SysEventer returns the "system wide" eventer for Boundary and can/will return a nil Eventer

WithEd25519 allows an optional request to use ed25519 during the operation

GetOpts - iterate the inbound Options and return a struct

ListAccounts implements the interface pbs.AccountServiceServer.

Remove implements the Storage interface. Remove removes the given message. Only the ID field of the message is considered.

TestSessionParams returns an initialized ComposedOf which can be used to create a session in the repository.

TestSet creates a plugin host sets in the provided DB with the provided catalog id. The catalog must have been created previously. The test will fail

WithDescription provides an optional description.

WithDescription provides an optional description.

NewRepository creates a new Repository. The returned repository should only be used for one transaction and it is not safe for concurrent go routines

RegisterPrefixToResourceInfo is called from various packages to register which prefixes belong to them, what types those represent, and any domain and

WithUserDn optionally specifies a user dn used to search for user entries.

CreateCredentialStore inserts cs into the repository and returns a new CredentialStore containing the credential store's PublicId. cs is not changed.

NewCredentialStore creates a new in memory CredentialStore for a Vault server at vaultAddress assigned to projectId. Name, description, CA cert, clien

NewMaskManager returns a mask manager that can translate field masks into the first proto from all subsequent protos assuming they are both using the

Sort orders the Editions by priority.

WithSkipVetForWrite provides an option to allow skipping vet checks to allow testing lower-level SQL triggers and constraints

Generate random bytes for byte fields

GetOpts - iterate the inbound Options and return a struct.

ValidDekPurposes returns the current list of valid DEK key purposes

WithCreateFile indicates a file should be created when opening.

WithGroupDn optionally specifies a group dn used to search for group entries.

WithRandomReader(...) option allows an optional random reader to be provided. By default the reader from crypto/rand will be used.

getOpts - iterate the inbound Options and return a struct

CreateKeys creates new bsr keys, wrapping and signing keys as required using the provided bsrWrapper. Supported options: WithRandomReader

GetId returns the Id of the container.

LookupWorker returns the worker for the provided publicId. This returns nil nil in the situation where no worker can be found with that public id.

ParseListToken parses a list token from the input, returning an error if the parsing fails.

ServeHTTP satisfies the http.Handler interface

Token returns the current vault token if available.

WithOperationalState provides an option for specifying the auth method's operational state

AddUserAccounts adds Users as members to a group. The provided request must include the User id which the Account will be added to. If that id is mis

Controller returns the underlying controller

EventType is required for all event types by the eventlogger broker

Process formats the Boundary event as an hclog entry and stores that formatted data in Event.Formatted with a key of either "hclog-text" (TextHclogSin

TestConnection creates a test connection for the sessionId in the repository.

TestRequestInfo provides a test RequestInfo

WithKeyId allows specifying a key ID that should be found in a scope's multiwrapper; if it is not found, keys will be refreshed

LookupConnection will look up a connection in the repository and return the connection with its state. If the connection is not found, it will return

NewRepository creates a new Repository. The returned repository should only be used for one transaction and it is not safe for concurrent go routines

Parse parses a grant string. Note that this does not do checking of the validity of IDs and such; that's left for other parts of the system. We may no

Pointer is just a generic function to return a pointer of whatever type is given

TestAuthContextFromToken creates an auth context with provided token This is used in conjunction with TestAuthTokenWithRoles which creates a test toke

WithLimit provides an option to provide a limit. If WithLimit == 0, then default limits are used for results.

WithOverridePrivateKeyAttribute provides the name of an attribute in the Data field of a Vault api.Secret that maps to a private key value.

WithRelease version provides an optional release version

AddHostSourceToTargetCli uses the cli to add a host source (host set or host) to a target. Boundary's `add-host-sources` functionality appends a new h

CancelSession sets a session's state to "canceling" in the repo. It's called when the user cancels a session and the controller wants to update the s

CreateHostCatalogCli uses the cli to create a new host catalog. Returns the id of the new host catalog.

DefaultLimiterMaxQuotas returns the default maximum number of quotas that can be tracked by the rate limiter.

DevController is a Config that is used for dev mode of Boundary controllers

NewStoreRepository returns a new credential store repository.

Emit a message and key/value pairs at the WARN level

WithBindCredential optionally specifies a set of optional configuration parameters which allow Boundary to bind (aka authenticate) using the credentia

decrypt the bind credential after reading it from the database

AuthorizeConnection will check to see if a connection is allowed. Currently, that authorization checks: * the hasn't expired based on the session.Exp

CanonicalString returns the canonical representation of the grant

CreateHostCli uses the cli to create a new host. Returns the id of the new host.

LookupRole will look up a role in the repository. If the role is not found, it will return nil, nil. Supported options: WithReaderWriter

NewEventer creates a new Eventer using the config. Supports options: WithNow, WithSerializationLock, WithBroker, WithAuditWrapper, WithNoDefaultSink

TestPlugin creates a plugin and inserts it into the database. enables the "host" flag by default Supported options: WithHostFlag, WithStorageFlag

WithName provides an optional name.

WithOverridePrivateKeyPassphraseAttribute provides the name of an attribute in the Data field of a Vault api.Secret that maps to a passphrase value.