Paul Lorenz
a84369a6e9
Consolidate fabric and edge persistence code. Fixes #1555
2023-12-06 17:36:37 -05:00
Paul Lorenz
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
Paul Lorenz
07da3cd513
Merge remote-tracking branch 'edge/main' into merge-edge
...
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
Paul Lorenz
81baa1843b
Add default identity type. Remove user,service,device types. Fixes #1428
2023-08-22 20:40:33 -04:00
Paul Lorenz
b061fe9a39
Move internal/certs to common. Remove some incidental files that weren't used.
2023-08-07 10:20:06 -04:00
Paul Lorenz
03b58ebcd3
Move jwtsigner package to controller
2023-08-04 17:04:44 -04:00
Paul Lorenz
8b3092a3d9
Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
...
Move eid to common
2023-08-04 16:35:26 -04:00
Paul Lorenz
1f5eed5956
Move eid to common
2023-08-04 11:46:53 -04:00
Andrew Martinez
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
Paul Lorenz
7d6901be3d
Add edge code needed for entity change events. Fixes #629
2023-04-25 22:34:02 -04:00
Paul Lorenz
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
Paul Lorenz
d76b9bc272
Cache api sessions for router/tunneler. Fixes #1364
2023-03-23 10:22:46 -04:00
Paul Lorenz
34cc021b3e
Make session creates idempotent. Fixes #1359
2023-03-23 09:50:05 -04:00
Paul Lorenz
90e7b0f0a6
Fill in client cert chains when enrolling
2022-11-11 14:30:55 -05:00
Paul Lorenz
0b8a65207a
Change bootstrap check. Add hooks for isRaftEnabled
2022-08-22 12:14:40 -04:00
Paul Lorenz
2e578ab784
Update identities to use raft commands. Fixes #1131
2022-08-09 14:58:23 -04:00
Paul Lorenz
d3a4c7d0ac
Update edge routers to use raft commands. Fixes #1107
2022-08-04 10:43:21 -04:00
Paul Lorenz
d068397cd0
Rename controller model handler types to manager. Fixes #1124
2022-08-01 14:00:01 -04:00
Paul Lorenz
cb0a634414
Update edge services to use raft commands. Fixes #1118
2022-07-29 15:56:09 -04:00
Paul Lorenz
d0ed5aa00e
Update service edge router policies to use raft commands. Fixes #1110
2022-07-28 18:31:19 -04:00
Paul Lorenz
e198f16c3d
Convert edge router policies to raft commands. Fixes #1108
2022-07-28 18:30:26 -04:00
Paul Lorenz
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
Paul Lorenz
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
Paul Lorenz
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
Paul Lorenz
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
Andrew Martinez
1f784d89ce
adds asynchronous eventer to controller
...
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00
Paul Lorenz
2d4260e76e
Allow using a specific bolt db file for tests
2021-10-26 14:19:24 -04:00
Paul Lorenz
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
Paul Lorenz
7cb0b12d5c
Update for JWT lib changes
2021-07-30 10:04:45 -04:00
Paul Lorenz
f2670e66a0
Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided
2021-07-30 09:44:21 -04:00
Andrew Martinez
47499bc4f1
add mfa options
...
- allow timeouts for MFA posture checks
- allow wake/unlocked MFA options
- allow legacy toggle for SDKs that don't supply endpoint state
- supply timeouts on posture checks
- posture data now caches session state
2021-07-07 08:39:39 -04:00
Andrew Martinez
177379aa8e
fix durations w/ no units
2021-06-03 08:52:24 -04:00
Andrew Martinez
6625084569
use xweb for Edge Client and Management APIs
...
- use xweb for run
- use xweb for api tests
- use time.ParseDuration for edge configuration
- use CORS defaults in Client/Management API handlers
2021-05-06 16:45:48 -04:00
Andrew Martinez
1100d6f388
update service update on posture data change, tests
2021-03-23 09:54:47 -04:00
Andrew Martinez
623681db87
add lastActivityAt
...
- as updates to API Sessions can now happen later than the last time
they were active, updatedAt is no longer the correct representation of
the last activity an API Session had
- move all logic that used updatedAt to lastActivityAt
- add migration to set lastActivityAt
2021-03-17 13:49:12 -04:00
Andrew Martinez
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Paul Lorenz
c179f87538
Improve session create performance. Closes GH-281
2020-08-20 12:35:04 -04:00
Andrew M
6571dbd72c
use shortids
2020-06-16 17:33:45 -04:00
Andrew M
b6d9efaf8c
fixed #183 , move to openziti
2020-05-26 17:37:35 -04:00
Paul Lorenz
1895415ea7
Move FieldError to foundation. Adapt to fabric API changes. Several terminator/transit router fixes
2020-04-24 10:04:36 -04:00
Paul Lorenz
7d60e03b65
Remove copyright date from header
2020-03-19 13:47:42 -04:00
Paul Lorenz
f0257f6ccf
Support for multiple endpoints
2020-03-19 13:31:31 -04:00
dovholuknf
3db81622cb
didn't i do this once already?
2020-02-25 14:29:08 -05:00
Paul Lorenz
95a7064549
Extract service edge router policies into standalone entity. Fixes GH-69
2020-02-03 12:14:33 -05:00
Paul Lorenz
d1bdaae857
Move tunneler configuration into config entities ( #61 )
...
* Move tunneler configuration into config entities. Fixes GH-46
2020-01-24 09:09:09 -05:00
Paul Lorenz
fb8be70394
Implement config store. Fixes GH-17 ( #37 )
...
* Implement config store. Fixes GH-17
* Fix PATCH. Allow null tags on patch and add config patch test
2020-01-13 10:55:07 -05:00
Paul Lorenz
6a770dcde9
Fix edge router roles check. services with role attributes were getting empty edge router lists
2020-01-09 15:16:07 -05:00
Paul Lorenz
c10c3ad781
Remove Handle prefix from handler methods. Remove breaking changes docs, which are moving to ziti-cmd
2020-01-09 13:14:50 -05:00
Andrew Martinez
c8e2729f05
GH-18 removes ziti-edge/edge folder and moves all contents up 1 row
...
- Updates .gitignore files
- Fixes imports
2019-12-18 10:02:25 -05:00