When closing orphaned connections and checking if a session is not
active, the repository was opening a transaction, but then calling the
original reader instead of using the reader/writer from the transaction.
This would result in a transaction being opend, then a separate
transaction being used to run the query, and finally the original
transaction would commit without any statements being executed.
Co-authored-by: Sorawis Nilparuk (Bo) <sorawis.nilparuk@hashicorp.com>
When setting up the docker container in this module, there's a an additional script that runs (00-trust-user-ca) that takes some time to execute. This can occasionally take longer than the current 20s timeout, so we are bumping it here
* Add ListResolvableAliases to the user service
There are a few non common ways this method uses our ACL
and grant system. A user is able to list resolvable
aliases for another user if they are granted permission
to do so. That means we had to load the grants for
the user being listed for and not the requester when
determining if an alias is able to resolve to a destination
for which the requested user has permission.
Similarly, the grant hash used for the list pagination
is required to be that of the user being listed and not
the requester.
This alias will be used by commands in a test when using the minio client. An alias needs to be defined in order for commands like retrieving an object from the bucket to work successfully.
* add a new cred management files
* adding credential management files
* fixed type-os, added ent labels, grouped cli/ui
* added reference links from concepts section and Vault integration section to new cred management pages
* style guide and formatting enhancements
* style guide and formatting enhancements
* fixes internal link
* docs: Updates for styles and standards
* docs: Fix link structure
* docs: Break out brokering/injection procedures
* Apply batch suggestions from code review
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
* docs: Clean up commented out code
* docs: Rename index file per best practices
* docs: Update page description meta content
* docs: Add level 2 headings for organization
---------
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
* made worker filter examples more promenent with different example types
* adds terraform tabs
* updates notes to use Note, Tip, and Warning elements
* deletes old screenshots
* docs: Minor edits
* docs: Make example explanations consistent
* clarifies boundary_credential_store_vault comments
---------
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
The worker_filter column was dropped from the
credential_vault_credential_private view in the
56/02_add_data_key_foreign_key_references.up.sql migration.
Any credential renewal/revocations that relied on the worker filter
would not successfully renew.
* Added using-terraform.mdx to the Install Boundary section
* Initial revision
* formatting on the list and adding in some links to the provider
* Renamed file
* Added assumptions.
* Updated index.
* Fixed some typos
* Folded in Carlos's session recording code
* small changes
* fixes headers
* fixes internal developer links
* style guide and formatting enhancements
* updates Initialize Boundary link
* docs: Updates for style/standards
* docs: Break topic into smaller pieces
* docs: Clean up commented text, rename index file
* docs: Trigger a new Vercel build
---------
Co-authored-by: Daniel Greeninger <daniel.greeninger@hashicorp.com>
Co-authored-by: Adam Bouhmad <adbouhmad@gmail.com>
Co-authored-by: Robin Beck <stellarsquall@protonmail.ch>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
* docs: Update release notes for April 9 release
* Update website/content/docs/release-notes/v0_15_0.mdx
Co-authored-by: Michael Li <michael.li@hashicorp.com>
---------
Co-authored-by: Michael Li <michael.li@hashicorp.com>
* internal/gen: better API docs
Add various pieces of metadata that can be used by the API docs renderer.
Improve the service labels by specifying explicit tags.
Specify error responses. Specify version at generation time.
* internal/gen: add better errors
The default error entry is now used to cover all errors, as
adding a new error for every possible status code was a bit much.
This also properly includes the real error type now!
* Add various pieces of metadata that can be used by the API docs renderer. Improve the service labels by specifying explicit tags.
* make auth method API docs
* make API docs better
* make auth methods API docs nicer
* internal/gen: better attribute examples
Replace Output Only comments with a field behavior annotation in accounts.
Mark some fields as required.
Add elaborate description for attributes.
* Make API docs better
* Make API docs better
* Make API docs better
* internal/proto: regenerate files
* internal/proto: finish off account service
* Make API docs better
* internal/proto: add better API docs for aliases
* Tidy up service descriptions
* Added description for Boundary controller API doc
* internal/gen: add better API intro
Copy parts of the API docs into the description
* sdk: add openapi dependency
* internal/gen: move global API doc to separate file
* internal/gen: remove required annotations
Unfortunately, while these help with the creating of resources, they still
appear required in contexts where they are not, such as when
updating a resource.
* Review comments
---------
Co-authored-by: jigar-hashicorp <jigar.shah@hashicorp.com>
Co-authored-by: Isaac Christian (he/him) <112639904+isaacchristian@users.noreply.github.com>
Cameron Perera
Michael Li
Casey Trahan
Lisbet Alvarez
VBouiller
Robin Beck
Timothy MessierandSorawis Nilparuk
Todd
Carlos Alcaide Corvo
Irena Rindos
vanphan24
Johan Brandhorst-Satzkorn
Damian Debkowski
Dan Heath
dani
Louis Ruch
