Commit Graph
2841 Commits
Author SHA1 Message Date
Irena Rindos 76f242c6c9 chore: update go version to 1.25.5 (#6352)
* chore: update go version to 1.25.5

* NetIp parsing has changed, updated ldap ipv6 test
2026-01-21 15:28:32 -05:00
Sorawis Nilparuk (Bo) 42e682e120 Mark expired Vault token as expired when Vault is unreachable (#6235)
* add shutdown function to TestVaultServer

* implement shutdown function in TestVaultServer

* stop renewing vault token when token has already expired

* Add comment

* clean up error checks

* modify credential_vault_token_renewal_revocation_view to include expiration_time

* include TokenExpirationTime in clientStore

* add test to validate that unexpired tokens are not set as expired

* add token status validation

* add expiration time validation to tests

* add small comment

* remove unnecessary renew from test

* fix token translation uses wrong time field and add tests

* add more token status validation

* fix lint

* move migration to 103

* remove t.Parallel() comments

* remove unused setup code

* use atomic for testvault.stopped

implement atomic read/write for testvault

* remove file created by merge conflict

* make gen
2026-01-15 12:29:06 -08:00
hashicc ef75427403 Add path attribute to split cookies (#6298)
* Add "Path" attribute to "/"

Without this the browser defaults to a path of the parent of the
path in the request. See:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie#pathpath-value

This means the cookie isn't included in api requests since the path
is too restrictive

* Update tests with split cookie path attribute
2026-01-15 09:38:25 -05:00
Abhishek Manjegowda a1718effba CE changes for ENT (#6334)
Approved
2026-01-14 19:58:51 +05:30
Sorawis Nilparuk (Bo) fe09f61a85 chore(test) fix flaky tests (#6315)
* internal/cmd/commands/server/listener_reload_test.go remove t.Parallel() comment

* internal/cmd/commands/server/worker_initial_upstreams_reload_test.go remove t.Parallel

* internal/cmd/commands/server/worker_tags_reload_test.go wait by polling worker instead of sleep

* internal/daemon/worker/routing_info.go make deep copy in LastRoutingInfoSuccess to avoid race condition

* internal/tests/cluster/parallel/orphaned_connections_test.go raise grace period time to allow test to wait for longer

* improve logging in sequential tests

* move ports around and use t.Cleanup to send shutdown signal to test server

* fix one typo

* do final assert in t.Cleanup instead of defer

* undo t.Cleanup change

* add another signal to force shutdown running servers

* add exit early and increase server start timeout

* tighten workerRPC settings on session tests

* tighten more workerRPC timing

* make gen

* add comment explaining deep copying lastRoutingInfoSuccess
2026-01-05 10:40:28 -08:00
Abhishek Manjegowda f56158b7df ICU-18284-testcase param removed (#6310) 2025-12-22 22:13:28 +05:30
Abhishek Manjegowda c4dc2a43cc refactor : ICU-18284-Unify SecureRandomReader (#6303)
* Unify SecureRandomReader

* vault changes updated

* target changes added

* reviwed changes updated
2025-12-22 11:30:10 +05:30
Ryan Derr a396d60232 fix(db): Update migration 102 sql file to correct name including .up (#6295) 2025-12-09 10:07:29 -06:00
Abhishek Manjegowda 0fc70d82ee refactor: Update Password use of crypto/rand to SecureRandomReader (#6259)
* reactor: Update Password use of crypto/rand to SecureRandomReader

* changes updated

* make gen error changes

* make gen error changes

* new changes updated

* new changes updated

* Revert "new changes updated"

This reverts commit 85ee1d21867e26e7dac9ac28ba0e541a84345e90.

* Revert "new changes updated"

This reverts commit b4df84452397724465e00fc48169473148a26e3f.

* SecureRandomreader introduced to password

* SecureRandom pkg removed

* updated
2025-12-09 09:50:36 +05:30
Priya Patel d81c474aeb Bump internal/ui/VERSION commit to 2766be2 (#6290) 2025-12-05 16:42:40 -06:00
Hugo ad5ce4fbf8 fix(db): Delete legacy credential_vault_library_deleted purge job (#6284)
With the refactor in version 99, the credential_vault_library_deleted
table was renamed to credential_vault_generic_library_deleted, but its
corresponding purge job was not removed from the job table, leading to
an error: "job credential_vault_library_deleted_items_table_purge not
registered on scheduler".

This commit deletes the legacy job entry. The new job that takes over
the legacy one is
credential_vault_generic_library_deleted_items_table_purge.
2025-12-04 16:07:16 +00:00
Priya Patel 2fb43e943e Bump internal/ui/VERSION commit to 95f72e1 (#6270) 2025-11-20 14:44:41 -06:00
dani 814ffcca07 chore: bump version to 0.21.0 (#6267) 2025-11-20 11:26:30 -05:00
Louis Ruch 4bae4f23f5 feat(ssh): support ssh known hosts file (#6263) 2025-11-19 16:24:20 -08:00
Justin Nguyen d3b2e7402b feat: add password credential to meta_session.go (#6257) 2025-11-18 10:45:41 -06:00
Justin Nguyen dc7f0b00fc Merge pull request #6207 from hashicorp/llb-password-credential-type
Password credential type
2025-11-14 12:00:23 -06:00
daniandAndrew Gaffney 08015e9d98 feat(clientproxy): automatically close boundary connect when proxy is no longer in use (#6232)
Co-authored-by: Andrew Gaffney <andrew@gaffney.cc>
2025-11-14 09:37:30 -05:00
Bharath Gajjala c39a50570a fix(db): vault password library migration adjustments and mapping overrides (#6229) 2025-11-13 12:49:25 -08:00
Justin Nguyen 1ac444d0a8 feat(cli): Add support for password credential in redis helper (#6213) 2025-11-13 12:28:54 -08:00
Bharath Gajjala d4f7bd55d1 feat(cli): Add password credential CLI commands (#6117) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 11c4fd7580 feat(handlers): CRUDL support for static password credential (#6181) 2025-11-13 12:28:04 -08:00
Bharath Gajjala ec7450961c feat(credential/static): Implement CRUDL support for password credentials (#6163) 2025-11-13 12:28:04 -08:00
Justin Nguyen 82745e16be feat(handlers): Implement CRUDL for vault generic Password credential (#6161) 2025-11-13 12:28:04 -08:00
Justin Nguyen 4a8009fec4 feat(credential/vault): Implement repository for vault password credential (#6140) 2025-11-13 12:28:04 -08:00
Justin Nguyen 3ab1019bc2 feat(db): Add db migration to support vault password credential (#6129) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 1c2bc2cc74 feat(db): Password credential migration (#6125) 2025-11-13 12:28:04 -08:00
Justin Nguyen 8bce750933 feat(db): Add new tables for password credential type (#6101) 2025-11-13 12:28:04 -08:00
Bharath Gajjala 5cf33fa8b3 feat(credentials): Add PasswordAttributes credential type (#6110) 2025-11-13 12:28:04 -08:00
Irena Rindos 4a4bbd723e chore(sqltest): update readme (#6228) 2025-11-07 12:22:52 -05:00
dani 4a7342b074 fix(credential/vault): add case for upd creds in injected creds switch (#6226) 2025-11-06 16:37:57 -05:00
Hugo 546550fa4f docs(credential/vault): Clarify LdapCredentialLibrary issuing cred type 2025-11-05 16:20:44 -05:00
Andrew Gaffney 9652ebe032 feat(cmd): Support Vault LDAP Credential Library 2025-11-05 16:20:44 -05:00
Hugo 84dd5543cf feat(handlers/credentiallibraries): Support Vault LDAP credential library 2025-11-05 16:20:44 -05:00
Hugo 9e08eafcff feat(credential/vault): Implement LDAP Credential Library 2025-11-05 16:20:42 -05:00
Andrew Gaffney ebf0450b03 feat(db): LDAP Credential Library history entities 2025-11-05 16:20:13 -05:00
Andrew Gaffney f4d81e0026 feat(db): LDAP Credential Library operational entities 2025-11-05 16:20:13 -05:00
Hugo 548782a261 refact(db): Redefine credential_vault_library
The existing credential_vault_library table is the table that holds operational
state for Vault generic credential libraries. This commit renames that table and
all its associated database entities to credential_vault_generic_library.

Additionally, a new credential_vault_library table is created as the base table
for all Vault-subtype credential libraries (eg: Vault generic, Vault SSH Cert).
2025-11-05 16:20:13 -05:00
Robert Main 18f469105c Deprecate website folder (#6212)
* Update website folder to indicate deprecation

Adds an alert banner to the top of all MDX files within `/website` to
indicate deprecation

* Update website README
2025-11-04 10:22:10 -05:00
Robin Beck 25847c3884 Docs: permstable resource-table UDR migration (#6162)
* moves resource-table.mdx to internal/website/permstable

* updates location of generated resource-table.mdx file to internal/website/permstable/

This change facilitates the implementation of the web-unified-docs content migration,
which will need to source generated content like this table from outside the website
folder after the content migration.
2025-10-29 15:57:38 -04:00
Johan Brandhorst-Satzkorn 8f5bb3a8b1 config: remove unused telemetry stanza (#6137)
I think this was somehow accidentally included from Vault
back in the day and never removed. As far as I can tell
these options have absolutely no effect on anything
in Boundary and will probably only cause confusion.
2025-10-10 23:33:36 -04:00
April-May 003007aaa3 chore(proxy): Reduce noisy error logs (#6136) 2025-10-10 08:43:40 -07:00
April-May dc25c1aadd chore(errors): Add early disconnection error (#6126) 2025-10-09 10:44:18 -07:00
4078838f56 feat(mongo): Add MongoDB connection support for Boundary CLI PORT (#6069)
* feat(mongo): add mongo for boundary cli

* Fix: remove changes added by mistake during testing

* feat(enos): install MongoDB client (mongosh) in e2e Docker test runtime

* Remove explicit Boundary DB/server startup from target_tcp_connect_mongo_test.go

* Add a full stop and trigger CI

* feat: add mongosh support to boundary connect mongo

* feat: add mongosh support to boundary connect mongo

* feat: add auth-source flag for MongoDB connect command

- Add -auth-source flag with default value 'admin' for root users
- Add BOUNDARY_CONNECT_MONGO_AUTH_SOURCE environment variable support
- Update documentation with new flag and correct mongosh default
- Improve MongoDB test with explicit auth-source parameter
- Fix Docker configuration formatting for better readability

This ensures MongoDB root users authenticate against the admin database
by default while allowing flexibility for custom authentication databases.

* test(e2e): Fixed false positive in Mongo connect test; use UriNetwork and container hostname

* make gen

* fix: Removed unnecessary variable containerName from the MongoDB E2E test

* feat(connect/mongo): Build URI compatible with mongosh and set default authSource

* feat(connect/mongo): use mongosh flags following PostgreSQL pattern

* remove 'connection string' from auth-source usage text

* Update internal/cmd/commands/connect/mongo.go

Co-authored-by: Bharath Gajjala <120367134+bgajjala8@users.noreply.github.com>

* remove 'connection string' from auth-source usage text

* refacotr: replace authSource flag with authenticationDatabase

---------

Co-authored-by: Enbiya <100806254+enbiyagoral@users.noreply.github.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
2025-10-09 11:13:47 -05:00
David Kanney 7e6e70a40f feat(plugins): Add IBM Key Protect (IBM Cloud KMS) wrapper (#6112)
* feat(plugins): Add IBM Key Protect (IBM Cloud KMS) wrapper

* make gen
2025-10-08 14:03:37 -04:00
Justin Nguyen 4548028efe ICU-14484: redis connect helper (#6001)
* add redis connect support
* Setup redis in docker for e2e testing
* Update docs and changelog
* Commenting out e2e tests for now, will revisit in a separate task
2025-09-19 16:20:11 -05:00
Louis Ruch 6f945ec27a fix(host): move GetWrapper call out of transaction (#6071) 2025-09-18 12:57:48 -07:00
April-May 1a6a0b9d94 Revert "fix(target): Skip fetching proxy server cert (#6055)" (#6066)
This reverts commit 3dd238a6cf.
2025-09-18 12:30:47 -07:00
hashicc 84446112df Bump internal/ui/VERSION commit to 31f0044 (#6064) 2025-09-18 13:41:31 -04:00
April-May 3dd238a6cf fix(target): Skip fetching proxy server cert (#6055) 2025-09-17 14:48:14 -07:00
dani 5ebf11caeb create a deferral to automatically close sessions after creating them during boundary connect (#6054) 2025-09-16 13:55:34 -04:00