CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,211 Commits 7 Branches 2 Tags
dbad3eee56838a38bdab5ff04168d9954833b6d2
Commit Graph
3211 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Stan Ryzhov dbad3eee56 test(e2e): Update env variables and target creation (#3339) 2023-06-21 15:45:22 -04:00
Cameron Perera a9b6c76d26 chore: update copyright_year in copywrite config (#3349) 2023-06-21 13:27:01 -05:00
Michael Li d920676112 chore: Update some e2e test scenarios to use docker-based infra (#3345) 
* chore: Update docker scenario to check edition

* chore: Use large runner to resolve flakiness issues

* chore: Migrate enos scenarios to use docker
 2023-06-21 11:36:47 -04:00
Jim fabcb8eeeb fix: update recursive auth-method listing test (#3348) 
Recently, we made the initial dev ldap auth-method active-public, so
it now shows up in listings.  This simply fixes the tests to
reflect that change.
 2023-06-21 09:38:47 -04:00
Johan Brandhorst-Satzkorn 9474b373b8 api: remove create from auth-tokens help (#3341) 
The auth-tokens help command included a reference to
a non-existent auth-tokens create command. Replace the
default help and also add a helpful pointer to the authenticate
command.
 2023-06-20 13:17:43 -07:00
Elim Tsiagbey 103b1e78aa docs: update NormalizeSetData comments (#3343) 
* docs: update NormalizeSetData comments

Update comments for `NormalizeSetData` to include when `NormalizeSetData` could be useful and the non-obvious consequences of using it.
 2023-06-20 16:11:04 -04:00
Jim 723dbdfedf fix (boundary dev): make the LDAP auth method active-public (#3344) 2023-06-20 13:56:20 -04:00
Elim Tsiagbey 15e7bbe816 fix: add plugin normalization for onCreate methods (#3338) 
onUpdate for host catalog & host set make a call to the plugin to normalize attributes based in. This behavior was introduced [PR-2376](https://github.com/hashicorp/boundary/pull/2376) but was only applied on onUpdate. This created different data structures for onCreate calls and onUpdate calls.
 2023-06-20 13:38:52 -04:00
Michael Li b9bef35f51 chore: Ignore tags in workflow (#3337) 2023-06-16 12:51:30 -04:00
Dan Heath 461427adbc docs: Fix display issue with bullets and code (#3333) 2023-06-15 13:05:16 -04:00
Michael Li 401493d225 test(e2e): Rename test packages (#3334) 2023-06-15 11:51:14 -04:00
Jeff Mitchell 3a9903a836 Don't attempt session teardown if the session is expired (#3312) 
This avoids a situation where teardown results in an error due to the
worker not accepting the connection (since the credentials are invalid).
Teardown is a best-effort way to avoid sessions that have long lifetimes
ending up having to wait for expiration before cleanup, but if we're
near expiration it doesn't really matter.

Fixes ICU-9633
 2023-06-14 21:55:24 -04:00
Jeff Mitchell 8322916fb4 Remove all deprecated Err/Wrap/E calls (#3286) 2023-06-14 21:55:24 -04:00
Jeff Mitchell feb3aea38f Support multiple IDs in grants (#3263) 
This allows specifying multiple IDs in grants via an `ids` field, which
will eventually become the normal way to specify IDs. Internally, each
grant with multiple IDs turns into multiple ACL grants each with a
single ID; to make this distinction clearer and allow for better
separation of concerns an AclGrant type has been introduced, so really
multiple IDs in a Grant turn into multiple AclGrants.

The nice thing about doing it this way is that it becomes purely a
parsing concern; no actual validation logic has changed.

For backwards compatibility with grants already stored in roles, we do
not error out if `id` is specified. However, eventually we will simply
not support grants with `id` coming via the API; they will fail API
validation, such that new grants will require the use of the updated
`ids` field.

A follow-on PR will plumb this through the service handlers/API/CLI, but
I decided to do it in separate chunks to make reviewing easier, given
that they are easily separable into the internal and external aspects of
the change.

* Add CLI/API checks around using ID in grants (#3264)

* Plumb through some contexts to remove a lot of deprecated errors (#3268)
 2023-06-14 21:55:24 -04:00
Dan Heath 8acc73dc6e docs: Add bsr key to requirements (#3330) 
* docs: Add bsr key to requirements

* docs: Rewrite for clarity

* docs: Add bsr key definition to security page
 2023-06-14 15:58:24 -04:00
Michael Li 5f2f6ca6ca test: Set worker config to a variable (#3324) 2023-06-14 13:44:08 -04:00
PPacent d15f3cec88 Update system-requirements.mdx (#3327) 
Clarify Postgres version recommendation
 2023-06-14 12:55:16 -04:00
Irena RindosandDan Heath c0538bd074 docs: Update storage bucket worker requirement (#3320) 
* docs: Update storage bucket worker requirement

* docs: Minor copy edits

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-06-14 11:18:20 -04:00
Michael Li 4f1552abde chore: Add check for go mod tidy (#3321) 2023-06-13 14:33:26 -04:00
Dan Heath 2e8cd853a5 docs: Fix display issue with code blocks (#3314) 2023-06-13 05:11:42 -04:00
PPacentandDan Heath 4db4fae949 Updates to 'what is Boundary?' (#3315) 
* Updates to 'what is Boundary?'

* Typo fixes

* simplifying edits

* Update website/content/docs/overview/what-is-boundary.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/overview/what-is-boundary.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/overview/what-is-boundary.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/overview/what-is-boundary.mdx

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-06-13 01:49:41 -07:00
Michael Gaffney f98167fd2a doc(changelog): Add 0.13 release 2023-06-13 00:53:40 -07:00
Robin BeckDan HeathJeff MalnickMichael LiIrena RindosJohan Brandhorst-SatzkornXingLu WangJeff Mitchell
 		2179af63cb Hashidays Docs (#3313) 
docs: add 0.13 feature docs

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Jeff Malnick <malnick@gmail.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com>
Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2023-06-12 23:53:27 -07:00
Louis Ruch 0a921beb42 chore: Add DHC changelog entry 2023-06-12 16:28:30 -07:00
Michael Gaffney fda1a0b572 doc(changelog): Add LDAP auth method 2023-06-12 17:53:39 -04:00
Mark Collao 23bc0782ea chore: update security-scanner workflow runner (#3309) 2023-06-12 16:07:55 -05:00
Michael Gaffney 531f7cf449 changelog: reorder sections 2023-06-12 17:01:03 -04:00
Cameron Perera 4ad2d5664e chore: update CHANGELOG with UI changes (#3307) 
* chore: update CHANGELOG with UI changes

* chore: include UI bug fixes
 2023-06-12 15:04:28 -05:00
Timothy Messier 2d81103ef5 doc(docker): Separate docker.io readme contents from directory readme (#3308) 
This moves the contents of the readme used for hashicorp/boundary on
docker.io/registry.hub.docker.com to a separate readme file from the one that
documents how to build docker images. It also makes some minor fixups
and updates the docker.io readme, must notably updating the minimum
version of postgres that boundary requires.
 2023-06-12 15:31:27 -04:00
Jeff Mitchell 8b7d063a6d Revert "Add multiple IDs in changelog" 
This reverts commit c4f8a77ad8.
 2023-06-12 14:11:30 -04:00
Jeff Mitchell c4f8a77ad8 Add multiple IDs in changelog 2023-06-12 14:03:11 -04:00
XingLu WangandDan Heath 2ebae57b9e IAM New Docs (#3201) 
* IAM docs

* added diagram

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Apply suggestions from code review

* Apply suggestions from code review

* Updates to IAM docs

* Update iam.mdx

* docs: Markdown syntax fixes

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-06-12 16:05:36 +02:00
XingLu WangandDan Heath 4fc872fc15 Restructuring and addition to permissions docs (#3270) 
* docs: Create grants topic

* Update grants

* Restructuring of permissions docs

* Fixing links

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update website/content/docs/concepts/security/permissions/index.mdx

* Update website/content/docs/concepts/security/permissions/index.mdx

* Update website/content/docs/concepts/security/permissions/advanced.mdx

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* docs: Add redirect for deleted file

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-06-12 10:04:43 -04:00
Johan Brandhorst-Satzkorn 888349c99f website: add separate note about worker tags (#3306) 
Using worker tags in expressions can be confusing, this adds
a note to make it clear how to match values in tags.
 2023-06-12 09:15:40 -04:00
Louis Ruch 6eb1c9919f chore: update sdk/api deps 2023-06-09 16:42:30 -07:00
Timothy Messier 837734b745 test(bsr/fstest): Add new FS for testing out of space errors (#3305) 
This provides a new storage.FS implementation that expands the on
fstest.MemFS by allowing tests to mark the filesystem as out of space.
When this happens any write/create operation will start returning an
error indicating that the filesystem is out of space.
 2023-06-09 16:32:24 -04:00
Dharini Jeeva f7823d3f71 ui changes (#3304) 2023-06-09 11:47:20 -07:00
Michael Milton 7820af3924 rename optout to lurEnabled for clarity (#3303) 2023-06-09 12:41:12 -04:00
Jeff Mitchell 929ede1c18 Modify some tests to expose error cases that weren't being exposed (#3302) 2023-06-09 11:13:15 -04:00
Johan Brandhorst-Satzkorn e4f49e1bb0 api: add classification to session recordings (#3300) 2023-06-08 23:01:39 -07:00
Todd 8980143278 Allow kms purpose "downstream-worker-auth" (#3299) 2023-06-08 15:41:49 -07:00
Jeff Mitchell 74e8491f85 Disallow updates on all types of KMS workers (#3295) 
This also slightly changes delete logic and ensures authorized actions
match what is allowable.
 2023-06-08 12:17:45 -04:00
Johan Brandhorst-Satzkorn ebcd6d2828 api: remove connection ID (#3298) 
Removing this until we figure out why it's sometimes missing.
May add it back again later.
 2023-06-08 09:15:12 -07:00
Timothy Messier fe7c87dc82 feat(bsr/ssh): Add open failure details to ChannelSummary (#3297) 2023-06-08 11:17:32 -04:00
Cameron Perera eaaaae5cce chore: bump ui commit (#3296) 2023-06-07 16:28:11 -07:00
Todd 5a68d789ec Initialize base context when creating New worker and not at start (#3294) 2023-06-07 11:42:16 -07:00
Johan Brandhorst-Satzkorn 43f3c6bd68 Upgrade Go version to 1.20.5 (#3293) 
Go 1.20.5 contains security fixes for the runtime and the compiler
 2023-06-07 10:09:43 -07:00
XingLu WangandDan Heath 1628fcf01f Worker docs cleanup for 0.13 (#3292) 
* Worker docs cleanup

* Apply suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

* Update pki-worker.mdx

* Update website/content/docs/configuration/worker/pki-worker.mdx

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
 2023-06-06 15:14:31 -07:00
Timothy Messier f7386a5d53 Merge pull request #3280 from hashicorp/tmessi-fix-session-list 
fix(session): List performance with large number of session connections

This includes the backported migration and a migration to ensure the next
release has the correct view.
 2023-06-06 14:34:15 -04:00
Michael Milton fbf56793c6 Add snapshot job (#3282) 
* snapshot job

* update census to include context, controller to include snapshot registry

* no need to export runFn in snapshot
 2023-06-06 14:26:01 -04:00