Andrew Martinez
09b60f3ed8
Debugf to Infof
2021-06-04 12:30:27 -04:00
Andrew Martinez
a6e0f4e807
revert defensive logic
2021-06-04 12:24:57 -04:00
Andrew
0d9f609bab
Merge pull request #677 from openziti/fix.controller.config.enrollment.defaults
...
fix durations w/ no units
2021-06-03 11:06:17 -04:00
Andrew Martinez
127de19ce1
remove re-Start() and re-Stop() capabilities
2021-06-03 10:36:49 -04:00
Andrew Martinez
177379aa8e
fix durations w/ no units
2021-06-03 08:52:24 -04:00
Andrew Martinez
087c51dd74
fixes rtx double stop panic
...
- stopping status was being reset causing subsequent stops to panic
- remove stopping atomic bool
- change router disconnect logging from debug to info
2021-06-01 14:00:22 -04:00
Andrew Martinez
93bfce03c2
remove go routine and simply close
2021-05-25 18:19:19 -04:00
Andrew Martinez
5a5fefa092
fixes deadlocks when a router disconnects mid sync or update
...
- range() of rtx'ers no longer locks, snapshots then loops
- rtx.Send() now checks for stopped/disconnected
- rtx.Send() now respects closeNotify
2021-05-25 16:23:20 -04:00
Paul Lorenz
e180d2fa7b
Fix updating terminators when cost is omitted
2021-05-20 11:11:25 -04:00
Paul Lorenz
3f3c1318c7
Merge pull request #665 from openziti/fix-app-data-updates
...
Add appData to filtered jsonfields. Remove unused identity checker field
2021-05-19 13:37:58 -04:00
Paul Lorenz
9af29b5072
Add appData to filtered jsonfields. Remove unused identity checker field
2021-05-18 21:08:19 -04:00
Andrew Martinez
603fdbd772
set base posture check properties for process multi
2021-05-18 14:39:57 -04:00
Andrew Martinez
6ee4f6a8a5
rework CaPems for ca store calculations
2021-05-11 14:18:08 -04:00
Andrew Martinez
74c9611996
add back reading the root identity
2021-05-11 11:16:21 -04:00
Andrew Martinez
cc1574fdc9
update /version endpoint
...
- now reports all versions, api bindings, and api bind points from xweb
- now reports api base urls (http://<bindpoint>/<api path>
- now points 'edge' to 'edge-client' api binding
2021-05-07 10:46:24 -04:00
Andrew Martinez
6625084569
use xweb for Edge Client and Management APIs
...
- use xweb for run
- use xweb for api tests
- use time.ParseDuration for edge configuration
- use CORS defaults in Client/Management API handlers
2021-05-06 16:45:48 -04:00
Paul Lorenz
18c513034b
Ensure routers get full service list, not just first 10
2021-05-06 10:51:30 -04:00
Andrew Martinez
b562fb5c07
splits API specs into composible modules
...
- splits Open API 2.0 (swagger) into client/management APIs
- uses go-swaggers flatten capabilities
- uses newer version of go-swagger (v0.27.0)
- introduces /edge/client/v1, /edge/management/v1
- non-prefixed URLs default to /edge/client/v1
- splits some shared management/client API handlers
- renames some REST models to "client" instead of "limited"
- passes all apitests, fails dataflow upd test (main fails this as well)
- updates generate rest script for powershell
- todo: test generate rest script for bash
- todo: use xweb (different branch)
2021-05-04 11:30:32 -04:00
Paul Lorenz
5fe0091db7
Need to set id on new terminator
2021-04-30 09:21:05 -04:00
Paul Lorenz
57da48f142
Move terminator validation from xtv to control channel handler
2021-04-29 13:46:54 -04:00
Andrew Martinez
1919b6b5a4
Merge branch 'main' into posture.multi.process
2021-04-28 11:08:28 -04:00
Andrew Martinez
41ff14688d
add PROCESS_MULTI to posture check types
2021-04-28 11:02:55 -04:00
Paul Lorenz
d313d39a80
When empty router name specified, return 4xx error instead of 5xx error
2021-04-23 14:18:40 -04:00
Shawn Carey
deef2bba6a
Fix issues with host.v1 config type schema ( #640 )
...
- require "low", "high" properties in portRange
- fixed allowedAddresses item type in json schema docs
2021-04-23 09:39:29 -04:00
Andrew Martinez
54af8801e7
adds posture check type PROCESS_MULTI
...
- adds a new posture check for dealing with multiple processes
- supports anyOf and allOf semantics
- does not require new posture responses, current process responses
suffice
- tests
2021-04-20 08:52:23 -04:00
Paul Lorenz
2a2e380cb7
Add error code reporting to control channel requests
2021-04-19 14:22:07 -04:00
Paul Lorenz
503e320b58
Fix file name
2021-04-14 16:10:22 -04:00
Paul Lorenz
fa56d0f487
Add test for cursor on-delete issue
2021-04-14 16:10:21 -04:00
Andrew Martinez
4a9b226f0e
adds the ability for router to extend their enrollment
...
- routers can now opt to extend their enrollment at any time with a
previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
Andrew Martinez
b278f611d0
add policyType to posture query sets
...
- also fixes policy ids being set as the same value due to pointer in
for loop reference
2021-04-13 15:26:17 -04:00
Shawn Carey
0c281d998b
corrected definitions in host.v1
2021-04-13 08:01:12 -04:00
Shawn Carey
2110aba5c1
host.v1 configuration type schema changes ( #631 )
...
- Rename host.v1 dialIntercepted* properties to forward*
- Add allowed* properties to whitelist destinations that are dialed via forward*
- Add allowedSourceAddresses, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service
2021-04-13 07:48:47 -04:00
Paul Lorenz
34c91e480c
Propagate router renames to fabric. Lookup identity by id, not name
2021-04-08 12:52:21 -04:00
Paul Lorenz
b493cce490
Add app data to identity and edge router. Add isSystem to ERP
2021-04-06 10:07:57 -04:00
Paul Lorenz
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
Paul Lorenz
39626472e3
Support for intercept.v1 config type ( #618 )
...
* Support for intercept.v1 config type
2021-04-05 11:52:12 -04:00
Paul Lorenz
0731731bba
Set LastActivityAt on api sessions when creating them for router/tunnelers
2021-03-25 16:18:21 -04:00
Paul Lorenz
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
Andrew
81f2847633
Merge pull request #607 from openziti/empty.posture.fix
...
Empty Posture Fix & Minor Fixes
2021-03-24 15:23:25 -04:00
Andrew
a48bef714a
Merge pull request #606 from openziti/unify.api.session.modeling
...
unify api session modeling
2021-03-24 14:14:01 -04:00
Andrew Martinez
27a361f776
check nil cursors for policy iteration
2021-03-24 14:06:09 -04:00
Andrew Martinez
3014bdc405
new tests, don't prune policies w/ no checks
2021-03-24 14:06:09 -04:00
Andrew Martinez
a753022e37
unify api session modeling
2021-03-24 13:51:26 -04:00
Andrew Martinez
f41cb21e3f
Merge branch 'main' into check.enabled.on.shutdown
2021-03-24 08:24:55 -04:00
Andrew Martinez
170f318a66
check if enabled before trying to clean up
2021-03-23 15:07:33 -04:00
Andrew Martinez
1100d6f388
update service update on posture data change, tests
2021-03-23 09:54:47 -04:00
Andrew Martinez
993f51f7ab
set mfa posture on enroll
...
- update api session session state on mfa enroll
- update posture data state on mfa enroll
- centralize setting mfa posture data
- pass isMfaRequired and isMfaComplete in apiSession/currentApiSession
2021-03-23 09:54:46 -04:00
Paul Lorenz
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
Andrew
6383728aa0
Merge pull request #596 from openziti/move.service.request.failure.url
...
moves posture-data/failed-service-requests
2021-03-19 10:56:49 -04:00
Paul Lorenz
8f02a817af
Merge pull request #595 from openziti/remove-old-db-migrations
...
Remove migration data for versions prior to 0.17.1
2021-03-19 10:51:53 -04:00