strongdm 1.0.7 → 1.0.13

data/lib/grpc/account_attachments_services_pb.rb

@@ -20,7 +20,7 @@ require "account_attachments_pb"
 
 module V1
   module AccountAttachments
-    # AccountAttachments assign an account to a role.
+    # AccountAttachments assign an account to a role or composite role.
     class Service
       include GRPC::GenericService
 

data/lib/grpc/accounts_services_pb.rb

@@ -20,10 +20,9 @@ require "accounts_pb"
 
 module V1
   module Accounts
-    # Accounts are users that have access to strongDM.
-    # There are two types of accounts:
-    # 1. **Regular users:** humans who are authenticated through username and password or SSO
-    # 2. **Service users:** machines that are authneticated using a service token
+    # Accounts are users that have access to strongDM. There are two types of accounts:
+    # 1. **Users:** humans who are authenticated through username and password or SSO.
+    # 2. **Service Accounts:** machines that are authenticated using a service token.
     class Service
       include GRPC::GenericService
 

data/lib/grpc/control_panel_pb.rb

@@ -0,0 +1,39 @@
+# Copyright 2020 StrongDM Inc
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: control_panel.proto
+
+require "google/protobuf"
+
+require "google/api/annotations_pb"
+require "options_pb"
+require "spec_pb"
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("control_panel.proto", :syntax => :proto3) do
+    add_message "v1.ControlPanelGetSSHCAPublicKeyRequest" do
+      optional :meta, :message, 1, "v1.GetRequestMetadata"
+    end
+    add_message "v1.ControlPanelGetSSHCAPublicKeyResponse" do
+      optional :meta, :message, 1, "v1.GetResponseMetadata"
+      optional :public_key, :string, 2
+      optional :rate_limit, :message, 3, "v1.RateLimitMetadata"
+    end
+  end
+end
+
+module V1
+  ControlPanelGetSSHCAPublicKeyRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ControlPanelGetSSHCAPublicKeyRequest").msgclass
+  ControlPanelGetSSHCAPublicKeyResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.ControlPanelGetSSHCAPublicKeyResponse").msgclass
+end

data/lib/grpc/control_panel_services_pb.rb

@@ -0,0 +1,37 @@
+# Copyright 2020 StrongDM Inc
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# Source: control_panel.proto for package 'v1'
+
+require "grpc"
+require "control_panel_pb"
+
+module V1
+  module ControlPanel
+    # ControlPanel contains all administrative controls.
+    class Service
+      include GRPC::GenericService
+
+      self.marshal_class_method = :encode
+      self.unmarshal_class_method = :decode
+      self.service_name = "v1.ControlPanel"
+
+      # GetSSHCAPublicKey retrieves the SSH CA public key.
+      rpc :GetSSHCAPublicKey, ControlPanelGetSSHCAPublicKeyRequest, ControlPanelGetSSHCAPublicKeyResponse
+    end
+
+    Stub = Service.rpc_stub_class
+  end
+end

data/lib/grpc/drivers_pb.rb

@@ -27,7 +27,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
         optional :athena, :message, 100, "v1.Athena"
         optional :big_query, :message, 200, "v1.BigQuery"
         optional :cassandra, :message, 300, "v1.Cassandra"
-        optional :db_2, :message, 2200, "v1.DB2"
+        optional :db_2_i, :message, 2400, "v1.DB2I"
+        optional :db_2_luw, :message, 2200, "v1.DB2LUW"
         optional :druid, :message, 400, "v1.Druid"
         optional :dynamo_db, :message, 500, "v1.DynamoDB"
         optional :amazon_es, :message, 600, "v1.AmazonES"
@@ -107,7 +108,19 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :port, :int32, 5
       optional :tls_required, :bool, 6
     end
-    add_message "v1.DB2" do
+    add_message "v1.DB2I" do
+      optional :id, :string, 32768
+      optional :name, :string, 32769
+      optional :healthy, :bool, 32770
+      optional :tags, :message, 32771, "v1.Tags"
+      optional :hostname, :string, 1
+      optional :username, :string, 2
+      optional :password, :string, 3
+      optional :port_override, :int32, 4
+      optional :port, :int32, 5
+      optional :tls_required, :bool, 7
+    end
+    add_message "v1.DB2LUW" do
       optional :id, :string, 32768
       optional :name, :string, 32769
       optional :healthy, :bool, 32770
@@ -208,11 +221,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :hostname, :string, 1
       optional :port, :int32, 2
       optional :certificate_authority, :string, 3
-      optional :certificate_authority_filename, :string, 4
       optional :client_certificate, :string, 5
-      optional :client_certificate_filename, :string, 6
       optional :client_key, :string, 7
-      optional :client_key_filename, :string, 8
       optional :healthcheck_namespace, :string, 9
     end
     add_message "v1.KubernetesBasicAuth" do
@@ -245,7 +255,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :access_key, :string, 2
       optional :secret_access_key, :string, 3
       optional :certificate_authority, :string, 4
-      optional :certificate_authority_filename, :string, 5
       optional :region, :string, 6
       optional :cluster_name, :string, 7
       optional :role_arn, :string, 8
@@ -258,9 +267,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :tags, :message, 32771, "v1.Tags"
       optional :endpoint, :string, 1
       optional :certificate_authority, :string, 2
-      optional :certificate_authority_filename, :string, 3
       optional :service_account_key, :string, 4
-      optional :service_account_key_filename, :string, 5
       optional :healthcheck_namespace, :string, 6
     end
     add_message "v1.AKS" do
@@ -271,11 +278,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :hostname, :string, 1
       optional :port, :int32, 2
       optional :certificate_authority, :string, 3
-      optional :certificate_authority_filename, :string, 4
       optional :client_certificate, :string, 5
-      optional :client_certificate_filename, :string, 6
       optional :client_key, :string, 7
-      optional :client_key_filename, :string, 8
       optional :healthcheck_namespace, :string, 9
     end
     add_message "v1.AKSBasicAuth" do
@@ -651,7 +655,8 @@ module V1
   Athena = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Athena").msgclass
   BigQuery = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.BigQuery").msgclass
   Cassandra = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Cassandra").msgclass
-  DB2 = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.DB2").msgclass
+  DB2I = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.DB2I").msgclass
+  DB2LUW = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.DB2LUW").msgclass
   Druid = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.Druid").msgclass
   DynamoDB = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.DynamoDB").msgclass
   AmazonES = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("v1.AmazonES").msgclass

data/lib/grpc/nodes_services_pb.rb

@@ -20,10 +20,9 @@ require "nodes_pb"
 
 module V1
   module Nodes
-    # Nodes make up the strongDM network, and allow your users to connect securely to your resources.
-    # There are two types of nodes:
-    # 1. **Relay:** creates connectivity to your datasources, while maintaining the egress-only nature of your firewall
-    # 1. **Gateways:** a relay that also listens for connections from strongDM clients
+    # Nodes make up the strongDM network, and allow your users to connect securely to your resources. There are two types of nodes:
+    # - **Gateways** are the entry points into network. They listen for connection from the strongDM client, and provide access to databases and servers.
+    # - **Relays** are used to extend the strongDM network into segmented subnets. They provide access to databases and servers but do not listen for incoming connections.
     class Service
       include GRPC::GenericService
 

data/lib/grpc/plumbing.rb

@@ -24,6 +24,7 @@ require_relative "./account_attachments_pb"
 require_relative "./account_grants_pb"
 require_relative "./tags_pb"
 require_relative "./accounts_pb"
+require_relative "./control_panel_pb"
 require_relative "./drivers_pb"
 require_relative "./nodes_pb"
 require_relative "./resources_pb"
@@ -840,6 +841,44 @@ module SDM
       end
       items
     end
+    def self.convert_control_panel_get_sshca_public_key_response_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = ControlPanelGetSSHCAPublicKeyResponse.new()
+      porcelain.meta = convert_get_response_metadata_to_porcelain(plumbing.meta)
+      porcelain.public_key = (plumbing.public_key)
+      porcelain.rate_limit = convert_rate_limit_metadata_to_porcelain(plumbing.rate_limit)
+      porcelain
+    end
+
+    def self.convert_control_panel_get_sshca_public_key_response_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::ControlPanelGetSSHCAPublicKeyResponse.new()
+      plumbing.meta = convert_get_response_metadata_to_plumbing(porcelain.meta) unless porcelain.meta == nil
+      plumbing.public_key = (porcelain.public_key) unless porcelain.public_key == nil
+      plumbing.rate_limit = convert_rate_limit_metadata_to_plumbing(porcelain.rate_limit) unless porcelain.rate_limit == nil
+      plumbing
+    end
+    def self.convert_repeated_control_panel_get_sshca_public_key_response_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_control_panel_get_sshca_public_key_response_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_control_panel_get_sshca_public_key_response_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_control_panel_get_sshca_public_key_response_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
     def self.convert_resource_to_plumbing(porcelain)
       if porcelain == nil
         return nil
@@ -854,8 +893,11 @@ module SDM
       if porcelain.instance_of? Cassandra
         plumbing.cassandra = convert_cassandra_to_plumbing(porcelain)
       end
-      if porcelain.instance_of? DB2
-        plumbing.db_2 = convert_db_2_to_plumbing(porcelain)
+      if porcelain.instance_of? DB2I
+        plumbing.db_2_i = convert_db_2_i_to_plumbing(porcelain)
+      end
+      if porcelain.instance_of? DB2LUW
+        plumbing.db_2_luw = convert_db_2_luw_to_plumbing(porcelain)
       end
       if porcelain.instance_of? Druid
         plumbing.druid = convert_druid_to_plumbing(porcelain)
@@ -1002,8 +1044,11 @@ module SDM
       if plumbing.cassandra != nil
         return convert_cassandra_to_porcelain(plumbing.cassandra)
       end
-      if plumbing.db_2 != nil
-        return convert_db_2_to_porcelain(plumbing.db_2)
+      if plumbing.db_2_i != nil
+        return convert_db_2_i_to_porcelain(plumbing.db_2_i)
+      end
+      if plumbing.db_2_luw != nil
+        return convert_db_2_luw_to_porcelain(plumbing.db_2_luw)
       end
       if plumbing.druid != nil
         return convert_druid_to_porcelain(plumbing.druid)
@@ -1304,11 +1349,63 @@ module SDM
       end
       items
     end
-    def self.convert_db_2_to_porcelain(plumbing)
+    def self.convert_db_2_i_to_porcelain(plumbing)
+      if plumbing == nil
+        return nil
+      end
+      porcelain = DB2I.new()
+      porcelain.id = (plumbing.id)
+      porcelain.name = (plumbing.name)
+      porcelain.healthy = (plumbing.healthy)
+      porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
+      porcelain.hostname = (plumbing.hostname)
+      porcelain.username = (plumbing.username)
+      porcelain.password = (plumbing.password)
+      porcelain.port_override = (plumbing.port_override)
+      porcelain.port = (plumbing.port)
+      porcelain.tls_required = (plumbing.tls_required)
+      porcelain
+    end
+
+    def self.convert_db_2_i_to_plumbing(porcelain)
+      if porcelain == nil
+        return nil
+      end
+      plumbing = V1::DB2I.new()
+      plumbing.id = (porcelain.id) unless porcelain.id == nil
+      plumbing.name = (porcelain.name) unless porcelain.name == nil
+      plumbing.healthy = (porcelain.healthy) unless porcelain.healthy == nil
+      plumbing.tags = convert_tags_to_plumbing(porcelain.tags) unless porcelain.tags == nil
+      plumbing.hostname = (porcelain.hostname) unless porcelain.hostname == nil
+      plumbing.username = (porcelain.username) unless porcelain.username == nil
+      plumbing.password = (porcelain.password) unless porcelain.password == nil
+      plumbing.port_override = (porcelain.port_override) unless porcelain.port_override == nil
+      plumbing.port = (porcelain.port) unless porcelain.port == nil
+      plumbing.tls_required = (porcelain.tls_required) unless porcelain.tls_required == nil
+      plumbing
+    end
+    def self.convert_repeated_db_2_i_to_plumbing(porcelains)
+      items = Array.new
+      porcelains.each do |porcelain|
+        plumbing = convert_db_2_i_to_plumbing(porcelain)
+        items.append(plumbing)
+      end
+      items
+    end
+
+    def self.convert_repeated_db_2_i_to_porcelain(plumbings)
+      items = Array.new
+      plumbings.each do |plumbing|
+        porcelain = convert_db_2_i_to_porcelain(plumbing)
+        items.append(porcelain)
+      end
+      items
+    end
+    def self.convert_db_2_luw_to_porcelain(plumbing)
       if plumbing == nil
         return nil
       end
-      porcelain = DB2.new()
+      porcelain = DB2LUW.new()
       porcelain.id = (plumbing.id)
       porcelain.name = (plumbing.name)
       porcelain.healthy = (plumbing.healthy)
@@ -1322,11 +1419,11 @@ module SDM
       porcelain
     end
 
-    def self.convert_db_2_to_plumbing(porcelain)
+    def self.convert_db_2_luw_to_plumbing(porcelain)
       if porcelain == nil
         return nil
       end
-      plumbing = V1::DB2.new()
+      plumbing = V1::DB2LUW.new()
       plumbing.id = (porcelain.id) unless porcelain.id == nil
       plumbing.name = (porcelain.name) unless porcelain.name == nil
       plumbing.healthy = (porcelain.healthy) unless porcelain.healthy == nil
@@ -1339,19 +1436,19 @@ module SDM
       plumbing.port = (porcelain.port) unless porcelain.port == nil
       plumbing
     end
-    def self.convert_repeated_db_2_to_plumbing(porcelains)
+    def self.convert_repeated_db_2_luw_to_plumbing(porcelains)
       items = Array.new
       porcelains.each do |porcelain|
-        plumbing = convert_db_2_to_plumbing(porcelain)
+        plumbing = convert_db_2_luw_to_plumbing(porcelain)
         items.append(plumbing)
       end
       items
     end
 
-    def self.convert_repeated_db_2_to_porcelain(plumbings)
+    def self.convert_repeated_db_2_luw_to_porcelain(plumbings)
       items = Array.new
       plumbings.each do |plumbing|
-        porcelain = convert_db_2_to_porcelain(plumbing)
+        porcelain = convert_db_2_luw_to_porcelain(plumbing)
         items.append(porcelain)
       end
       items
@@ -1726,11 +1823,8 @@ module SDM
       porcelain.hostname = (plumbing.hostname)
       porcelain.port = (plumbing.port)
       porcelain.certificate_authority = (plumbing.certificate_authority)
-      porcelain.certificate_authority_filename = (plumbing.certificate_authority_filename)
       porcelain.client_certificate = (plumbing.client_certificate)
-      porcelain.client_certificate_filename = (plumbing.client_certificate_filename)
       porcelain.client_key = (plumbing.client_key)
-      porcelain.client_key_filename = (plumbing.client_key_filename)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
       porcelain
     end
@@ -1747,11 +1841,8 @@ module SDM
       plumbing.hostname = (porcelain.hostname) unless porcelain.hostname == nil
       plumbing.port = (porcelain.port) unless porcelain.port == nil
       plumbing.certificate_authority = (porcelain.certificate_authority) unless porcelain.certificate_authority == nil
-      plumbing.certificate_authority_filename = (porcelain.certificate_authority_filename) unless porcelain.certificate_authority_filename == nil
       plumbing.client_certificate = (porcelain.client_certificate) unless porcelain.client_certificate == nil
-      plumbing.client_certificate_filename = (porcelain.client_certificate_filename) unless porcelain.client_certificate_filename == nil
       plumbing.client_key = (porcelain.client_key) unless porcelain.client_key == nil
-      plumbing.client_key_filename = (porcelain.client_key_filename) unless porcelain.client_key_filename == nil
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace) unless porcelain.healthcheck_namespace == nil
       plumbing
     end
@@ -1883,7 +1974,6 @@ module SDM
       porcelain.access_key = (plumbing.access_key)
       porcelain.secret_access_key = (plumbing.secret_access_key)
       porcelain.certificate_authority = (plumbing.certificate_authority)
-      porcelain.certificate_authority_filename = (plumbing.certificate_authority_filename)
       porcelain.region = (plumbing.region)
       porcelain.cluster_name = (plumbing.cluster_name)
       porcelain.role_arn = (plumbing.role_arn)
@@ -1904,7 +1994,6 @@ module SDM
       plumbing.access_key = (porcelain.access_key) unless porcelain.access_key == nil
       plumbing.secret_access_key = (porcelain.secret_access_key) unless porcelain.secret_access_key == nil
       plumbing.certificate_authority = (porcelain.certificate_authority) unless porcelain.certificate_authority == nil
-      plumbing.certificate_authority_filename = (porcelain.certificate_authority_filename) unless porcelain.certificate_authority_filename == nil
       plumbing.region = (porcelain.region) unless porcelain.region == nil
       plumbing.cluster_name = (porcelain.cluster_name) unless porcelain.cluster_name == nil
       plumbing.role_arn = (porcelain.role_arn) unless porcelain.role_arn == nil
@@ -1939,9 +2028,7 @@ module SDM
       porcelain.tags = convert_tags_to_porcelain(plumbing.tags)
       porcelain.endpoint = (plumbing.endpoint)
       porcelain.certificate_authority = (plumbing.certificate_authority)
-      porcelain.certificate_authority_filename = (plumbing.certificate_authority_filename)
       porcelain.service_account_key = (plumbing.service_account_key)
-      porcelain.service_account_key_filename = (plumbing.service_account_key_filename)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
       porcelain
     end
@@ -1957,9 +2044,7 @@ module SDM
       plumbing.tags = convert_tags_to_plumbing(porcelain.tags) unless porcelain.tags == nil
       plumbing.endpoint = (porcelain.endpoint) unless porcelain.endpoint == nil
       plumbing.certificate_authority = (porcelain.certificate_authority) unless porcelain.certificate_authority == nil
-      plumbing.certificate_authority_filename = (porcelain.certificate_authority_filename) unless porcelain.certificate_authority_filename == nil
       plumbing.service_account_key = (porcelain.service_account_key) unless porcelain.service_account_key == nil
-      plumbing.service_account_key_filename = (porcelain.service_account_key_filename) unless porcelain.service_account_key_filename == nil
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace) unless porcelain.healthcheck_namespace == nil
       plumbing
     end
@@ -1992,11 +2077,8 @@ module SDM
       porcelain.hostname = (plumbing.hostname)
       porcelain.port = (plumbing.port)
       porcelain.certificate_authority = (plumbing.certificate_authority)
-      porcelain.certificate_authority_filename = (plumbing.certificate_authority_filename)
       porcelain.client_certificate = (plumbing.client_certificate)
-      porcelain.client_certificate_filename = (plumbing.client_certificate_filename)
       porcelain.client_key = (plumbing.client_key)
-      porcelain.client_key_filename = (plumbing.client_key_filename)
       porcelain.healthcheck_namespace = (plumbing.healthcheck_namespace)
       porcelain
     end
@@ -2013,11 +2095,8 @@ module SDM
       plumbing.hostname = (porcelain.hostname) unless porcelain.hostname == nil
       plumbing.port = (porcelain.port) unless porcelain.port == nil
       plumbing.certificate_authority = (porcelain.certificate_authority) unless porcelain.certificate_authority == nil
-      plumbing.certificate_authority_filename = (porcelain.certificate_authority_filename) unless porcelain.certificate_authority_filename == nil
       plumbing.client_certificate = (porcelain.client_certificate) unless porcelain.client_certificate == nil
-      plumbing.client_certificate_filename = (porcelain.client_certificate_filename) unless porcelain.client_certificate_filename == nil
       plumbing.client_key = (porcelain.client_key) unless porcelain.client_key == nil
-      plumbing.client_key_filename = (porcelain.client_key_filename) unless porcelain.client_key_filename == nil
       plumbing.healthcheck_namespace = (porcelain.healthcheck_namespace) unless porcelain.healthcheck_namespace == nil
       plumbing
     end