Irena Rindos
f7dbf2a532
Merge pull request #2163 from hashicorp/irindos-clusterid-upstreams
...
feat(worker): Map cluster ID in config to upstream address
2022-06-10 10:17:51 -04:00
Irena Rindos
adf019f216
Merge pull request #2146 from hashicorp/irindos-cluster-workerkeyid
...
feature(worker): add workerKeyId to status
2022-06-10 09:59:58 -04:00
Jeff Mitchell
5a7291131f
Make current key update on rotation
2022-06-10 09:33:09 -04:00
irenarindos
16d95262a6
feature(worker): add workerKeyId to status
2022-06-10 09:31:22 -04:00
Jeff Mitchell
b84001c07d
Add CLI for workers ( #2164 )
2022-06-10 09:05:43 -04:00
irenarindos
3792fec48b
fixup! feat(worker): Map cluster ID in config to upstream address
2022-06-09 16:42:56 -04:00
irenarindos
256498d40f
fixup! feat(worker): Map cluster ID in config to upstream address
2022-06-09 16:39:20 -04:00
Jeff Mitchell
5b978d7fa7
Adjust parameter naming ( #2161 )
...
* Adjust parameter naming for some worker resource fields
* Add eventing listener to event when authentication is successful from a downstream worker
2022-06-09 16:27:17 -04:00
irenarindos
3aa7d11419
feat(worker): Map cluster ID in config to upstream address
2022-06-09 16:04:13 -04:00
Jeff Mitchell
7c4f495c25
Add workers SDK API bits ( #2159 )
2022-06-09 14:30:33 -04:00
Jim
f6c4e3c896
feature (worker): add worker events around authentication ( #2157 )
2022-06-09 11:28:12 -04:00
Irena Rindos
d357a583ed
Merge pull request #2152 from hashicorp/irindos-print-workerauth-at-startup
...
feat(worker): save workerAuth request to a file
2022-06-09 10:56:51 -04:00
irenarindos
594e6e82b5
feat(worker): save workerAuth request to a file
2022-06-09 10:40:30 -04:00
Jim
37cc61e4c9
feature (worker): Add audit data classification to CreateWorker(...) api ( #2153 )
2022-06-09 06:43:58 -04:00
Jeff Mitchell
9736b79d4e
Remove temporary node authorization functions ( #2147 )
2022-06-07 14:56:04 -04:00
Jeff Mitchell
d1b3b2441f
Add node rotation ( #2142 )
2022-06-07 14:26:33 -04:00
Todd
1e3c941be1
Add active session count to the worker ( #2145 )
2022-06-07 11:21:39 -07:00
Jim
fdf43fc4fe
feature (worker): add CreateWorker(...) service (aka API) ( #2143 )
2022-06-07 11:50:30 -04:00
Todd
0f7e1ee7fa
Fix canonical tags not getting assigned in the api resource. ( #2144 )
2022-06-06 16:50:22 -07:00
Jeff Mitchell
aa0afd325a
Remove 'ephemeral' from KMS auth method bits ( #2141 )
2022-06-06 14:52:47 -04:00
Irena Rindos
cc232b743e
Merge pull request #2130 from hashicorp/irindos-rotate-roots
...
feature(WorkerAuth): Create RotateRoots domain and job
2022-06-06 14:50:21 -04:00
irenarindos
78150d88d9
feature(WorkerAuth): Create RotateRoots domain and job
2022-06-06 14:35:53 -04:00
Todd
43bcbba47f
Implement UpdateWorker service method ( #2133 )
2022-06-06 10:52:50 -07:00
Irena Rindos
07008e80ff
Merge pull request #2140 from hashicorp/irindos-remove-nonce-encryption
...
Remove nonce encryption for workerAuth
2022-06-06 11:43:10 -04:00
irenarindos
4c55305a49
Remove nonce encryption for workerAuth
2022-06-06 11:20:04 -04:00
Jeff Mitchell
4117841cf9
Use persistent storage for worker auth credentials ( #2139 )
2022-06-05 22:50:44 -04:00
Jeff Mitchell
c59d0df611
Add worker creation ACLs ( #2138 )
...
This is a bit more than simply adding the action; we had some
checks to ensure that list/create could only happen/not happen
in some cases and those had to be modified to account for
subactions.
2022-06-05 16:43:02 -04:00
Jim
c1445728e3
tests (servers): additional CreateWorker(...) unit tests ( #2134 )
2022-06-05 14:50:15 -04:00
Jeff Mitchell
caf19f867e
Rename some variables to remove Nodee
2022-06-03 17:47:44 -04:00
Jeff Mitchell
f4642930b4
Updates from review of 2076 ( #2135 )
2022-06-03 17:32:33 -04:00
Haotian
631c174f47
feat(worker): implements WorkerAuthStorage wrapper for worker credential encryption ( #2076 )
...
* Adds WorkerAuthStorage wrapper for worker credential encryption using nodeenrollment library.
* Adds AuthStoragePath field in worker config and dev mode to specify directory to store credentials.
2022-06-03 13:25:58 -07:00
Haotian and Todd
1830605a7e
refact(servers) Update api for new worker and controller server tables ( #2101 )
...
* Discontinue support for old Server message in ServerCoordinationService. Split message into ServerWorkerStatus and UpstreamServer (which currently contains controller addresses). Remove unnecessary fields. Modify workerStatusServer to use new fields.
Co-authored-by: Todd <github@quaddi.com >
2022-06-03 11:59:02 -07:00
Jeff Mitchell
1987264bc3
Migrate storage to database repo ( #2132 )
2022-06-03 14:44:53 -04:00
Todd
a1c2f9f4d8
Add delete service function implementation. ( #2124 )
2022-06-03 11:34:52 -07:00
Jim
5f66d8f2af
feature (worker): add WithFetchNodeCredentialsRequest to CreateWorker ( #2131 )
...
* feature (errors): add support fmt specifier with operands to WithMsg(...)
* feature (worker): add WithFetchNodeCredentialsRequest to CreateWorker
* fixup! feature (worker): add WithFetchNodeCredentialsRequest to CreateWorker
2022-06-03 14:32:51 -04:00
Todd
abbfe45419
Add the Read/List service functions ( #2123 )
2022-06-03 11:19:04 -07:00
Jeff Mitchell
5c76017dd6
Fix nil storage
2022-06-03 12:58:26 -04:00
Jim
9da0faabd7
refactor (servers/workerauth): add StoreNodeInformationTx(...) ( #2125 )
...
refactor to export StoreNodeInformationTx(...) which can be used
by other repositories within their transactions to store
node information.
2022-06-03 12:28:54 -04:00
Jim
6cbb36f2b1
chore (servers): update nodeenrollment dep ( #2129 )
...
The signature for registration.AuthorizeNode(...) changed
2022-06-03 12:04:33 -04:00
Jeff Mitchell
98449f25eb
Fix build
2022-06-03 11:09:02 -04:00
Jeff Mitchell
cd9b10721f
Pull in new nodeenrollment lib to fix some bugs
2022-06-03 11:05:07 -04:00
Jim
78ffd82581
fix (servers): return unhandled err from storeRootCertificates(...) ( #2127 )
2022-06-03 09:14:45 -04:00
Irena Rindos
ded44710d5
Merge pull request #2093 from hashicorp/irindos-workerauth-repo
...
feat(workerAuth): Implement nodeenrollment lib workerauth storage
2022-06-02 15:21:33 -04:00
irenarindos
642e41c9d7
feat(workerAuth): Implement nodeenrollment lib workerauth storage
2022-06-02 15:09:12 -04:00
Jeff Mitchell
1ee2c0dde0
Switch nodeenrollment to staging branch
2022-06-02 13:20:37 -04:00
4716c1a788
Update List Workers Repo function to allow limits and provide scopes ( #2121 )
...
* Update List Workers Repo function to allow limits and provide scopes
Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com >
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com >
2022-06-02 09:28:34 -07:00
Todd
587c6372c2
Add worker update to server repo ( #2117 )
2022-06-01 14:00:24 -07:00
Todd
731a45eba6
Merge the worker_status table with the worker table ( #2111 )
2022-06-01 13:25:29 -07:00
Jeff Mitchell
46e97a2b91
Update to new nodee lib bits ( #2120 )
2022-06-01 13:35:46 -04:00
Irena Rindos
5aebd5689f
Merge pull request #2116 from hashicorp/irindos-update-workerauth-schemas
...
feat(workerauth): add storage for RootCertificates aggregate
2022-06-01 08:31:10 -04:00