Commit Graph
4637 Commits
Author SHA1 Message Date
Michael Li e97ce924b4 test(e2e): Skip pagination tests until large estimated count bug is addressed (#5742)
See ICU-16649
2025-05-16 14:32:08 -04:00
Hugo 08bd39f9fa fix(enos): Remove brackets from standalone IPv6 addresses (#5739) 2025-05-14 18:00:34 +01:00
Hugo a65d5d8573 feat: Normalize fields across various Boundary components (#5599)
Normalizes various IP/Address/Host fields across Boundary resources/components to comply with IPv6 specifications.
2025-05-13 16:55:28 +01:00
Dan Heath 2d880326b7 docs: Fix incomplete sentence (#5732)
* docs: Fix incomplete sentence

* docs: Fix punctuation
2025-05-09 12:08:37 -04:00
David Kanney 0b94de3dcc docs: Add 0.19.2 release to CHANGELOG (#5731) 2025-05-08 16:03:41 -04:00
David Kanney 6dabe92138 Bump sdk to latest tag (#5728) 2025-05-08 15:59:34 -04:00
Dan Heath e8518764c2 docs: Update release notes (#5708)
* docs: Update release notes

* docs: Add new known issue

* docs: Update known issue
2025-05-08 13:22:16 -04:00
dillanb-hashi 1e8c345126 chore(e2e): Added support for boundary license to be an env for enos (#5704)
* chore(e2e): Added support for boundary license to be an env for enos
2025-05-07 12:47:09 -07:00
David Kanney 5f740b3650 Add rule to suppress CVE-2025-47268 (#5721) 2025-05-06 18:46:04 -04:00
Lisbet Alvarez 853300f87b bump ui commit to dbf3617 (#5718) 2025-05-06 10:44:29 -07:00
Dan Heath 6eeb9fd936 docs: Update Client Agent errors and conflicting software (#5674)
* docs: Document OpenVPN DNS conflict

* docs: Fix name of interface

* docs: Add common errors

* docs: Updates based on review feedback

* docs: Remove abelist language

* docs: Remove ableist language
2025-05-05 11:14:14 -04:00
Johan Brandhorst-Satzkorn 343675ebf5 Update mod files and oauth2 dep (#5714)
* Update mod files

* Update golang.org/x/oauth2
2025-05-02 15:03:37 -07:00
Ryan Derr 093226a057 ListResolvableAliasesPermissions Hotfix (#5673)
* ICU-16921 Fix ListResolvableAliasesPermissions where function skips some permission building when all children scope is provided, this currently results in skipping subsequent direct grants. Also, update listResolvableAliasesRepo to return early with no data when splitting permissions yields no relevant permissions.

* Remove conditional split permission check for listResolvableAliasesRefresh and listRemovedResolvableAliasIds as condition is never reachable. Additionally remove unecessary grants being given to list targets as part of TestACL_ListResolvableAliasesPermissions.

* Remove additonal 'type=target;actions=list' grants as part of TestACL_ListResolvableAliasesPermissions

* Update Switch Statement Too Factor For Edge Case With Children Granted With Role Scope Global

* Resolve comment to refactor error return in listResolvableAliases to instead return no data and document why and when this can occur.

* Add unit tests to cover case where provided permissions to ListResolvableAliases service contains no grant scopes where targets can reside.
2025-05-02 13:12:32 -05:00
Dan Heath 3429014e70 docs: Note that IPv4 and IPv6 are mandatory (#5670)
* docs: Note that IPv4 and IPv6 are mandatory

* docs: Add note
2025-05-02 10:56:33 -04:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] f1f5848c00 Result of tsccr-helper -log-level=info gha update -latest .github/ (#5711)
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2025-05-01 12:43:02 -04:00
Lisbet Alvarez 27fd4f5fc6 bump ui commit ca3972c (#5709) 2025-04-30 17:24:40 -07:00
David Kanney 0977963983 Add rules to suppress newly discovered CVEs (#5700) 2025-04-30 11:53:00 -04:00
Dan Heath 4dd0bb60b9 chore: Update changelog for 0.19.1 - main (#5702) 2025-04-30 11:40:27 -04:00
Cameron Perera d0eaf561e0 update CHANGELOG with ui entries (#5697) 2025-04-28 14:17:46 -05:00
Dan Heath 3309e37c8f docs: Clarify credential store behavior (#5686)
* docs: Clarify credential store behavior

* docs: Update credential libraries phrasing

* docs: Update phrasing for lead in sentence
2025-04-28 13:23:51 -04:00
Michael Li 90b7d2c0d6 chore(e2e): Add encryption to target ec2 instance (#5672) 2025-04-28 08:29:22 -04:00
Ryan Derr 25bb217a7a Database Init Flags Refactor (#5668)
* ICU-16920 Refactor Boundary Database Init Flags for Improved Dependency Handling

This commit refactors the database initialization flags to prevent early exits and ensure explicit handling of flag dependencies. If one flag relies on resources skipped by another, the dependent flag will also be skipped.

Key Changes:
- Introduced a `InitFlags` struct to organize existing flags and establish a clear pattern for adding future flags.
- Added receiver functions on the `InitFlags` struct to determine whether a flag should be skipped based on provided options or dependencies.
- Refactored the `Run()` method to avoid early returns when a flag skips resource creation. Instead, a log message is provided to indicate the skipped option, and the process continues with resource creation.

* Resolve Comments
2025-04-27 13:16:02 -05:00
Cameron Perera 8a78454d72 bump ui commit to 40ec449 (#5688) 2025-04-25 12:22:06 -05:00
2866919149 Correct Static Creds indentation (#2561)
* Correct Static Creds indentation

* Update website/content/docs/concepts/domain-model/credential-stores.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

---------

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2025-04-24 12:34:14 -04:00
Robin BeckandJohan Brandhorst-Satzkorn eb753e07ec Docs: AssumeRole examples fixes (#5678)
* fixes dynamic credentials TF example attributes

* corrects AssumeRole policy from trusted identity to actual policy

* Update website/content/docs/concepts/host-discovery/aws.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2025-04-24 10:32:16 -06:00
dillanb-hashi e0c130a938 test(bats): Added bats tests for generic commands (#5677)
* test(bats): Added bats tests for generic commands
2025-04-24 08:29:49 -07:00
dillanb-hashi 1757a7ad58 test(e2e): Added credential store to host catalog test (#5675) 2025-04-22 15:05:36 -07:00
dillanb-hashi 32d139c45e test(e2e): Added a test for an unauthenticated user
* test(e2e): Added a test for an unauthenticated user

* CR: spelling
2025-04-18 08:11:30 -07:00
Michael Li 14e0b00cce chore(e2e): Update to use ubuntu 22 (#5664) 2025-04-18 10:38:31 -04:00
Aditya SharmaandJohan Brandhorst-Satzkorn 30e3116156 Add parsing logic for User-Agent headers (#5645)
* feat(ts_telemetry): add parsing logic for user agent headers

* feat(ts_telemetry): update gRPC observability for user-agent headers

* feat(ts_telemetry): add observation tags

* feat(ts_telemetry): Resolved comments

* feat(ts_telemetry): Removed loop variable capture

* feat(ts_telemetry): Updated userAgentKey to be inline

* feat(ts_telemetry): Add support for userAgent as per RFC 9110

* feat(ts_telemetry): Resolved comments

* Fix newline

* feat(ts_telemetry): Moved user-agent parsing to interceptor

* feat(ts_telemetry): Added user-agent parsing complex test case

* Update userAgentsKey comment

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* feat(ts_telemetry): Updated changelog

* feat(ts_telemetry): Resolved comments

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2025-04-17 23:46:25 +05:30
Johan Brandhorst-Satzkorn a833981eae update golang.org deps (#5660) 2025-04-17 09:16:48 -07:00
Damian Debkowski d1feb5665a chore: update changelog to include bug fix (#5654) 2025-04-16 14:06:35 -07:00
Dan Heath b00c063e5e docs: Update caveats about HCP and TTL (#5637) 2025-04-16 15:27:58 -04:00
Michael Li 4304ec0c1c chore(e2e): Address issue with deleting roles/policies (#5646)
On destroy, there was an issue with deleting IAM roles due to the following error: DeleteConflict: Cannot delete entity, must detach all policies first

This commit adds an option to force the policy detachment, preventing the error.
2025-04-15 11:31:12 -04:00
Irena Rindos f7c55678e0 chore: remove more dead code (#5640) 2025-04-02 15:09:17 -04:00
Irena Rindos 28b9840878 chore: remove dead target service code (#5639) 2025-04-02 11:32:12 -04:00
Dan Heath d965b8c6c5 docs: Clarify that max duration is required (#5105)
* docs: Clarify that max duration is required

* docs: Update TCP tabs

* docs: Update newer usage topic
2025-03-28 10:41:59 -04:00
dependabot[bot] 1227ed9cb0 chore(deps): bump github.com/golang-jwt/jwt/v5 (#5620)
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-27 08:43:20 -07:00
Ryan Derr 6d9f97d6c8 ICU-16457 Split Liveness Query In Two (#5628)
* Fix #5602: Ensure controller status update triggers update_time

Rework and fix the logic of #5602 query split. Initial implementation failed to update controller status within `server_controller` as `w.Update` did not trigger `update_time` if `address` or `description` were not updated. Now using `w.Exec` with `updateController` query to always set `update_time` to `now()`.

Additional Notes:
- Updated `repository_controller` tests to verify `update_time` updates even when controller values don't change.
- Added `cleanupFunc` to test cases to remove inserted controllers after each test.
- Verified via `boundary dev` that `worker.upstreamDialerFunc` errors are not present.

Refs: 6c0b3a8a1c

* Resolve Comments
2025-03-26 14:54:02 -05:00
dependabot[bot] cd84da317e chore(deps): bump github.com/golang-jwt/jwt/v4 (#5627)
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.1 to 4.5.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 15:13:45 -07:00
ca123f9d1c docs/update two pages (#5601)
* update two pages

* Apply suggestions from code review

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* docs: Minor updates to connect to target

* docs: Edits

* docs: Edits

* docs: Edits

---------

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2025-03-24 12:55:30 -04:00
Irena Rindos 84c626a459 chore: remove code for 0.12 backwards compatibility in protocol support (#5622) 2025-03-24 11:55:32 -04:00
dependabot[bot] f449ae5a70 chore(deps): bump github.com/golang-jwt/jwt/v4 (#5621)
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.1 to 4.5.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-21 16:03:57 -07:00
dani 143bc7055f Revert "Controller Liveliness Query Split (#5602)" (#5619)
This reverts commit 6c0b3a8a1c.
2025-03-21 14:45:18 -04:00
dependabot[bot] 8b9d5cba5b chore(deps): bump github.com/go-jose/go-jose/v3 (#5618)
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-19 12:59:17 -07:00
dani b31c6a2834 update loopback to normalize endpoint_url (#5603) 2025-03-19 11:36:22 -04:00
vanphan24andstellarsquall ea7ed5c126 Update index.mdx - public_addr note for HCP workers (#5287)
* Update index.mdx - public_addr note for HCP workers

Added a note that the public_addr is not needed if connecting to HCP worker in multi-hop sessions

* Update index.mdx

* Update index.mdx

changed to active voice per Robin's suggestion

* fix hcp_boundary_cluster_id note

---------

Co-authored-by: stellarsquall <stellarsquall@protonmail.ch>
2025-03-18 17:20:22 -04:00
f2c84ad750 docs: add macOS Internet Sharing and Parallels Desktop conflicts for Boundary Client Agent (#5496)
* docs: add macOS Internet Sharing and Parallels Desktop conflicts for Boundary Client Agent

Updated the "Conflicting Software" section in the Boundary Client Agent documentation
to include issues caused by macOS Internet Sharing and Parallels Desktop (macOS VM with shared networking).
These configurations cause the system's DNS resolver to bind to port 53, preventing the Client Agent from starting.

* chore: change case of macOS to MacOS and added workaround for Parallels macOS VM conflict

* Apply suggestions from code review

approving style suggestions from code review

Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: Dan Heath <76443935+Dan-Heath@users.noreply.github.com>
2025-03-18 17:19:41 -04:00
Damian Debkowski 1820d43d38 fix(daemon): set correct permissions on cache.db file (#5613) 2025-03-18 12:29:26 -07:00
Ryan Derr 4cc5c07214 Migrate Controller Repo Usage From Store To Server (#5609)
* Create Server Domain Package For Controller

* Resolve Comments
2025-03-18 12:30:38 -05:00