boundary
boundary copied to clipboard
hashicorp
Boundary enables identity-based access management for dynamic infrastructure.
**Describe the bug** I am seeing TLS handshake issues in the Controller Logs. The source IP listed for the pod, belongs to Calico pod. {"id":"t2UZHLchKp","source":"https://hashicorp.com/boundary/boundary-controller-d6f7bc666-lfjzm/controller","specversion":"1.0","type":"observation","data":{"latency-ms":75.353934,"request_info":{"id":"gtraceid_twMvakO7uv5kr0g1hGVO","method":"GET","path":"/v1/auth-tokens/at_IFDg03Yv2G","public_id":"at_IFDg03Yv2G","client_ip":"10.17.249.7"},"start":"2024-05-31T15:29:04.672662867Z","status":200,"stop":"2024-05-31T15:29:04.748016801Z","version":"v0.1"},"datacontentype":"application/cloudevents","time":"2024-05-31T15:29:04.748078801Z"} {"id":"ubbpl5j7Vm","source":"https://hashicorp.com/boundary/boundary-controller-d6f7bc666-lfjzm/controller","specversion":"1.0","type":"observation","data":{"latency-ms":86.611384,"request_info": {"id":"gtraceid_HxnioEmRiq3FVsS1tY7c","method":"GET","path":"/v1/users/u_lXr23TPO94:list-resolvable-aliases","public_id":"at_IFDg03Yv2G","client_ip":"10.17.249.6"},"start":"2024-05-31T15:29:04.843414423Z","status":200,"stop":"2024-05-31T15:29:04.930025907Z","version":"v0.1"},"datacontentype":"application/cloudevents","time":"2024-05-31T15:29:04.930091007Z"} {"id":"J8WdRGOzbA","source":"https://hashicorp.com/boundary/boundary-controller-d6f7bc666-lfjzm/controller","specversion":"1.0","type":"observation","data":{"latency-ms":153.125578,"request_info":{"id":"gtraceid_gVSaxuA2CazdHm3EhEIl","method":"GET","path":"/v1/targets?list_token=Be9MGxCtJuWGF5rvg3UgaAw5nTF1R4GqToPjeJwjn2XuFJJSQSBxWdnWDAndK7XohvViEA43\u0026recursive=true\u0026scope_id=global","public_id":"at_IFDg03Yv2G","client_ip":"10.17.249.5"},"start":"2024-05-31T15:29:05.038347087Z","status":200,"stop":"2024-05-31T15:29:05.191472765Z","version":"v0.1"},"datacontentype":"application/cloudevents","time":"2024-05-31T15:29:05.191547465Z"} {"@level":"info","@message":"http: TLS...
TODO: needs automated testing, but tested locally using `boundary dev` and vault running in docker ## successful unwrapping of a vault token within boundary ```bash ~/codebase/boundary % export BOUNDARY_VAULT_TOKEN=$(vault token...
**Describe the bug** My Kubernetes workers become unresponsive after a while, similar to this issue https://github.com/hashicorp/boundary/issues/2598. Unfortunately, I am unable to figure out why. While trying to do so I...
**Describe the bug** The session_count column in the Admin UI http://admin-ui/scopes/global/workers does not match what the Kubernetes worker reports. The correct information is reported by the worker. **To Reproduce** Steps...
Right now no logs are visible for a boundary instance run via systemd. This PR adds 2 lines to the unit file to log stdout and stderr to journal, so...
This ensures we don't have competing update processes running. When doing the inline RefreshForSearch, a specific error will be returned so we can hint in the API that we're in...
This PR adds a Terraform module that creates resources for testing against a long-lived HCP cluster. Right now, the resources include those necessary to perform Session Recording, including a worker,...
Auth methods that do not support `:callback` were successfully authenticating with a token returned. This change prevents that behaviour - Pass request context to services to validate actions. - Validate...
This commit modifies the OIDC authentication start method to return a 412 (Precondition Failed) error if a client attempts to start the authentication flow against an OIDC auth method that...
# Summary A new set of tests were added to the create/update repository methods of the static host resource. These tests were added to validate that an IPv6 address can...
