* docs: Document OpenVPN DNS conflict
* docs: Fix name of interface
* docs: Add common errors
* docs: Updates based on review feedback
* docs: Remove abelist language
* docs: Remove ableist language
* ICU-16921 Fix ListResolvableAliasesPermissions where function skips some permission building when all children scope is provided, this currently results in skipping subsequent direct grants. Also, update listResolvableAliasesRepo to return early with no data when splitting permissions yields no relevant permissions.
* Remove conditional split permission check for listResolvableAliasesRefresh and listRemovedResolvableAliasIds as condition is never reachable. Additionally remove unecessary grants being given to list targets as part of TestACL_ListResolvableAliasesPermissions.
* Remove additonal 'type=target;actions=list' grants as part of TestACL_ListResolvableAliasesPermissions
* Update Switch Statement Too Factor For Edge Case With Children Granted With Role Scope Global
* Resolve comment to refactor error return in listResolvableAliases to instead return no data and document why and when this can occur.
* Add unit tests to cover case where provided permissions to ListResolvableAliases service contains no grant scopes where targets can reside.
* ICU-16920 Refactor Boundary Database Init Flags for Improved Dependency Handling
This commit refactors the database initialization flags to prevent early exits and ensure explicit handling of flag dependencies. If one flag relies on resources skipped by another, the dependent flag will also be skipped.
Key Changes:
- Introduced a `InitFlags` struct to organize existing flags and establish a clear pattern for adding future flags.
- Added receiver functions on the `InitFlags` struct to determine whether a flag should be skipped based on provided options or dependencies.
- Refactored the `Run()` method to avoid early returns when a flag skips resource creation. Instead, a log message is provided to indicate the skipped option, and the process continues with resource creation.
* Resolve Comments
* fixes dynamic credentials TF example attributes
* corrects AssumeRole policy from trusted identity to actual policy
* Update website/content/docs/concepts/host-discovery/aws.mdx
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
---------
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
On destroy, there was an issue with deleting IAM roles due to the following error: DeleteConflict: Cannot delete entity, must detach all policies first
This commit adds an option to force the policy detachment, preventing the error.
* Fix#5602: Ensure controller status update triggers update_time
Rework and fix the logic of #5602 query split. Initial implementation failed to update controller status within `server_controller` as `w.Update` did not trigger `update_time` if `address` or `description` were not updated. Now using `w.Exec` with `updateController` query to always set `update_time` to `now()`.
Additional Notes:
- Updated `repository_controller` tests to verify `update_time` updates even when controller values don't change.
- Added `cleanupFunc` to test cases to remove inserted controllers after each test.
- Verified via `boundary dev` that `worker.upstreamDialerFunc` errors are not present.
Refs: 6c0b3a8a1c
* Resolve Comments
* Update index.mdx - public_addr note for HCP workers
Added a note that the public_addr is not needed if connecting to HCP worker in multi-hop sessions
* Update index.mdx
* Update index.mdx
changed to active voice per Robin's suggestion
* fix hcp_boundary_cluster_id note
---------
Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
* docs: add macOS Internet Sharing and Parallels Desktop conflicts for Boundary Client Agent
Updated the "Conflicting Software" section in the Boundary Client Agent documentation
to include issues caused by macOS Internet Sharing and Parallels Desktop (macOS VM with shared networking).
These configurations cause the system's DNS resolver to bind to port 53, preventing the Client Agent from starting.
* chore: change case of macOS to MacOS and added workaround for Parallels macOS VM conflict
* Apply suggestions from code review
approving style suggestions from code review
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
---------
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>