Commit Graph
3961 Commits
Author SHA1 Message Date
Timothy Messier eb626bb54c refact(wh): Use auth token id for user dimension
Previously the function used to upsert into the user dimension required
both an auth token id, and a user id. However, the user id can be
determined from the auth token, in fact it already was via the
whx_user_dimension_source view. This refactor removes the user id as an
argument, since it is not needed and will not be directly available when
this function is used when populating the new auth token accumulating
fact.
2024-02-23 15:44:08 +00:00
Timothy Messier 03d1cc4572 feat(dw): Add auth token accumulating fact table 2024-02-23 15:44:08 +00:00
Timothy Messier 005f3d0843 chore(sqltest): Make it possible to enable/disable db container logs
When running the sqltests, sometimes it is helpful to see the full
database container logs, especially when there is an error in a
migration or database setup. However, it also makes it difficult to see
the test results.

This adds a new variable to the makefile to easily toggle the output of
these logs on or off. To run the tests without printing the dtabase logs
use:

    DB_LOGS=0 make test

To enable the logs use:

    DB_LOGS=1 make test

By default the logs are not printed.
2024-02-23 15:44:08 +00:00
Timothy Messier e51d0e0b4f feat(vault): Remove database notice when setting credential type
This notice just generated noise, particuarlly in some of the sqltests.
2024-02-23 15:44:08 +00:00
Timothy Messier 9d82958c9f test(sqltest): Shorten prepared statement identifiers
Some of the prepared statement identifies used in these tests exceeded
the identifier character limit. This results in postgres truncating the
name, which is fine for a test, but does result in some noise in the
test output. This change shortens the identifies to eliminate noise like
the following:

    psql:/test/credential/vault/credential_vault_library_ssh_private_key_mapping_override.sql:49: NOTICE:  identifier "insert_credential_vault_library_ssh_private_key_mapping_override" will be truncated to "insert_credential_vault_library_ssh_private_key_mapping_overrid"

The tests should no longer create notices like these.
2024-02-23 15:44:08 +00:00
Jeff Mitchell c3297bb96f Remove worker type from CLI output (#4396)
This does not currently remove the field from the message on the API but
since it will now always show `pki` it's meaningless and causing
confusion for some users.
2024-02-23 10:33:57 -05:00
Michael Li 694db71004 fix(e2e): Add extra buffer in -session-max-seconds test again (#4440) 2024-02-23 10:33:43 -05:00
Todd 366d9e95aa Add Error logging and hclog.Logger debug logging throughout the daemon (#4384) (#4439)
* Save and assign hclogger throughout the client cache daemon

* Don't event for errors happening outside of the handlers or tickers.

* Hide and ignore -store-debug and expose the -log-level flag
2024-02-22 10:20:48 -08:00
Jeff MitchellandDamian Debkowski 014a5a7aae Vet/race fixes (#4421)
This addresses all found vet/race fixes in community edition.

---------

Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
2024-02-21 16:32:26 -05:00
Ikko Eltociear Ashimine 4535af25aa Update README.md (#4434) 2024-02-21 04:26:53 -05:00
Stan Ryzhov 2497078df6 test(e2e): Add ssh log for failed requests (#4431) 2024-02-20 14:37:14 -05:00
Michael Li 4d344edecc test(e2e): Add extra buffer in -session-max-seconds test (#4428)
This test would sometimes fail due to the diff sometimes exceeding `sessionMaxSeconds+1` by less than 1 second.
2024-02-20 11:09:36 -05:00
Michael Li a48698a315 test(e2e): Add test to check target's -session-max-seconds (#4411)
* test(e2e): Add test to check target's -session-max-seconds

* test(e2e): Add additional test to check new connections are rejected

* test(e2e): Fix test check
2024-02-20 09:26:55 -05:00
Stan Ryzhov 7de0699a0d test(e2e): Verify long-lasting scripts complete successfully on tcp targets (#4423) 2024-02-16 15:22:47 -05:00
Jeff MitchellandDamian Debkowski 35cef97bd4 Linter fixes PR 3 (#4415)
* Linter fixes

* fix(bsr): update test to register TEST protocol once

---------

Co-authored-by: Damian Debkowski <damian.debkowski@hashicorp.com>
2024-02-16 08:30:16 -05:00
Johan Brandhorst-Satzkorn e95eda7ca2 handlers: always return pagination parameters in list (#4373)
* handlers/targets: always return pagination parameters in list

* handlers/authmethods: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/accounts: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/authtokens: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/credentiallibraries: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/credentials: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/credentialstores: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/groups: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/host_catalogs: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/host_sets: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/hosts: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/managed_groups: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/roles: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/scopes: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/sessions: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.

* handlers/users: test for pagination parameters

Note that this already always returned the pagination parameters,
but now we have a test that it does so.
2024-02-15 09:26:29 -08:00
Jeff Mitchell 4068829509 Merge pull request #4401 from hashicorp/jefferai-linter-fixes
Fix linter warnings, parts 1 and 2
2024-02-14 17:55:41 -05:00
Jeff Mitchell 49803e653c Linter fixes numero 2 (#4408) 2024-02-14 17:14:31 -05:00
Stan RyzhovandMichael Li a22459342b test(e2e): Add option to wait for multiple sessions (#4410)
Co-authored-by: Michael Li <michael.li@hashicorp.com>
2024-02-14 15:02:41 -05:00
Damian Debkowski 29c09f5bc2 fix(bsr): resolve race condition errors in signature file (#4393)
* fix(bsr): resolve race condition errors in signature file

* chore(bsr): add comment to define purpose of mutex lock
2024-02-14 10:33:20 -08:00
Dan Heath 2c669f4600 docs: Update deprecated install command (#4409)
* docs: Update deprecated install command

* docs: Update command to add repo
2024-02-14 13:31:30 -05:00
Dan Heath 2b938a8f10 docs: Add max # of connections to known issues (#4405) 2024-02-13 17:47:59 -05:00
Michael Li c72c614200 test(e2e): Add test to validate session connection limits (#4395)
* test(e2e): Move default client port test to its own file

* test(e2e): Add test to validate session connection limits
2024-02-13 16:28:49 -05:00
Jeff Mitchell 25bce9e8ff Fix linter warnings 2024-02-13 15:50:11 -05:00
Jim 3af259ff69 chore: update deps (#4394)
* chore: update deps

* tests: update sqlmock tests for breaking chg

* tests (handlers): sort grants in checkEqualGrants(...)

sort the expected and got grants in
checkEqualGrants(...) to make the test more
deterministic.

* tests (asciicast): update backspace enc in TestEventMarshal(...)
2024-02-13 10:50:06 -05:00
Elim Tsiagbey 1b1c8b3bf9 fix: Proxy closing listener with 0 connections left (#4389)
* fix: Proxy closing listener with 0 connections left

A bug was introduced in `0.15.0` where sessions with max connection counts were closed when the connections left hit 0. This issue was highlighted by a user: https://github.com/hashicorp/boundary/issues/4364. What was happening was when we have zero connections left the proxy code was closing the listener which closed its connections

To fix this:
- `boundary connect  -target-id=xx -host-id=xx` command with no connections left will now wait for all connections to be closed and before exiting the session just like it did in `0.14.3`
- As soon as there are no more connections left, the listener will close to stop accepting new connections
- Fix issue where the websocket connection was throwing closing errors during the session teardown.
2024-02-09 18:15:00 -05:00
Dan Heath a7b9916691 docs: Add HCSEC-2402-02 info to release notes (#4386) 2024-02-09 15:34:31 -05:00
Michael Li 61fb079371 test(e2e): Add test for authentication when no keyring is available (#4378) 2024-02-09 13:07:17 -05:00
Louis Ruch d59f089819 feat(policies): Update SDK/API to support setting/clearing attributes (#4385) 2024-02-09 09:37:34 -08:00
Dan Heath c01b8df2a3 docs: Clarify need for permissions to search (#4367)
* docs: Clarify need for permissions to search

* docs: List grants
2024-02-09 11:24:56 -05:00
Damian Debkowski d0b10b020e fix(bsr): acquire mutex lock on all methods of Sha256SumWriter (#4383) 2024-02-08 15:57:59 -08:00
Michael Li 293952a698 test(e2e): Fix where max_page_size is defined (#4381) 2024-02-08 16:42:07 -05:00
Johan Brandhorst-Satzkorn be252e3447 testing/e2e: add option to skip slow test (#4380) 2024-02-08 10:19:09 -08:00
Dan HeathandRobin Beck 69512baa8b docs: Add links for multi grant scopes (#4368)
* docs: Add links for multi grant scopes

* Update website/content/docs/commands/roles/create.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* docs: Add link to command docs

---------

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
2024-02-07 15:19:00 -05:00
Irena Rindos da30653486 commands: fix plurals (#4369)
* commands: fix plurals
2024-02-07 12:45:28 -05:00
Jeff Mitchell c4effc078b Remove some no-longer-needed x/crypto refs (#4371) 2024-02-06 16:17:32 -05:00
Jeff Mitchell 483f13226e Adjust tofu token check 2024-02-06 15:04:02 -05:00
ToddandJim eb6d0dbd6a Use the intercepted token always. If the keyring matches, use it from there (#4355)
* Use the intercepted token if present, use it through the keyring if keyring contains it

* fixup! Use the intercepted token if present, use it through the keyring if keyring contains it

* Apply suggestions from code review

Co-authored-by: Jim <jlambert@hashicorp.com>

---------

Co-authored-by: Jim <jlambert@hashicorp.com>
2024-02-06 11:46:28 -08:00
Yong Zhang 66c7f274bb Fix docs for event filters (#4365) 2024-02-06 12:31:58 -07:00
Michael Li 4ebdd9458a test(e2e): Fix error in migration test (#4354) 2024-02-06 11:54:29 -05:00
Michael Li 31ca969f4f Revert "chore(e2e): Remove need for tparse (#4326)" (#4362)
This reverts commit f18bc5262f.
2024-02-05 17:48:00 -05:00
Michael Li f18bc5262f chore(e2e): Remove need for tparse (#4326) 2024-02-05 16:14:42 -05:00
Yong Zhang e34d3bb415 Fix example scope id for role grants (#4348)
* Rename example scope id

* revert newline at eof
2024-02-02 17:35:05 -08:00
Todd acabfd7f2c boundary daemon add-token to return returns 403 Forbidden when Boundary returns the same (#4345) 2024-02-02 12:24:14 -08:00
Michael Li b3a292d4b9 chore(e2e): Reduce number of instances created (#4298) 2024-02-02 13:53:42 -05:00
Johan Brandhorst-Satzkorn c334ec700c enos: support max_page_size in AWS scenarios (#4352) 2024-02-02 09:21:21 -08:00
Michael Li b14cd1e864 chore: Fix breaking change in labeler when upgrading to v5 (#4350) 2024-02-01 17:16:35 -05:00
Johan Brandhorst-Satzkorn d9c6de4e8b deps: update runc dependency (#4349)
Fixes GHSA-xr7r-f8xq-vfvv
2024-02-01 13:19:24 -08:00
hashicorp-tsccr[bot]andhashicorp-tsccr[bot] 5d6c42a0c2 Result of tsccr-helper -log-level=info gha update -latest . (#4346)
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-02-01 15:00:58 -05:00
Heat Hamilton ac65ee87d5 added permanent: true to fix dev portal build error (#4338) 2024-02-01 13:41:44 -05:00