Commit Graph

34 Commits

Author SHA1 Message Date
Paul Lorenz f2670e66a0 Make policy semantic required for POST/PUT. Fix evaluation on policy PUT if semantic not provided 2021-07-30 09:44:21 -04:00
Andrew Martinez b562fb5c07 splits API specs into composible modules
- splits Open API 2.0 (swagger) into client/management APIs
- uses go-swaggers flatten capabilities
- uses newer version of go-swagger (v0.27.0)
- introduces /edge/client/v1, /edge/management/v1
- non-prefixed URLs default to /edge/client/v1
- splits some shared management/client API handlers
- renames some REST models to "client" instead of "limited"
- passes all apitests, fails dataflow upd test (main fails this as well)
- updates generate rest script for powershell
- todo: test generate rest script for bash
- todo: use xweb (different branch)
2021-05-04 11:30:32 -04:00
Andrew Martinez 98101fa3a2 fix base posture check entity in apitests
- wasn't setting id on pointer receiver
2021-04-20 10:34:36 -04:00
Andrew Martinez 54af8801e7 adds posture check type PROCESS_MULTI
- adds a new posture check for dealing with multiple processes
- supports anyOf and allOf semantics
- does not require new posture responses, current process responses
  suffice
- tests
2021-04-20 08:52:23 -04:00
Paul Lorenz 5a2e7d1f92 Separate dataflow tests into separate build tag 2021-04-14 16:57:24 -04:00
Paul Lorenz 8f6234842e Add per-service identity hosting precedence/costs 2021-04-06 09:51:22 -04:00
Paul Lorenz 680852f80e Allow tunnel to run over xgress directly 2021-03-22 14:33:54 -04:00
Paul Lorenz 8a160d93b1 Fix update terminator. Add test for terminator updates. Remove unused store_events 2021-02-26 09:04:32 -05:00
Paul Lorenz ced4df53c3 Use copy-on-write muxer. Use no-op sequencer. Fix AT bug related to dots in generated ids. (#438)
* Fix intermittent AT failure. Use noop sequencer

* Use copy-on-write msg mux impl

* Try with non-zero queue depth
2020-11-30 19:08:01 -05:00
Andrew Martinez ac187ffa99 posture check implementation
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
Andrew Martinez 568eb129c7 address PR comments
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
Paul Lorenz 50bc204dd5 Add edge terminator validator 2020-09-29 09:27:05 -04:00
Andrew M 0817b9b6c5 Merge branch 'master' into use.shortids 2020-06-17 13:49:20 -04:00
Andrew M 6571dbd72c use shortids 2020-06-16 17:33:45 -04:00
Paul Lorenz c5d08014b5 Update rolling tests 2020-06-15 15:51:23 -04:00
Andrew M 3087972172 all conversion work
- remove old JSON schema, unsused code
- remove unused variables from base router functions
- rework all API entities
- rework all links
- fix lint issues
- adds error conversion logic
- update tests as needed
- fix up go test
- fix backwards compat w/ non json enroller
2020-06-09 14:11:23 -04:00
Andrew M e8b10600c4 fixes #147, identity naming durin auto enrollment
- allows CAs to specify a naming format for auto ca identities
- name collisions during auto enrollment now adds a six digit
  incrementing number
2020-05-20 13:00:54 -04:00
Andrew Martinez 214c25a628 adds transit router enrollment and CRUD, resolves #27
- allows fabric routers to  be created in an unenrolled state
- allows fabric routers to be CRUD
- converts both edge and transit routers to use the same enrollment
facilities as identities (1st step to merge)
- migrations for enrollment changes
- adds ability to extend a base store
- add external cleanup logic to tx router to handle isbase=true
- use router handler for is connected status
2020-04-01 10:10:34 -04:00
Andrew d16ebf8e69 Merge pull request #105 from netfoundry/ca.auto.identity.attributes
Auto Provision Identity Attributes From CA
2020-03-26 10:34:34 -04:00
Andrew Martinez 0ee7389715 adds roles to CA identities, fixes #85
- CAs now support 'identityRoles'
- Identities that auto enroll are assigned the 'identityRoles' from the
validating CA
2020-03-23 23:52:40 -04:00
Paul Lorenz 459a571b72 Add data flow AT 2020-03-20 16:31:50 -04:00
Paul Lorenz 7d60e03b65 Remove copyright date from header 2020-03-19 13:47:42 -04:00
Paul Lorenz f0257f6ccf Support for multiple endpoints 2020-03-19 13:31:31 -04:00
dovholuknf 3db81622cb didn't i do this once already? 2020-02-25 14:29:08 -05:00
Andrew Martinez 8f64d859c2 add password for self service password, fixes #87
- moves logic from REST endpoint def to handlers
- moves to version 0.10
2020-02-25 10:31:58 -05:00
Paul Lorenz 95a7064549 Extract service edge router policies into standalone entity. Fixes GH-69 2020-02-03 12:14:33 -05:00
Paul Lorenz d0f18a3a5b Allow overriding service configurations per identity (#68)
Allow overriding service configurations per identity. Fixes GH-31
2020-02-03 12:10:08 -05:00
Paul Lorenz 9adf93dc57 Enable schema validation for configs. Fixes GH-62 (#63)
* Enable schema validation for configs. Fixes GH-62
2020-01-28 15:02:20 -05:00
Paul Lorenz d1bdaae857 Move tunneler configuration into config entities (#61)
* Move tunneler configuration into config entities. Fixes GH-46
2020-01-24 09:09:09 -05:00
Paul Lorenz d93b6d5da2 Allow anyOf semantics in addition to allOf for policies. Fixes GH-41 2020-01-22 14:02:39 -05:00
Paul Lorenz d0b4b9047f Allow linking configurations to services. Fixes GH-30 2020-01-22 14:01:09 -05:00
Paul Lorenz fb8be70394 Implement config store. Fixes GH-17 (#37)
* Implement config store. Fixes GH-17

* Fix PATCH. Allow null tags on patch and add config patch test
2020-01-13 10:55:07 -05:00
Paul Lorenz 55eaa157b9 GH-16 Enable service policies replacing appwans (#28)
* GH-16 Enable service policies replacing appwans
2020-01-08 15:08:58 -05:00
Andrew Martinez c8e2729f05 GH-18 removes ziti-edge/edge folder and moves all contents up 1 row
- Updates .gitignore files
- Fixes imports
2019-12-18 10:02:25 -05:00