CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
941 Commits 7 Branches 2 Tags
e426fcf20ec5ac0d54abe3ee552f7bb2eba2f5aa
Commit Graph
206 Commits
Author SHA1 Message Date
Jeff Mitchell e426fcf20e Gofumpt 2021-02-16 14:14:53 -05:00
Pete Pacent db6b54d260 Update desktop.mdx (#938) 
Add disclaimer for desktop client doc and releases link
 2021-02-16 10:17:36 -08:00
Jeff Malnick b8fe4083c1 Add initial Desktop docs (#930) 
* docs: initial desktop docs
 2021-02-12 15:38:41 -08:00
Jeff Mitchell 9761f1deee Prep for release 2021-02-12 11:53:32 -05:00
Jeff Mitchell 22462cdd84 Add read:self and cancel:self to sessions; add dev unpriv user (#923) 
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed.

* Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing.

* Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
 2021-02-11 13:14:18 -05:00
Jeff MitchellandJeff Malnick d279a906ce Allow public_cluster_addr to use an env var or file (#907) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-10 20:22:02 -05:00
Jeff Mitchell 5266eb3269 Don't error worker filters if a key isn't found, treat it as a non-match (#900) 2021-02-10 15:59:31 -05:00
Bryce Kalow f97ffebaaf chore: upgrade nextjs-scripts & next (#908) 2021-02-09 10:38:08 -05:00
Jeff Mitchell cb3980cb8c Remove list:self from main (#915) 
* Remove list:self from main

As per futher discussions, we won't be supporting this, in favor of
simply read:self and cancel:self (since listing now already filters out
items on which you have no permissions).

This doesn't remove list:self entirely from the code base as much of
that will simply be converted to read:self and cancel:self -- that will
be in a later PR. However, with this removed if we want to release we
won't expose an API publicly that isn't going to stick around.
 2021-02-05 14:01:03 -05:00
Jeff Mitchell 1afa3a4b6c Disallow an invalid grant format (#914) 2021-02-05 12:39:55 -05:00
Jeff MitchellandJeff Malnick 6d2ab34087 Add initial filtering docs (#898) 
* Add initial filtering docs

Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2021-02-01 16:03:46 -08:00
Jeff Mitchell ba6c0df8ca Prep for 0.1.5 2021-01-29 18:36:14 -05:00
Louis Ruch d65d4dbf6f Fix examples in website (#891) 2021-01-28 20:42:35 -08:00
Jeff Mitchell 0629526319 Add read/list/cancel:self actions and support for ACL subactions. (#882) 
Update perms table in anticipation of session support for these.
 2021-01-22 16:38:19 -07:00
Pete Pacent 93394156bf Adding roadmap and release notes updates (#859) 
* Adding roadmap and release notes updates

* fixing typo
 2021-01-21 16:18:39 -08:00
Michael Gaffney c141a050e5 Document Postgres permission requirements (#871) 
* Add semantic line feeds

* Document Postgres permission requirements

Closes #823
 2021-01-15 17:32:28 -05:00
Brandon Romano 3c22dcd54d Website StackMenu updates for 1/14 (#863) 2021-01-14 09:46:11 -08:00
Louis Ruch 31ece74a92 Fix worker example config (#855) 2021-01-08 13:30:53 -08:00
Jeff Mitchell cca0fbea2b Fix typo on controller config docs 2021-01-06 15:32:14 -05:00
Yoko 9a9efd16e2 [Docs] Common workflow update (#850) 
* Direct to Learn for 'Common Workflow'

* Clearn up

* Fix a typo
 2021-01-05 17:56:19 -08:00
Jeff Mitchell f8577519b6 Prep for 0.1.4 2021-01-05 09:26:21 -05:00
Jeff Mitchell 2323a8551c Update no-resources flag 2021-01-04 16:59:54 -05:00
Jeff Mitchell 0614559f80 Prep for 0.1.3 2020-12-17 15:26:59 -05:00
Simon FreyandJeff Mitchell ea878e49fa Move listener address in worker config example (#834) 
* Move listener address in worker config example

This fixes: The address wrongly being documented as part of the `worker` block, despite belonging into the listener

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-17 10:11:35 -05:00
Manuel Aude Morales 07eb7ddc62 Update run-and-login.mdx (#833) 
Fix typo.
 2020-12-17 10:08:42 -05:00
Jeff Escalante 3739427139 Update DocsPage Component (#801) 
* wip

* update openapi docs page

* remove old component

* styling fixes

* update dependencies

* fix firefox bug with downloads page logo

* update deps, trim outdated deps, add search

* cleanup and polish

* fix circle shenanigans
 2020-12-16 16:43:06 -05:00
Jeff Mitchell b809d3f12a Add kube connect subcommand (#816) 2020-12-14 16:52:11 -05:00
Jeff MalnickandJeff Mitchell d9a6bd1a60 docs: add workflow for transparent usage of Boundary by SSH client (#796) 
* docs: add workflow for transparent usage of Boundary by SSH client

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-12-10 12:48:06 -08:00
Jeff Mitchell c33f4fe5d7 Fix old "boundary proxy" CLI example (#804) 
Fixes #800
 2020-11-30 12:41:33 -05:00
Jeff Mitchell 1189ebdfc6 Fix wording on HA doc (client -> host) (#803) 2020-11-30 12:35:40 -05:00
Jeff Malnick 2badd4ecf8 docs: fix misleading statement about what scope a role can be created (#798) 2020-11-20 09:27:21 -08:00
Susmitha Girumala 7f1a12ecaa Update ui build to use 'admin' folder instead of 'core' (#792) 
* Update ui build to use 'admin' folder instead of 'core'

Post release of v0.1.2, ui/core folder has been renamed to ui/admin.
Update ui build scripts to be aware of the path change.

* Update packagespec to reflect "admin" ui folder change
 2020-11-18 16:29:48 -05:00
Susmitha Girumala d8020842ae Bump website version to 0.1.2 2020-11-16 16:34:35 -05:00
Susmitha Girumala 353360bbcf Update doc clickthrough videos for ui v0.1.2 changes (#789) 2020-11-16 16:01:29 -05:00
Jeff MalnickandJeff Mitchell 11c7c8dbe8 feat: make auth token staleness and duration configurable (#777) 
* feat: make auth token time to live and staleness configurable

* docs: add configuration docs for auth token TTL and staleness

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-11-16 10:39:18 -08:00
Jim ec9e69321d fix docs for adding roles and principals (#782) 2020-11-06 12:30:37 -08:00
Zack Tanner b483dd9df0 Use ProductDownloader component, remove duplicate code (#768) 
* Use ProductDownloader component, remove duplicate code

* hard-code red-d1 for now

* bump ProductDownloader
 2020-11-05 16:30:54 -08:00
Jimmy Merritello 7b4959007e Bump hsm version (#775) 2020-11-05 11:43:32 -06:00
Christian Frichot ea2e0d2be1 docs: typo on encryption page (#770) 2020-11-03 10:40:14 -05:00
Christian Frichot 7e26f0f8c8 docs: update installation steps with templated account.id grant string (#769) 2020-11-03 10:39:56 -05:00
Jeff Mitchell e2e4631929 Add ability to set public cluster address (#761) 2020-10-30 16:54:53 -04:00
Jeff MitchellandJeff Malnick 1ec3e8276f Add Unix listener docs (#750) 
Co-authored-by: Jeff Malnick <malnick@gmail.com>
 2020-10-26 12:10:01 -04:00
Jeff MalnickandJeff Mitchell e8d871aec2 docs: specify address for worker listener configuration (#749) 
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
 2020-10-26 11:51:41 -04:00
Karthick K 3848765560 Update systemd.mdx (#747) 
need to change ${TYPE} to server for the systemd services to work
 2020-10-25 08:07:05 -07:00
Jeff Malnick aa4f761ed5 docs: update HA architecture diagram (#746) 2020-10-23 14:02:54 -07:00
Susmitha Girumala 83e54fe088 doc: Update host set videos in "Manage Targets" to reflect v0.1.1 UI (#742) 2020-10-23 11:03:07 -07:00
Jeff Malnick 86f9752034 docs: add KMS section to controller configuration overview (#744) 
* docs: add KMS section to controller configuration overview

* docs: add config encrypt|decrypt KMS configuration guide
 2020-10-23 10:01:47 -07:00
Jeff Mitchell 5619b42c0b Update version on downloads page 2020-10-22 15:28:10 -04:00
Jeff Mitchell 09b865ab28 Add pass cred storage support (#731) 
* Add `pass` cred storage support

Make it the default on non-Windows/macOS

Document the token storage behavior
 2020-10-21 09:00:17 -04:00
Byungjin Park (BJ) 3b347d24d6 Update data-encryption.mdx (#734) 2020-10-20 11:41:53 -07:00