Commit Graph

9 Commits

Author SHA1 Message Date
taylanbakircioglu 46735c1894 fix: Implement consistent use-service handling across frontend and backend
- Add use-service skip to backend parser (consistent with frontend)
- Add use-service preservation to backend bulk import merge strategy
- Remove use-service merge from frontend PUT endpoint (allows user deletion)
- Ensures frontend/backend full consistency for use-service directives

Changes:
1. Backend parser now skips use-service directives during bulk import
2. Backend bulk import preserves manually-added use-service directives
3. Frontend PUT no longer prevents use-service deletion by users

Impact:
- Prevents loss of manually configured services during bulk imports
- Allows users to freely add/remove use-service directives via UI
- Frontend and Backend now have identical use-service handling logic

Related fixes:
- Bug 2: use-service deleted on bulk import (now preserved)
- Bug 3: use-service cannot be deleted via UI (now deletable)
2025-11-14 01:06:38 +03:00
taylanbakircioglu 4272dbb4ef feat: Add 'option httpchk' validation and auto-filtering across all layers
CRITICAL FIX: Prevent 'option httpchk' duplication in HAProxy config by implementing 3-layer validation:

1. BULK IMPORT PARSER:
   - Frontend: Filter out 'option httpchk' with warning (not applicable to frontends)
   - Backend: Already filtering 'option httpchk' (handled by health_check_uri field)

2. BACKEND API:
   - Backend create/update: Auto-filter 'option httpchk' from options field
   - Frontend create/update: Auto-filter 'option httpchk' from options field
   - Added filter_httpchk_from_options() helper function in both routers

3. FRONTEND UI:
   - Backend modal: Real-time warning when 'option httpchk' is typed
   - Frontend modal: Real-time warning when 'option httpchk' is typed
   - Warning messages guide users to use proper fields instead

Changes:
- backend/utils/haproxy_config_parser.py: Added httpchk filtering for frontend parsing
- backend/routers/backend.py: Added filter function + applied to create/update
- backend/routers/frontend.py: Added filter function + applied to create/update
- frontend/src/components/BackendServers.js: Added dynamic warning for httpchk
- frontend/src/components/FrontendManagement.js: Added dynamic warning for httpchk

User Experience:
 Bulk Import: Automatically filters httpchk, shows warning in preview
 Manual Entry: Shows real-time warning, auto-filters on save
 No Config Duplication: 'option httpchk' never appears twice in generated config

Impact: Users can safely paste or type 'option httpchk' without breaking HAProxy config. System automatically filters it and guides users to use the Health Check URI field instead.
2025-11-13 10:12:30 +03:00
taylanbakircioglu 0fc18fde38 feat: Add HAProxy options support for backends and frontends
Implemented comprehensive HAProxy options field support for both backend and frontend entities to enable standard HAProxy directives like 'option http-keep-alive', 'option httplog', 'option forwardfor', etc.

Changes:
- Database: Added 'options' TEXT column to backends and frontends tables
- Models: Added options field to BackendConfig, BackendConfigUpdate, and FrontendConfig
- API Endpoints: Updated CREATE, UPDATE, and GET endpoints to handle options field
  * Backend: CREATE/UPDATE/GET with options support
  * Frontend: CREATE/UPDATE/GET with options support (fixed 5 SELECT queries)
- Config Generator: Added options block generation for both backends and frontends
- Bulk Import Parser:
  * Added options field to ParsedBackend and ParsedFrontend dataclasses
  * Implemented option directive parsing with validation
  * Added unknown option warnings
  * Fixed bulk parse response to include options field
- Bulk Import Merge: Added options field comparison in UPDATE logic
- UI Components:
  * BackendServers.js: Added options TextArea form field
  * FrontendManagement.js: Added options TextArea form field

Features:
- Multi-line options support (newline-separated format)
- Option validation with known HAProxy options list
- Backward compatible (NULL options for existing entities)
- Bulk import support with merge strategy
- Full CRUD support for both manual and bulk operations

Technical Details:
- Format: Newline-separated TEXT field for multiple options
- Validation: Warns about unknown options but allows them
- Config Generation: Each option written as separate directive
- Agent: Standard HAProxy config validation applies

Total: 10 files modified, ~195 lines added, 26 integration points verified
2025-11-13 10:12:30 +03:00
taylanbakircioglu 22bbd17a0c Fix: Frontend SSL auto-matching - Parser + UI display
COMPLETE FRONTEND SSL AUTO-MATCHING FIX:

Two Critical Fixes:

1. Parser SSL Path Storage (haproxy_config_parser.py Line 267):
   Added: frontend.ssl_cert_path = cert_paths[0]

   Before:
     Extracted SSL paths but didn't store
     Bulk import had no path to extract name from

   After:
     Stores first cert path
     Bulk import can extract name and match

2. UI SSL Display (BulkConfigImport.js Line 188-209):
   Replaced static "No SSL (Bulk Import)" with dynamic display

   Shows:
     - SSL Enabled + Auto-matched (X cert) [Green]
     - SSL (No Match) [Orange]
     - No SSL [Gray]

Complete Flow Verified:
  1. Config: bind :443 ssl crt /etc/ssl/certs/demo-cert.pem
  2. Parser: ssl_cert_path stored ✓
  3. Bulk import: Extracts demo-cert ✓
  4. Matches: SSL Management has demo-cert SYNCED ✓
  5. Response: ssl_enabled=True, ssl_certificate_ids=[3] ✓
  6. UI Parse: Shows [SSL Enabled] Auto-matched ✓
  7. Create: INSERT with ssl_certificate_ids ✓
  8. Edit modal: SSL enabled + demo-cert selected ✓
  9. Apply: Config with SSL path generated ✓
  10. HAProxy: Validation PASS ✓

Both frontend and backend SSL auto-matching now complete!
2025-11-07 11:51:15 +03:00
taylanbakircioglu 09157e8be1 Fix: HAProxy validation failure - Change verify to none when ca-file removed
CRITICAL HAProxy Validation Fix:
Bulk import was creating configs that fail HAProxy validation

HAProxy Validation Error:
  server es1 ... ssl verify required
  ALERT: verify is enabled but no CA file specified

Root Cause:
  Original config: ssl verify required ca-file /path/cert.pem
  After parse: ssl verify required (ca-file removed)
  Result: HAProxy validation FAILS

HAProxy Requirement:
  verify required → MUST have ca-file
  verify none → Can work without ca-file
  ssl (no verify) → Uses default verification

Fix Applied (Line 677-704):
When parsing server with both verify AND ca-file:
  1. Detect: verify=required + ca-file exists
  2. Remove ca-file (as planned)
  3. Change verify to 'none' (NEW - prevents validation error)
  4. Warning: Explain user needs to reconfigure after import

Three Scenarios Handled:
  1. verify + ca-file → verify=none, remove ca-file, warn user
  2. verify only → keep verify as-is
  3. ca-file only → set verify=none, remove ca-file, warn user

Generated Config Now:
  Before: server es1 ... ssl verify required (FAILS validation)
  After: server es1 ... ssl verify none (PASSES validation)

User Workflow:
  1. Bulk import → Servers created with verify=none
  2. HAProxy validation → PASSES
  3. User edits server → Selects SSL cert → Sets verify=required
  4. Apply → Config generated with ca-file path
  5. HAProxy validation → PASSES (has ca-file)

Warning Message:
  'verify required' changed to 'none' to pass HAProxy validation
  After import, select SSL certificate and set verify to 'required'

Impact: Bulk import now creates HAProxy-valid configurations
2025-11-07 11:51:15 +03:00
taylanbakircioglu 86298b911f Hotfix: Fix list.strip() error in config parser validation
🐛 Critical Bug Fix:
- Fixed 'list' object has no attribute 'strip' error
- Error occurred in _validate_parsed_config() at line 847
- use_backend_rules is now a list, not a string

🔧 Technical Details:
- Changed from: frontend.use_backend_rules.strip()
- Changed to: bool(frontend.use_backend_rules)
- Simple boolean check works for both list and None types

 Impact:
- Bulk import parsing now works without errors
- Config validation properly handles list-based use_backend_rules
- All warning messages display correctly

Error was:
  'list' object has no attribute 'strip'
  at _validate_parsed_config line 847

Fix applied:
  Line 847-848: Use bool() instead of .strip() for list validation
2025-11-07 11:51:14 +03:00
taylanbakircioglu 1158e5f2b1 Fix: HAProxy validation - ACL and use_backend parsing improvements
🐛 Critical Bug Fixes:
- Fixed duplicate 'acl' prefix in generated config (was: 'acl acl Name ...')
- Fixed duplicate 'use_backend' prefix in generated config
- Added use_backend directive parsing from bulk import configs
- Fixed redirect_rules list handling (was causing .strip() error)

🔧 Parser Improvements:
- Added use_backend rules parsing (stored as list like ACL rules)
- Changed use_backend_rules field from str to list for consistency
- Parser now captures all use_backend directives with conditions

🎯 Config Generation Improvements:
- Smart prefix detection: only add 'acl' if not already present
- Smart prefix detection: only add 'use_backend' if not already present
- Support both legacy (string) and new (list) format for rules
- Proper JSON parsing with fallback to newline-separated format

 HAProxy Validation:
- Generated config now passes HAProxy validation (haproxy -c -f)
- ACL and use_backend directives in correct HAProxy format
- Routing rules properly linked with ACL conditions

Example parsed config:
  acl Elasticsearch hdr(host) -i baremetal-elastic.burgan.com.tr
  use_backend Elasticsearch if Elasticsearch

Tested with full config including multiple ACLs and routing rules.
2025-11-07 11:51:14 +03:00
taylanbakircioglu 704a0c0022 Fix: Bulk import parsing and entity status management improvements
🐛 Bug Fixes:
- Fixed http-response capture directive parsing with improved regex pattern
- Fixed ACL rules display in Frontend UI (array to multi-line string conversion)
- Added SSL certificate dropdown to Backend Server edit when ssl_enabled=true
- Fixed rejected entity config status remaining after apply operation

🔧 Improvements:
- Enhanced SSL ca-file detection with user-friendly warnings
- Apply operation now correctly updates both PENDING and REJECTED entities to APPLIED
- Added dynamic SSL certificate selection for backend servers with validation
- Improved bulk import warnings for SSL management workflow

📝 Technical Details:
- Parser: Enhanced capture pattern matching for flexible http-response directives
- UI: Added conditional SSL certificate select field in BackendServers component
- Backend: Updated apply cleanup to handle REJECTED status in addition to PENDING
- Frontend: Fixed ACL/redirect rules formatting for proper textarea display

 All changes tested and verified with scenario analysis
2025-11-07 11:51:14 +03:00
taylanbakircioglu 6aae0f4309 Initial commit 2025-10-27 12:14:03 +03:00