properly handle rows.Err()

* fix (server): properly handle rows.Err()

* fix (session): properly handle rows.Err()

* fix (target): properly handle rows.Err()
2024-01-22 14:03:40 -05:00
Jim c6714c1302 refact: remove used limit parameter in query funcs (#4263) 2024-01-22 14:02:50 -05:00
Jim 81c217c1b0 refact (authmethods): remove used list auth methods (#4264) 2024-01-22 14:02:24 -05:00
Jeff Mitchell 3414e09cbb Remove announced deprecated code allowing ports in target addrs (#4265)
We made it an error in the API to do this a while back; this cleans up
the logic to disallow it for existing targets too.
2024-01-22 13:49:17 -05:00
Todd 30066c06f5 Add log location to the status output (#4260) 2024-01-22 08:42:19 -08:00
Jeff MitchellandJohan Brandhorst-Satzkorn fff5f9506f Migrate proxy logic to the API package (#4216)
This allows arbitrary programs to have an easy mechanism to make
connections through Boundary using Go. Internal cluster tests and test
helpers have been migrated to use this package, as well as the `connect`
command.

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-01-21 22:34:33 -05:00
David Bond 422bd6c224 Use correct argument name in log line (#4252)
This commit modifies a log line produced in the WorkerStatusReport function when closing
orphaned connections that appears to incorrectly label a worker identifier as a controller
identifier.

Signed-off-by: David Bond <davidsbond93@gmail.com>
2024-01-19 15:21:57 -08:00
Devon Anderson 43c37ab1d9 Bump UI commit (#4259) 2024-01-19 15:20:53 -08:00
Johan Brandhorst-Satzkorn b229ece914 internal/db: use more efficient index for host listing (#4256)
In tests, the index including the catalog_id performs significantly
better.
2024-01-19 10:59:18 -08:00
Louis Ruch 22fcf8a2ba Projects do not have perm to attach/detach policy 2024-01-19 09:39:13 -08:00
Louis Ruch d620dcbd4f feat(db): Update storage policy override default to false 2024-01-19 09:39:10 -08:00
Todd b8f4e16ecf Fix flaky log rotation test (#4257)
* Fix flaky log rotation test
2024-01-18 14:44:53 -08:00
Timothy Messier 9c5c17a3ee feat(cmd): Disable postgres JIT for boundary dev
After updating `boundary dev` to use postgres:12 by default, it was
noticed that the responsiveness of boundary was noticeably slower. This
is due to the introduction of JIT being enabled by default in
postgres:12. JIT seems to incur noticeable overhead without providing
benefits, at least for the instance used for `boundary dev`.

It is also worth noting that for postgres:14 and newer, JIT does not get
triggered for the same queries since they seem to result in a cheaper
query plan that does not exceed the default threshold for JIT.

See:
    https://www.postgresql.org/docs/current/jit.html
    ICU-12283
2024-01-18 19:37:46 +00:00
Todd 884a0cb1fc Fix daemon synopsis and command grouping (#4249) 2024-01-18 09:54:21 -08:00
Jeff Mitchell 253d79116c Swap id field in grants to ids since that's now standardized (#4250)
* Swap id field in grants to ids since that's now standardized

* Fix some tests I missed

* Update generated resource table
2024-01-17 23:54:49 -08:00
Todd 962f9bd638 Pass in options to NewCommand call (#4248) 2024-01-17 16:41:28 -08:00
Devon Anderson 66393ca3d6 Bump UI commit (#4245) 2024-01-17 15:47:28 -05:00
Jeff Mitchell 8c1bdb2190 Fix Unix listener causing 500s on Mac (#4243)
Some platforms use `@` for a Unix socket address, and some leave it
empty. In the empty case this causes the rate limiting code to throw a
500 error. This commit standardizes on using `@` for incoming
connections over a Unix socket.
2024-01-17 11:38:53 -08:00