Commit Graph
4229 Commits
Author SHA1 Message Date
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] e390afe45d Result of tsccr-helper -log-level=info gha update -latest . (#4922)
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-07-09 10:15:49 -04:00
Johan Brandhorst-Satzkorn 96052c6a06 Upgrade Go version (#4923)
This fixes a security vulnerability in net/http, CVE-2024-24791.
2024-07-08 10:13:00 -07:00
Michael Li ad4957a3c7 chore(e2e): Clean up comments in enos.vars (#4903) 2024-07-08 10:18:30 -04:00
Michael Li 1909889a6f chore(e2e): Define docker attributes to prevent forced replacement on second launch (#4918)
* chore(e2e): Define settings to prevent forced replacement

On a second `terraform apply`, there were a few attributes forcing the replacement (i.e. regeneration) of the resource. This commit defines some attributes explicitly to prevent the regeneration from occurring.

* chore(e2e): Add extra timeout for openssh server
2024-07-08 10:08:34 -04:00
Dan HeathandRobin Beck 92b2d4490e docs: Document billing command (#4915)
* docs: Document billing command

* docs: Edits

* docs: Clarify inclusive/exclusive date format

* Apply batch of suggestions from code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Minor edit

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-06-28 14:27:59 -04:00
d2c73dd2fc Added sample Terraform code for session recording configuration (#4556)
* added sample terraform code to create storage bucket configuration

* added terraform sample code for target configuration

* Added HCP Boundary Plus as requirement in the note

* added sample TF code to configure a storage policy

* added group attributes to tabs

* added terraform tab for updating a storage policy

* formatting and style guide changes

* docs: Lowercase credential types

* docs: Apply active voice

* docs: Close prefix

---------

Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-27 15:16:33 -04:00
Irena RindosandDan Heath 7e36f32e52 update tls docs to include controller led (#4905)
* update tls docs to include controller led

* docs: Minor style edits

* docs: Minor edits

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-27 11:43:39 -04:00
cb948018f9 Update style on core workflow image and light/dark theme (#4567)
* Update style on core workflow image and light/dark theme
Update style on how boundary works image and light/dark theme
Remove redundant image

* docs: Fix typo

---------

Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-26 14:46:19 -04:00
Jeff MitchellandJohan Brandhorst-Satzkorn 4e0c2d79ac Add grant scope IDs to role list (#4893)
This adds grant_scope_ids in the output of role listing. The lookup for grant scope IDs was changed to allow taking in a set of roles instead of just a single role, and the results are collated afterwards.

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-06-25 13:05:52 -04:00
d43565038f Update changelog for release 0.16.2 (#4889) (#4890)
* add minio changes

* add nodee updates to changelog

---------

Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
Co-authored-by: irenarindos <irena.rindos@gmail.com>
2024-06-25 07:39:39 -07:00
Michael Li 8b45b1c515 chore(e2e): Add boundary to path (#4901)
This adds the boundary application to the path on the respective ec2 instances.
2024-06-24 14:01:58 -04:00
Michael Li e2872275dc chore: Update UI version (#4897) 2024-06-20 11:11:51 -04:00
Dan HeathandMichael Li 5df46b1b35 docs: Release notes for 0.16.2 (#4898)
* docs: Release notes for 0.16.2

* Update website/content/docs/release-notes/v0_16_0.mdx

Co-authored-by: Michael Li <michael.li@hashicorp.com>

---------

Co-authored-by: Michael Li <michael.li@hashicorp.com>
2024-06-18 12:45:47 -04:00
Johan Brandhorst-SatzkornandJeff Mitchell c6f3c375f3 api: remove deprecated grant_scope_id field (#4886)
* api: remove deprecated grant_scope_id field

The grant_scope_id field was deprecated in 0.15.0, so we can remove
it for 0.17.0.

* Fix tests

* Fix more tests

* Remove an option and some related code that stuck around

* Fix bats tests

---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
2024-06-17 12:09:33 -07:00
Jeff Mitchell d547e0d459 Add test ability to reinitialize worker auth roots on startup (#4895) 2024-06-17 12:26:55 -04:00
Irena Rindos b54608b9f2 worker auth: use new previous pkix field (#4894)
* worker auth: use new previous pkix field
2024-06-14 13:20:50 -04:00
Hugo d788c9fd9d feat(plugins): Update MinIO plugin to v0.1.3 (#4887) 2024-06-10 17:39:30 +01:00
Michael Li 333b9e855d chore(e2e): Use public version of enos (#4872)
* chore(e2e): Use public version of enos

* chore(e2e): Move vault module to this repo

terraform-enos-aws-vault is no longer supported
2024-06-10 11:13:09 -04:00
Michael Li d408f65519 test(e2e): Add support for dynamic credentials (#4878)
These changes are necessary to enable testing of dynamic credentials when creating storage buckets.
2024-06-07 12:05:11 -04:00
029ab627e2 Rab update filtering managed groups (#4821)
* renames managed groups filtering page, adds LDAP support

* updates managed groups filtering links and tutorials links

* Update website/content/docs/concepts/filtering/managed-groups.mdx

Co-authored-by: Jim <jlambert@hashicorp.com>

* docs: Edits

---------

Co-authored-by: Jim <jlambert@hashicorp.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-06 13:15:42 -06:00
Irena RindosandDanielle Miu 61e7ab4738 Allow descriptions to contain newlines and other whitespace (#2599)
* Allow names and descriptions to contain newlines and other whitespace

* separate validate name from validate description

* update changelog

---------

Co-authored-by: Danielle Miu <29378233+DanielleMiu@users.noreply.github.com>
2024-06-06 13:03:42 -04:00
Irena Rindos 08f391c5d6 workerauth: satisfy NodeIdLoader interface (#4870)
* workerauth: satisfy NodeIdLoader interface
2024-06-06 13:03:05 -04:00
David Bond 0c25dbad13 Use appropriate gRPC error codes for OIDC (#4877)
This commit makes modifications to the OIDC request handlers to return appropriate gRPC
status codes on errors. Before this change, boundary presents the internal error codes to
clients. This causes problems for reverse proxies, as these status codes are mapped to
non-standard HTTP response codes which are ultimately all turned into 500 responses when
4xx status codes are more appropriate and descriptive of the error returned.

Some modifications in this commit include calls to `event.WriteError` so that the
internal error is written to the controller log for visibility. Comments about
potential duplicate logs are now removed as `event.WriteError` is not called when using
functions from the `handlers` package.

Signed-off-by: David Bond <davidsbond93@gmail.com>
2024-06-06 14:59:43 +01:00
Robin Beck 84ae33994a changes sync_interval_seconds default to 600 (#4823) 2024-06-05 13:54:57 -04:00
Daniel GreeningerandDan Heath 4f3c109eb5 docs: multi-hop error message linked to duplicate controller names (#4874)
* multi-hop error message linked to duplicate controller names

* docs: Minor edits

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2024-06-04 15:25:42 -04:00
Michael Li 3da1615ddb test(e2e): Add check for ldap account attribute mapping (#4867) 2024-06-04 14:24:15 -04:00
Michael Li 61db074b1e chore(e2e): Clean up UI docker scenario (#4843)
* chore(e2e): Remove unused worker token

* chore(e2e): Remove unused variable
2024-06-04 13:03:41 -04:00
Rowan Smith d161124ba2 update script to not print null values (#4871)
Added a `select(.value != "")` entry to the jq statement to avoid it printing null values. This is to make life easier when copy/pasting the output from the script.

This solves the problem of people overwriting existing values they may have set, namely `VAULT_ADDR` and `VAULT_TOKEN`.

before:

```
➜  enos git:(main) ✗ bash scripts/test_e2e_env.sh               
export BOUNDARY_ADDR='http://some-address:9200'
export BOUNDARY_LICENSE=''
export E2E_AWS_ACCESS_KEY_ID=''
export E2E_AWS_BUCKET_NAME=''
export E2E_AWS_HOST_SET_FILTER=''
export E2E_AWS_HOST_SET_FILTER2=''
export E2E_AWS_HOST_SET_IPS='[""]'
export E2E_AWS_HOST_SET_IPS2='[""]'
export E2E_AWS_REGION=''
export E2E_AWS_SECRET_ACCESS_KEY=''
export E2E_MAX_PAGE_SIZE='10'
export E2E_PASSWORD_ADMIN_LOGIN_NAME='admin'
export E2E_PASSWORD_ADMIN_PASSWORD='xdBht'
export E2E_PASSWORD_AUTH_METHOD_ID='ampw_UI0wkZdCfJ'
export E2E_SSH_CA_KEY=''
export E2E_SSH_KEY_PATH='/Users/something.pem'
export E2E_SSH_USER='ubuntu'
export E2E_TARGET_ADDRESS='10.13.1.254'
export E2E_TARGET_PORT='22'
export E2E_TESTS='true'
export E2E_VAULT_ADDR=''
export E2E_WORKER_ADDRESS=''
export E2E_WORKER_TAG_EGRESS=''
export E2E_WORKER_TAG_INGRESS=''
export VAULT_ADDR=''
export VAULT_TOKEN=''
```

after:

```
➜  enos git:(main) ✗ bash scripts/test_e2e_env.sh               
export BOUNDARY_ADDR='http://some-address:9200'
export E2E_AWS_HOST_SET_IPS='[""]'
export E2E_AWS_HOST_SET_IPS2='[""]'
export E2E_MAX_PAGE_SIZE='10'
export E2E_PASSWORD_ADMIN_LOGIN_NAME='admin'
export E2E_PASSWORD_ADMIN_PASSWORD='xdBht'
export E2E_PASSWORD_AUTH_METHOD_ID='ampw_UI0wkZdCfJ'
export E2E_SSH_CA_KEY=''
export E2E_SSH_KEY_PATH='/Users/something.pem'
export E2E_SSH_USER='ubuntu'
export E2E_TARGET_ADDRESS='10.13.1.254'
export E2E_TARGET_PORT='22'
export E2E_TESTS='true'
```
2024-06-04 09:43:34 -04:00
Dan Heath 2541a3c398 docs: Revise requirements for SSH targets (#4866)
* docs: Revise requirements for SSH targets

* docs: Minor edit
2024-06-03 14:09:25 -04:00
Dan Heath 97d749fa26 docs: Clarify credentials and SSH targets (#4863)
* docs: Clarify credentials and SSH targets

* Trigger build
2024-06-03 12:08:37 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 1a2127a0e4 Result of tsccr-helper -log-level=info gha update -latest . (#4858)
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-06-03 10:47:37 -04:00
Michael Li 2467f9107a test(db): Fix skip command (#4860) 2024-06-03 10:02:32 -04:00
Michael Li e18e3ab783 test: Fix tests due to time (#4855)
* test(billing): Calculate time deltas from a fixed time

Some time calculations are impacted when using the current day vs. the start of the month.

* test(db): Conditionally skip tests at end of month

Certain tests fail when run on the last day of the month because of edge cases in the setup of test data (for example, if today is May 31 and NZ time is June 1). This adds conditional logic to skip those tests when run on the last day of a month.

* CR: typo
2024-05-31 17:08:57 -04:00
ToddandJohan Brandhorst-Satzkorn 5ff3216565 Instead of relying on termination reason use status (#4852)
* Instead of relying on termination reason use status

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2024-05-31 08:12:31 -07:00
Todd 98b5e3fa52 Close proxy listener if session is no longer active (#4850)
* Close proxy listener if session is no longer active
2024-05-30 16:12:17 -07:00
Dan Heath 4fd49f00f6 docs: Update release notes for 0.16.1 (#4838)
* docs: Update release notes for 0.16.1

* docs: Specify fix is for self-managed versions

* docs: Minor rewrites for clarity and style

* docs: Minor rewrites for sentence length
2024-05-30 16:14:07 -04:00
Elim Tsiagbey 93aae23895 chore: update change log (#4845) 2024-05-30 15:26:54 -04:00
Dan HeathandSepehr 68712fbef8 docs: Add new telemetry to changelog (#4839)
* docs: Add new telemetry to changelog

* Update CHANGELOG.md

Co-authored-by: Sepehr <46660996+sepehrfrgh@users.noreply.github.com>

* docs: Add PR for session recording proto

---------

Co-authored-by: Sepehr <46660996+sepehrfrgh@users.noreply.github.com>
2024-05-30 11:59:13 -04:00
Michael Li 8dd419ab85 chore(e2e): Add minio variables to UI test module (#4840) 2024-05-29 17:11:37 -04:00
Todd 6cb7c74336 point to new api taged version (#4836) 2024-05-29 12:05:59 -07:00
Todd 6c378e7723 Create an option to set the session teardown timeout (#4834) 2024-05-29 10:23:23 -07:00
Michael Li c986d20cef test(e2e): Rename daemon command to cache (#4833) 2024-05-29 12:02:26 -04:00
Michael Li d519759c53 chore(e2e): Add aws region to UI tests (#4831) 2024-05-28 17:32:31 -04:00
Michael Li a22f031ce0 chore(e2e): Use region specified in variable (#4814) 2024-05-28 09:46:01 -04:00
Todd e0a7c9acdd Document the deprecation of include_terminated (#4602)
* Document the deprecation of include_terminated

* Update the changelog
2024-05-24 12:04:08 -07:00
Sepehr 1f48ba5d1a Telemetry: storage bucket proto (#4824)
* oss:feat(storage): add observation tag in proto for telemetry

* oss:feat(storage): add observation tag in proto service

* oss:feat(storage): generate proto files with changes

* oss:feat(storage): add storage bucket id to target proto
2024-05-24 10:34:15 -07:00
Uruemu S Aganbi 1aa8c2e1d7 Add observation tags for Session Recording Service (#4825)
* Add observation tags to session_recording.proto

* remove scope_info observation tags

* Remove quotes and add tag to storage_bucket_id

* Add tags for session recording service

* Update proto definitions

- Remove gotags on messages
- Remove quotes
2024-05-24 11:30:48 -04:00
Michael Li 69dfeacc55 chore(e2e): Remove call to tparse (#4817) 2024-05-23 09:54:27 -04:00
Johan Brandhorst-Satzkorn ec289420d3 clientagentcmd: use "localhost" to call client agent (#4816)
The client agent serves on "localhost:9300" by default. It appears
on some systems this resolves to ::1:9300 and on some systems
127.0.0.1:9300. We should use the same address on the client
as the server to avoid any incompatibilities between systems.
2024-05-22 14:17:30 -07:00
Johan Brandhorst-Satzkorn a1391db090 internal/cmd: rename ferry files to client_agent (#4815)
This was missed in the big rename PR
2024-05-22 13:49:06 -07:00