2d55b5cc28
Don't delete sessions on failed terminator create
2023-03-23 09:51:14 -04:00
34cc021b3e
Make session creates idempotent. Fixes #1359
2023-03-23 09:50:05 -04:00
431df859b2
Handle duplicate tunnel terminator creation gracefully. Fixes #1355
2023-03-21 23:05:07 -04:00
e192f271ba
remove old "sessionCert" (not ApiSessionCert) bit rot
2023-03-20 18:04:21 -04:00
2f51b4acd7
reworks broker/sync connect/disconnect logic
...
- defensive checks for closed control channels
- defensive checks for duplicate/mismatch control channels
2023-03-20 15:28:09 -04:00
64d34d78dd
Merge pull request #1343 from openziti/update-fabric-dep
...
Update edge test for fabric api update
2023-03-20 09:50:54 -04:00
b09af68d09
Update edge test for fabric api update. Remove unneeded cgo import.
2023-03-17 11:55:38 -04:00
6f7945a9bf
fix test build error
2023-03-17 10:51:43 -04:00
fed450d75f
update jwks processing
2023-03-13 13:29:41 -04:00
52ed07405c
fix lint errors
2023-02-22 19:43:45 -05:00
a4caf933f6
fixes #1310 optional KID causes controller crash
2023-02-22 15:12:07 -05:00
e5f8d5ab60
Move heartbeat status map update outside bolt tx. Fixed #1303
2023-02-07 13:24:30 -05:00
5c35faafa3
Fix heartbeat deadlock. Fixes #1303
...
bbolt batch was trying to finish commit, needed all txes to finish
heartbeat update in read tx was waiting for concurrent status map so it could update
heartbeat status map was locked iterating waiting to submit to batch
(now we're back at the beginning)
Was also a view tx within a view tx, which can be problematic
2023-02-06 11:53:15 -05:00
a46a10d9eb
use new github.com/openziti/edge-api repository
...
- fixes import statements
2023-01-24 16:03:20 -05:00
69c31fcf3e
uses github.com/openziti/edge-api
...
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
6b6eed6041
Improve some tunneler log messages
2023-01-06 13:54:49 -05:00
7152476ced
Require config types to have a root type of object. Fixes #1279
2022-12-29 11:39:56 -05:00
56c6857590
Mark xgress_edge and xgress_edge_tunnel terminators as system entities. Fixes #1272
2022-12-16 14:04:10 -05:00
4abeaa0c0a
xgress_edge_tunnel create terminator perf improvements. Fixes #1270
...
* Make terminator creation asynchronous
* Make terminator creation idempotent
* Improve logging
* Add some timer logging and metrics.
* controller and router will both log their respective views of how long the terminator create took
* the router has a new xgress_edge_tunnel.terminator.create_time timer metric
2022-12-15 17:29:29 -05:00
c0c7b1907e
Fix eventual eventer processing on restart. Fixes #1268
2022-12-14 17:20:52 -05:00
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
fe93c5fac6
Fix panic when improperly parsing protocol ports from ER hello. Fixes #1253
2022-11-22 11:46:27 -05:00
8563490cd8
Fix identity links. Fixes #1233 . Fixes #1234
2022-11-16 16:15:12 -05:00
185a767842
Fix links factory on identity type. Fixes #1232
2022-11-16 16:13:31 -05:00
d022405ea8
Merge pull request #1235 from openziti/fill-in-client-cert-chains
...
Fill in client cert chains when enrolling
2022-11-11 16:09:18 -05:00
90e7b0f0a6
Fill in client cert chains when enrolling
2022-11-11 14:30:55 -05:00
d73c72679d
for #1213 delete api session on authenticator delete/re-enroll
...
- an authenticator removed or re-enrolled would continue to allow old
API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
Sessions
2022-11-09 11:44:49 -05:00
3e4f26ee78
updates edge service manager to not allow encryptionRequired to be
...
altered
2022-11-07 11:42:01 -05:00
5dc8a66fe9
addresses #1226 api session certificate issues w/ 3rd party cas
...
- events during a multi-step transaction were immediately emitting events
causing out of order and incomplete events to be received,
specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
30c051889a
Make error messages clearer
2022-10-25 19:02:33 -04:00
f2a2520317
Ensure disconnect handling applies to right router instance. Fixes #1217
2022-10-24 15:51:39 -04:00
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
ad8392cef4
Update deps
2022-10-10 16:56:50 -04:00
38746d39cf
Merge pull request #1188 from openziti/router-multi-ctrls
...
Support multiple routers in router edge extensions
2022-09-30 09:49:24 -04:00
63e0d9663e
Support multiple routers in router edge extensions
2022-09-30 09:34:04 -04:00
c117984c9b
Merge pull request #1190 from openziti/fix-api-session-create-race
...
Fix race condition creating api sessions from embedded tunneler. Fixe…
2022-09-29 12:29:50 -04:00
f802603d9f
fixes openziti/ziti#853
...
- fix nil 0 index x509 definition created
- updates x509-claims to v1.0.3 to fix x509 claim panics
2022-09-29 10:20:46 -04:00
d205944051
Fix race condition creating api sessions from embedded tunneler. Fixes #1189
2022-09-29 10:01:47 -04:00
b7f81ea7cb
Fix issue where lookup is expected to return err, but returns nil, causing nil reference and panic. Fixes #1186
2022-09-27 09:52:53 -04:00
32c197e5e1
Update to channel v2
2022-09-26 18:20:00 -04:00
291eb6b509
fixes nil deref on partial jwks info
2022-09-22 09:36:46 -04:00
db5c73b33b
Refactor edge events to follow model established in fabric
2022-09-16 12:47:46 -04:00
1f71f952d7
Update to usage v3
2022-09-16 12:41:36 -04:00
60fc51253d
fixes #1176 patching externalIdClaim on CA
2022-09-15 11:18:41 -04:00
3a265ca32f
Fix patching tags on services and transit routers. Fixes #1174
2022-09-15 09:40:12 -04:00
ece5eae675
Allow searching by configs. Fixes #1154
2022-09-14 23:36:14 -04:00
e4d2a30399
Fix service policy patch when type isn't provided. Fixes #1169
2022-09-06 23:21:40 -04:00
0b8a65207a
Change bootstrap check. Add hooks for isRaftEnabled
2022-08-22 12:14:40 -04:00
0d1dfb9779
Fixes for raft command encoding and decoding
2022-08-18 12:22:30 -04:00
a3b31eb5ed
Convert posture checks to use raft commands. Fixes #1125
2022-08-09 21:54:53 -04:00
Paul Lorenz