Commit Graph

320 Commits

Author SHA1 Message Date
Andrew Martinez 8c0bf8b885 fixes 1691 multiple er re-enrolls creates multiple enrollments
- ers do not support having multiple enrollments, detail returns 1
- re-enrolling now clears existing enrollments
- adds test to re-enroll twice
- encapsulates all er re-enrollment logic as a single atomic command
2024-01-25 15:09:30 -05:00
Mario Trangoni 126ee5d79c codespell: Add spelling check and fix all issues
Signed-off-by: Mario Trangoni <mjtrangoni@gmail.com>
2023-12-19 10:52:42 +01:00
Paul Lorenz 151c8973d1 Revert posture check optimization. Fixes #1642 2023-12-14 16:36:07 -05:00
Paul Lorenz 94d39c37b9 Don't scan for posture checks if there are 0 posture checks in the system. Fixes #1576 2023-12-11 16:33:49 -05:00
Paul Lorenz 9ddd1b941d Add service max idle time. Fixes #1496. Add decomission router support. Fixes #1402 2023-12-08 12:48:56 -05:00
Paul Lorenz a84369a6e9 Consolidate fabric and edge persistence code. Fixes #1555 2023-12-06 17:36:37 -05:00
Paul Lorenz f1846fbbe3 Fix transit router create. Ensure enrollment id is set. Fixes #1540 2023-11-29 15:17:24 -05:00
Paul Lorenz 9bed8a14a8 Add optional command rate limiter. Fixes #1445 2023-10-23 13:45:49 -04:00
Paul Lorenz f3d67b7f49 Update fabric imports 2023-09-28 23:34:28 -04:00
Paul Lorenz b12f1d33f5 Add CreateTerminatorV2 flow for edge terminators. Fixes #1619 2023-09-27 17:32:44 -04:00
Paul Lorenz 07da3cd513 Merge remote-tracking branch 'edge/main' into merge-edge
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
Paul Lorenz 74006eeb9d Don't update identity if it hasn't changed. Fix change attribution for edge client updates. Fixes #1610. Fixes #1611 2023-09-13 11:42:35 -04:00
Andrew Martinez a05e5a4e94 fixes #1607 remove "not before" enrollment attribute 2023-09-12 09:27:08 -04:00
Paul Lorenz 453e6cae2a Consolidate controller/apierror/helpers and messages 2023-08-30 17:16:10 -04:00
Paul Lorenz 5b59ae13ee Update for moved packages in fabric 2023-08-23 09:40:05 -04:00
Paul Lorenz 81baa1843b Add default identity type. Remove user,service,device types. Fixes #1428 2023-08-22 20:40:33 -04:00
Paul Lorenz 6426d55020 Add some warn logging on terminator instance id bind conflict 2023-08-09 10:56:46 -04:00
Paul Lorenz b061fe9a39 Move internal/certs to common. Remove some incidental files that weren't used. 2023-08-07 10:20:06 -04:00
Paul Lorenz 03b58ebcd3 Move jwtsigner package to controller 2023-08-04 17:04:44 -04:00
Paul Lorenz dba0fb6f7c Move protobufs to common 2023-08-04 17:01:15 -04:00
Paul Lorenz 8b3092a3d9 Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
Move eid to common
2023-08-04 16:35:26 -04:00
Paul Lorenz f368b631b0 Merge remote-tracking branch 'origin/main' into prep-for-ziti-merge-p1 2023-08-04 16:26:16 -04:00
Paul Lorenz 1f5eed5956 Move eid to common 2023-08-04 11:46:53 -04:00
Paul Lorenz 7d6f4ef700 Reorganize code in preparation for merging to ziti repo, first pass. 2023-08-04 09:48:06 -04:00
Andrew Martinez 414cff49d7 adds support OIDC authentication, api access, and ER connections 2023-07-20 09:41:12 -04:00
Paul Otto 1fed936746 Fix cert expire check logic error 2023-06-27 11:36:33 -06:00
Andrew Martinez 3325f91e76 fixes #1416 allows totp provisioning URL domain to be configured
- sets default to openziti.io (previously ziti.dev)
- adds edge.totp configuration section
2023-06-13 09:10:31 -04:00
Andrew Martinez 3116412857 adds missing error message for unmatched iss field 2023-05-10 10:36:33 -04:00
Andrew Martinez 661be7876d fixes openziti/ziti#1093
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
Andrew Martinez 95ae025ce9 updates golang sdk to v0.20.0 2023-04-26 13:55:51 -04:00
Paul Lorenz 7d6901be3d Add edge code needed for entity change events. Fixes #629 2023-04-25 22:34:02 -04:00
Paul Lorenz 70008bfc8f Update for fabric api changes. Fixes #1295 2023-04-25 13:26:25 -04:00
Paul Lorenz 43fc1e96fe Get tests running and do some cleanups 2023-04-25 13:26:19 -04:00
Paul Lorenz bd1b25f60c Update presentation layer for api changes 2023-04-25 13:26:03 -04:00
Paul Lorenz 63f9dad3df Updated model for storage api changes 2023-04-25 13:26:02 -04:00
Paul Lorenz 83bca6a0ba Update for storage and fabric api changes 2023-04-25 13:26:02 -04:00
Paul Lorenz 3c9e9ccbde Info -> Debug on xgress_edge_tunnel dial result 2023-04-17 12:02:54 -04:00
Paul Lorenz d8e50ba43e Make session edge-router check more efficient. Fixes #1418 2023-04-12 15:54:17 -04:00
Paul Lorenz ad5dc292bb Improve list performance by using identity indexes rather than service indexes. Fixes #1388 2023-04-03 09:58:21 -04:00
Paul Lorenz 1d0e558f90 Add support disabling routers. Fixes #1373 2023-03-28 13:42:25 -04:00
Andrew b7cd692102 Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
Andrew 6b8aa137e2 Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
Andrew Martinez f274fb30f8 merge check and create tx for MFA enrollment 2023-03-27 16:13:57 -04:00
Andrew Martinez 2a290612b0 fixes #1374 admins cannot delete multiple MFA enrollments 2023-03-27 15:31:49 -04:00
Paul Lorenz 0a6043bb42 Fix missing entity type id on transit router. Fixes #1369 2023-03-23 23:47:54 -04:00
Paul Lorenz d76b9bc272 Cache api sessions for router/tunneler. Fixes #1364 2023-03-23 10:22:46 -04:00
Paul Lorenz 34cc021b3e Make session creates idempotent. Fixes #1359 2023-03-23 09:50:05 -04:00
Andrew Martinez e192f271ba remove old "sessionCert" (not ApiSessionCert) bit rot 2023-03-20 18:04:21 -04:00
Andrew Martinez 6f7945a9bf fix test build error 2023-03-17 10:51:43 -04:00
Andrew Martinez fed450d75f update jwks processing 2023-03-13 13:29:41 -04:00