From db97223a40be6c06c121669d37327a686c79fdd2 Mon Sep 17 00:00:00 2001 From: Sheen Capadngan Date: Sat, 4 Oct 2025 22:36:16 +0800 Subject: [PATCH 1/4] misc: allow connecting to dbs with ssl via proxy --- .../pam-resource/shared/sql/sql-resource-factory.ts | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/backend/src/ee/services/pam-resource/shared/sql/sql-resource-factory.ts b/backend/src/ee/services/pam-resource/shared/sql/sql-resource-factory.ts index a35765a2c..74a2c74ae 100644 --- a/backend/src/ee/services/pam-resource/shared/sql/sql-resource-factory.ts +++ b/backend/src/ee/services/pam-resource/shared/sql/sql-resource-factory.ts @@ -1,4 +1,5 @@ import knex, { Knex } from "knex"; +import tls, { PeerCertificate } from "tls"; import { verifyHostInputValidity } from "@app/ee/services/dynamic-secret/dynamic-secret-fns"; import { TGatewayV2ServiceFactory } from "@app/ee/services/gateway-v2/gateway-v2-service"; @@ -30,7 +31,12 @@ const getConnectionConfig = ( ? { rejectUnauthorized: sslRejectUnauthorized, ca: sslCertificate, - servername: host + servername: host, + // When using proxy, we need to bypass hostname validation since we connect to localhost + // but validate the certificate against the actual hostname + checkServerIdentity: (hostname: string, cert: PeerCertificate) => { + return tls.checkServerIdentity(host, cert); + } } : false }; @@ -114,6 +120,10 @@ export const sqlResourceFactory: TPamResourceFactory Date: Mon, 6 Oct 2025 01:18:11 +0800 Subject: [PATCH 2/4] misc: added message for when session logs aren't uploaded --- .../components/PamSessionLogsSection.tsx | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/frontend/src/pages/pam/PamSessionsByIDPage/components/PamSessionLogsSection.tsx b/frontend/src/pages/pam/PamSessionsByIDPage/components/PamSessionLogsSection.tsx index 0e3854164..158143d5d 100644 --- a/frontend/src/pages/pam/PamSessionsByIDPage/components/PamSessionLogsSection.tsx +++ b/frontend/src/pages/pam/PamSessionsByIDPage/components/PamSessionLogsSection.tsx @@ -69,7 +69,18 @@ export const PamSessionLogsSection = ({ session }: Props) => { }) ) : (
- No session logs + {session.startedAt && session.endedAt ? ( +
+
Session logs are not available
+
+ Logs failed to upload from the Gateway. +
+ Please contact your Gateway administrators. +
+
+ ) : ( + "No session logs" + )}
)} From d30087a62a52f0fe3da38ababeea8fa8af50798d Mon Sep 17 00:00:00 2001 From: Sheen Capadngan Date: Mon, 6 Oct 2025 01:45:11 +0800 Subject: [PATCH 3/4] misc: improved no session logs yet message --- .../components/PamSessionLogsSection.tsx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/frontend/src/pages/pam/PamSessionsByIDPage/components/PamSessionLogsSection.tsx b/frontend/src/pages/pam/PamSessionsByIDPage/components/PamSessionLogsSection.tsx index 158143d5d..80afecc99 100644 --- a/frontend/src/pages/pam/PamSessionsByIDPage/components/PamSessionLogsSection.tsx +++ b/frontend/src/pages/pam/PamSessionsByIDPage/components/PamSessionLogsSection.tsx @@ -71,11 +71,11 @@ export const PamSessionLogsSection = ({ session }: Props) => {
{session.startedAt && session.endedAt ? (
-
Session logs are not available
+
Session logs are not yet available
- Logs failed to upload from the Gateway. + Logs will be uploaded after the session duration has elapsed.
- Please contact your Gateway administrators. + If logs do not appear after some time, please contact your Gateway administrators.
) : ( From dc25795d0a97038b5984d2a34d41dd68590ecf7c Mon Sep 17 00:00:00 2001 From: Sheen Capadngan Date: Tue, 7 Oct 2025 00:47:38 +0800 Subject: [PATCH 4/4] misc: enabled pam project type and created new helm version for gateway --- frontend/src/components/projects/NewProjectModal.tsx | 8 ++++---- helm-charts/infisical-gateway/Chart.yaml | 4 ++-- helm-charts/infisical-gateway/values.yaml | 2 +- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/frontend/src/components/projects/NewProjectModal.tsx b/frontend/src/components/projects/NewProjectModal.tsx index eb7ef40fe..5dd2ea4ce 100644 --- a/frontend/src/components/projects/NewProjectModal.tsx +++ b/frontend/src/components/projects/NewProjectModal.tsx @@ -80,11 +80,11 @@ const PROJECT_TYPE_MENU_ITEMS = [ { label: "Secret Scanning", value: ProjectType.SecretScanning + }, + { + label: "PAM", + value: ProjectType.PAM } - // { - // label: "PAM", - // value: ProjectType.PAM - // } ]; const NewProjectForm = ({ onOpenChange }: NewProjectFormProps) => { diff --git a/helm-charts/infisical-gateway/Chart.yaml b/helm-charts/infisical-gateway/Chart.yaml index 02966009c..35b0a2f7d 100644 --- a/helm-charts/infisical-gateway/Chart.yaml +++ b/helm-charts/infisical-gateway/Chart.yaml @@ -15,10 +15,10 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 1.0.1 +version: 1.0.2 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to # follow Semantic Versioning. They should reflect the version the application is using. # It is recommended to use it with quotes. -appVersion: "1.0.1" +appVersion: "1.0.2" diff --git a/helm-charts/infisical-gateway/values.yaml b/helm-charts/infisical-gateway/values.yaml index c8ad11a29..c792d67a6 100644 --- a/helm-charts/infisical-gateway/values.yaml +++ b/helm-charts/infisical-gateway/values.yaml @@ -1,6 +1,6 @@ image: pullPolicy: IfNotPresent - tag: "0.42.3" + tag: "0.43.0" secret: # The secret that contains the environment variables to be used by the gateway, such as INFISICAL_API_URL and TOKEN