CyberCoveLLC/threshold
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,256 Commits 7 Branches 2 Tags
fe2ee7ef4a7e58f8e60c2f840ce84c1912dc38b3
Commit Graph
271 Commits
Author SHA1 Message Date
Jeff Mitchell 418129d564 Update Go version info on building page (#2304) 2022-07-29 12:08:21 -04:00
Loann Le 3fb09dd247 Boundary documentation: updated domain model page (#2259) 
* updated domain model

* updated image ext

* resized images

* updated content

* updated images

* resizing images

* fixed one image

* modified text

* removed image
 2022-07-26 14:45:33 -06:00
Loann LeYoko HyakunaRobin BeckXingLu Wang
 		24cf580045 Boundary documentation: modified Boundary's overview page (#2264) 
* modified overview page

* updated text and image

* fixed spelling errors

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* cleaned up content

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>

* incorporate feedback

* updated image

* updated background color

* modified font

* Update website/content/docs/what-is-boundary.mdx

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>

Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
 2022-07-25 11:21:30 -06:00
Louis Ruch 5c80942453 docs(credentials): Update website domain docs (#2287) 2022-07-25 10:12:10 -07:00
Mark Lewis 6d5abba2e5 Update common.mdx (#2099) 
typo
 2022-07-20 15:33:49 -04:00
Mark Lewis 80b2dbe862 Update overview.mdx (#2098) 
Fix missing bracket
 2022-07-20 15:33:27 -04:00
Robin Beck 674b9627af adds architecture overview diagram (#2258) 2022-07-15 10:37:07 -04:00
Loann LeandRobin Beck d5633952db Boundary documentation: content cleanup in prep for devdot migration (#2249) 
* cleaning up docs

* Update website/content/docs/concepts/domain-model/groups.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/managed-groups.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/roles.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/scopes.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/concepts/domain-model/sessions.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/configuration/worker/pki-worker.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* Update website/content/docs/getting-started/deploy-and-login.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2022-07-12 13:29:35 -06:00
Jeff Malnick 1f66685864 feat: set default connection limit to unlimited (-1) instead of 1 (#2234) 
This avoids the confusion behavior of a session terminating as soon
as a single connection using that session is closed.
 2022-07-06 12:02:56 -04:00
Timothy Messier fd5d15af27 feat(config): Add database config options for idle connection management (#2176) 
This adds two new config options for the `database` stanza:

- `max_idle_connections`
- `max_idle_time`

These correspond to settings for the underlying `sql.DB` instance. They
can be used to have finer control over the controller's database
connection pool. For example this can be used to mitigate the high
connection overhead when connecting to postgres by setting a high
`max_idle_connections` and either setting `max_idle_time` to zero or to
a high duration.

Alternatively, if using a connection pool like pgpool-II or pgbouncer,
`max_idle_connections` can be set to 0.

See:
    https://pkg.go.dev/database/sql#DB.SetMaxIdleConns
    https://pkg.go.dev/database/sql#DB.SetConnMaxIdleTime
    https://www.pgpool.net/mediawiki/index.php/Main_Page
    https://www.pgbouncer.org/
 2022-07-05 15:25:55 -04:00
Jeff Mitchell 79440c5d82 Add worker resource to perms table (#2241) 2022-07-05 11:34:01 -04:00
Robin Beck 0ff4be119e updates learn links (#2230) 2022-06-23 12:06:39 -06:00
Jeff Mitchell 86141ffb65 Add some OSS/HCP Boundary distinctions in docs (#2227) 2022-06-22 03:31:16 -04:00
Robin BeckXingLu WangLoann LeJeff MitchellirenarindosIrena RindosLouis RuchXingLu Wang
 		c05fa66096 Hashiconf docs changes (#2178) 
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

Co-authored-by: irenarindos <irena.rindos@gmail.com>

Co-authored-by: Irena Rindos <irenarindos@users.noreply.github.com>

Co-authored-by: Louis Ruch <louisruch@gmail.com>

Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com>

Co-authored-by: XingLu Wang <95828202+xingluw@users.noreply.github.com>
 2022-06-22 02:37:49 -04:00
Jeff MitchellandJim 7c139d28b2 Have hclog payloads use json tags (#2171) 
* Have hclog payloads use `json` tags

Previously a global setting for the `structs` lib was causing the `json`
tag to be used, but this could have side effects from other packages, or
could be affected by other packages' behavior. This behavior was removed
earlier but it means this format call no longer uses `json` tags; this
behavior reverts it.

It also normalizes using mapstructure in a few other places.

* Update some tests

* Fix incorrect op const

* Fix more tests

* refactor (events): tell filter to use json tags (fix related tests)

Explicitly tell the filter to use the "json" tags so we don't have to
re-tag everything with a mapstructure tag via bexpr.WithTagName("json")

Update docs

Co-authored-by: Jim <jlambert@hashicorp.com>
 2022-06-13 19:02:11 -04:00
Haotian 40ba275759 feat(worker): add 'initial_upstreams' field to worker config to prepare to replace 'controllers' field. Update worker config description on website. 2022-06-13 15:45:03 -07:00
Johan Brandhorst-Satzkorn a2477420da chore: Clarify event file sink doc (#2162) 
Updated examples to show the common use case of
specifying a directory path and file name for
a file sink. This should hopefully prevent users
from making the mistake of putting a full path
for the file_name field and seeing an error like:

[ERROR] unable to send event: operation="event.(Eventer).retrySend"
  warning=
  | 1 error occurred:
  | 	* mkdir : no such file or directory
  |
 2022-06-10 13:30:05 -04:00
Jeff Mitchell d6362f9e5e Restrict anonymous user capabilities (#2156) 2022-06-09 11:30:01 -04:00
Robin BeckToddLoann LeJohan Brandhorst-Satzkorntaoism4504Yoko HyakunaTimothy MessierXingLu Wang
 		bc86b4e9e9 Docs Changes for v0.8.0 (#2024) 
* added new metrics doc

* Minor format fixes

* Use table to list metrics

* Update website/content/docs/operations/index.mdx

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

* fixed sentence

* added worker proxy http

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Todd <github@quaddi.com>

* Update based on the changes in draft

* remove WIP note

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Todd <github@quaddi.com>

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Todd <github@quaddi.com>

* Update website/content/docs/operations/index.mdx

Co-authored-by: Todd <github@quaddi.com>

* Removed invalid metrics

* Update header level

* added code styling for "ops" listener and port 9203 description

* added health endpoint document

* resolved cherry-pick confict for 5edac3a7418f80e7d528f2fa7a461b1125c11806

* Incorporate review feedback

* removed bad reference to metrics

* added Other section for boundary_build_info

* fixed typo

* Update website/content/docs/operations/health.mdx

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

* Update website/content/docs/operations/health.mdx

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

* Update website/content/docs/operations/health.mdx

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

* Update website/content/docs/operations/health.mdx

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

* Update website/content/docs/operations/health.mdx

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

* Changed release notes structure

Removed the empty "Releases" folder and now it goes straight to "Release Notes"

* Update website/content/docs/operations/health.mdx

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

* Incorporate review feedback

* Update website/content/docs/operations/index.mdx

Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>

* added tutorial link

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* Update website/content/docs/operations/metrics.mdx

Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>

* 0.8 Release Notes

Added release notes page for 0.8

* corrected sensitive info redaction note

* cleaned up visibility overview

Co-authored-by: taoism4504 <loann@hashicorp.com>
Co-authored-by: Yoko Hyakuna <yoko@hashicorp.com>
Co-authored-by: Loann Le <84412881+taoism4504@users.noreply.github.com>
Co-authored-by: Todd <github@quaddi.com>
Co-authored-by: Timothy Messier <tim.messier@gmail.com>
Co-authored-by: XingLu Wang <xinglu.wang@hashicorp.com>
Co-authored-by: Johan Brandhorst-Satzkorn <johan.brandhorst@gmail.com>
 2022-05-03 16:24:04 -04:00
PPacent ce7292d9c8 Docs: Adding service discovery concept page (#1886) 
* Adding service discovery concept page
 2022-03-31 14:54:53 -07:00
Joey Freeland 15a6ffeb6b chore: clarification on default TCP ports (#1878) 2022-03-30 09:36:30 -07:00
Lili Cosic d2602584ab docs: Add full example for using recovery KMS workflow (#1888) 2022-03-29 18:18:33 -07:00
Hugo 244237cd2f feat(controller): Add health endpoint (#1882) 
* feat(controller): New health service and server

This change also implements a new listener purpose, `ops`.

`ops` (short for operations) is a new listener purpose that is
responsible for serving Boundary's operations endpoints, like health
and possibly metrics.

At Startup: `ops` listeners get configured as late as possible to catch
any errors with the startup process;

At Shutdown: If the health endpoint has been set-up, we introduce a
configurable delay in the process. This is to enable the health endpoint
to report unhealthy for that amount of time. `ops` listeners are also
the last listeners to be shutdown.
 2022-03-28 17:16:39 +01:00
Johan Brandhorst-Satzkorn 89273a2f3e Update references to "make dev" (#1920) 
"make dev" has been replaced with "make install" since b53e4d4c3e.
 2022-03-16 16:39:53 -04:00
irenarindos 32dd594029 docs(connections): Update domain model for session connections 2022-03-15 12:11:31 -04:00
Robin BeckandHugo 860a053ba8 Docs: Update connect-to-target page with target-name example (#1887) 
* added boundary connect -target-name example

* removes some passive and ableist language

* Apply suggestions from code review

add rewrite suggestions from @hugoamvieira

Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>

* update Using Connect Helpers copy

Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>
 2022-03-10 11:26:48 -07:00
Irena Rindos bc6689fb16 docs(permissions): break permissions into sections (#1893) 
* docs(permissions): break permissions into sections

* fixup! docs(permissions): break permissions into sections
 2022-03-08 10:36:11 -05:00
Swati Saxena be75a2cd3c Update roadmap.mdx (#1885) 2022-03-04 07:52:19 -08:00
xka5h 237f0c5704 updated CLI connection options, including addr (#1884) 2022-03-03 14:15:18 -08:00
Irena Rindos 718e746480 docs(targets): remove default port option (#1883) 2022-03-03 10:44:25 -08:00
Timothy Messier 0c3218ec3e docs(website): Update cross-compiling notes 
This replaces references to XC_OSARCH with GOOS and GOARCH.

See: 1c8e0ed1e1
 2022-01-13 08:54:50 -05:00
Hugo Vieira 5f36057f65 feat(config): Env/file support for Worker description 2021-12-10 18:21:52 +00:00
Irena Rindos 7bf787ec40 feat(config): Add env and file support for database max connections 2021-12-09 13:02:42 -05:00
Hugo Vieira 8462a65637 feat(config): Add env/file support to Worker.Controllers field 
This feature allows the user to set the `controllers` field to a string
that points to either an environment variable or file.
We then dynamically pull out the value and parse it into the config.
 2021-12-08 17:10:41 +00:00
Irena Rindos 5601f2bc5f feat(config) Add env and file support to Plugins execution dir 2021-12-08 10:48:24 -05:00
Irena Rindos 1f43ec174f Merge branch 'main' into irenarindos-env-file-controllerconfig 2021-12-08 04:58:46 -08:00
Irena Rindos 161916f6d3 feat(config): Add env and file support to Controller description 2021-12-07 15:08:21 -05:00
Hugo Vieira 1576af70cc feat(config): Add env and file support to Worker Tags 
This feature allows the user to set the `tags` field to a string
that points to either an environment variable or file.
We then dynamically pull out the value and parse it into the config.

This can also be done at the keys level, where you set your keys
directly in Boundary's config file, but point the values to env/file.
 2021-12-07 19:21:04 +00:00
Hugo Vieira f1063a62a0 feature(config): add sockaddr template support 2021-11-30 14:07:12 +00:00
Pete Pacent e360e162b9 Adding release notes for 0.7 (#1739) 2021-11-23 10:59:52 -08:00
Jeff MitchellandMichael Gaffney 04a52a5864 Add plugins configuration section to docs (#1727) 
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com>
 2021-11-17 17:21:20 -05:00
Todd 1c36b1e4d7 Add plugin details to host catalog, host set, and host domain model pages (#1715) 
* Add plugin information to host catalogs, host sets, and hosts.
 2021-11-17 14:11:06 -07:00
Jeff Mitchell 7174a91f32 Update data-encryption documentation to clarify what is encrypted (#1722) 2021-11-17 14:42:59 -05:00
George Christou 3a7f12f0c3 doc: [ssh] Use %n for ProxyCommand (#1696) 2021-11-12 10:37:42 -05:00
DevOps Rob 55ab75f364 updating db init without generated resources example (#1493) 2021-11-05 17:18:43 -04:00
Jeff Mitchell 1782f6a4e4 Enhance worker connection security (#1641) 
This stores worker connection nonces within the database to ensure
uniqueness of connections. Prior the connection required any attacker to
be able to decrypt the incoming encrypted authentication message in
order to replay (and if the attacker has access to the KMS you have
bigger problems), but with this change even if an attacker does have
access to the KMS key, they cannot reuse the same message. (If they're
able to encrypt against the KMS key, they can still act as a worker with
a new message, so this only really helps if they only have decryption
capabilities.)
 2021-10-27 20:32:07 -04:00
Pete Pacent 324a00c07e Adding reference architecture docs (#1625) 2021-10-20 21:35:29 -07:00
Loann LeRobin BeckPete Pacent
 		5d527c5e99 Boundary documentation: created a boundary intro page (#1601) 
* added an boundary intro page

* Update what-is-boundary.mdx

deleted an extra space

* added an image

* Apply suggestions from Robin's code review

Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>

Co-authored-by: Pete Pacent <ppacent@hashicorp.com>
Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
 2021-10-14 17:03:25 -07:00
Jeff Mitchell c05324282f Rename the UI passthrough dir flag/env var (#1600) 
This puts it more in line with other upcoming options that use "dir"
instead of "directory" (plus it's easier to type), and makes it clear
that this directory and the passthrough behavior is related to the UI as
opposed to other upcoming items.
 2021-10-14 12:13:07 -04:00
Robin Beck 204ff254ca fixed hcl config examples for sink (#1590) 
* fixed hcl config examples for sink

* fixed observations_enabled parameter typo
 2021-10-13 13:57:31 -06:00