Commit Graph

138 Commits

Author SHA1 Message Date
Paul Lorenz e1e31c2ecb Fix edge-router association lists 2021-01-23 14:54:03 -05:00
Andrew 8d4397c0d9 Merge pull request #474 from openziti/fix.misspelled.builddate
fixes buildDate spelling (missing d)
2021-01-20 10:44:57 -05:00
Paul Lorenz f5dc8e5799 Fix return status 2021-01-20 10:12:39 -05:00
Paul Lorenz 4882da1970 Add service list timer. Fix tunneler leak 2021-01-20 09:29:33 -05:00
Paul Lorenz 744fa99b8a Add check integrity guardrails so we can only run a single operation at a time 2021-01-19 16:18:10 -05:00
Andrew Martinez 4fbacdcdc8 fixes buildDate spelling (missing d) 2021-01-19 14:00:50 -05:00
Andrew Martinez 65be49c609 Add appId and appVersion to sdkInfo 2021-01-18 10:38:43 -05:00
Paul Lorenz c370dff45c Notify clients to refresh after restart 2021-01-15 16:20:13 -05:00
Paul Lorenz 803eb5d5d6 Move service policy enforcer to use service events 2021-01-15 15:28:59 -05:00
Paul Lorenz 2194d8a2e2 Implement service change notifications 2021-01-15 15:28:59 -05:00
Andrew Martinez 807a061a93 adds expiration-seconds and expires-at headers
- also adds expiresSeconds to current api session and login
2021-01-14 11:30:44 -05:00
Andrew Martinez cf66c361f9 adds service updates endpoint stub 2021-01-13 13:49:06 -05:00
Andrew Martinez 014b0f3876 fixes REST API enrollment details 2021-01-12 17:35:45 -05:00
Paul Lorenz 5efbbf0942 Add health check implementation for tunnelers and add default hosting precedence and cost to identity 2021-01-12 11:00:43 -05:00
Andrew Martinez a3789c063a adds support of API Session Certificates
- adds ability for any authenticated API Session to create ephemeral
 certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
  controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Paul Lorenz 4498318767 Make query parse errors into ApiErrors so they're not 500 errors (#443) 2020-12-16 11:30:51 -05:00
Paul Lorenz 7329106691 Use manual start for tunnel hosting 2020-12-16 11:08:06 -05:00
Andrew Martinez 5c70087d98 adds GET /protocols to the Edge Rest API 2020-11-20 17:52:05 -05:00
Andrew Martinez f5e0e1f25e fixes #424 allow non-admins to list service terminators 2020-11-20 09:46:44 -05:00
Andrew Martinez 6ad6b3264c fixes #403
Process posture responses now allow an array of digital signer
fingerprints to be submitted and checked.
2020-11-11 21:31:17 -05:00
Andrew Martinez e0cf6a7ea5 fixes #397 and fixes #398
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
Andrew 53f702c212 Merge pull request #369 from openziti/add.online.status
Add.online.status
2020-10-31 08:35:39 -04:00
Andrew Martinez 394a844878 fixes for mop/sdks
- case insensitive checks for domain/os
- no minimum mac addresses on posture responses
2020-10-30 14:13:43 -04:00
Andrew Martinez ac187ffa99 posture check implementation
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
Andrew Martinez c726f158d6 fixes #365 adds hasApiSession and hasEdgeRouterConnection 2020-10-20 15:00:22 -04:00
Andrew 129bff6d8f Merge pull request #348 from openziti/terminator.binding.required
make binding required on terminators
2020-10-14 14:43:42 -04:00
Shawn Carey 73dc0f3b0b Narrow json types for list items (#346)
* Narrow json types for list items
2020-10-14 11:17:55 -04:00
Andrew Martinez 9216db9b0a make binding required 2020-10-14 10:42:36 -04:00
Andrew 0fb231ca2d Merge pull request #344 from openziti/add.posture.check.api.logic
adds Edge API posture check logic
2020-10-13 17:23:47 -04:00
Andrew Martinez 568eb129c7 address PR comments
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
Paul Lorenz 8981128ee1 Fix slice allocation to set capacity not length (#345) 2020-10-13 14:07:24 -04:00
Andrew Martinez 5e834504ec adds Edge API routing
- adds mocked posture data for identities
- refines OS
- adds migrations for posture check types
2020-10-13 08:20:57 -04:00
Andrew Martinez f0fec7512c swgger fixes 2020-10-13 08:08:12 -04:00
Andrew Martinez 4fc4aee36c swagger def for posture checks and types
- polymorphic posture checks with copied base entity properties
- go-swagger 0.25 generated api
2020-10-12 07:37:19 -04:00
Andrew Martinez 94bb1b25b6 edge api version support 2020-10-07 07:25:14 -04:00
Andrew Martinez 3bbff3a01a support version info from fabric 2020-10-07 07:25:14 -04:00
Andrew Martinez 297d8aa9f0 remove -v from vet, fix format 2020-10-05 07:18:39 -04:00
Andrew Martinez b222789350 fixes #326 nested tx for session timeouts 2020-10-05 06:58:44 -04:00
Andrew Martinez 24e7375a58 fix formatting lint error 2020-10-02 16:09:14 -04:00
Andrew Martinez b23bf3efd8 fix #321 add policy display fields for reads
- adds *Display fields for policy list and detail
- adds *Display fields for both set of policy attributes
- adds API tests
2020-10-01 08:09:46 -04:00
Paul Lorenz 50c6b3e4b3 Support identity dial/bind 2020-09-29 09:27:03 -04:00
Andrew Martinez 6814db98c1 adds public ip address for #226 2020-09-09 10:42:20 -04:00
Paul Lorenz 734e9a5542 Fix service policy migration. Update for terminator precendence changes. Log panic stacks. Fixes GH-291 2020-09-03 10:22:27 -04:00
Andrew Martinez f92b88e395 Merge branch 'master' into stream.sessions.276 2020-08-24 08:40:29 -04:00
Andrew M faec4b95ba various fixes for API streaming and data net support
- http requests should hard timeout w/ a reasonable response
- edge routers should close when an API session token is not provided or
  does not match
- stream both types of sessions on edge router connect
- stream sessions for time out processing/deletion
- add id to session messages (edge control pb update, breaks backwards
  compat)
2020-08-24 08:31:45 -04:00
Paul Lorenz c179f87538 Improve session create performance. Closes GH-281 2020-08-20 12:35:04 -04:00
Andrew M ada72b335b Merge branch 'master' into e2e.router.termination 2020-07-31 09:50:09 -04:00
Paul Lorenz bb3ca676e8 Address review comments 2020-07-28 10:14:23 -04:00
Paul Lorenz 951c80b8d0 Integrate data integrity check/repair framework and add REST API. Fixes GH-258 2020-07-28 10:05:46 -04:00
Andrew M e39c21b6a1 e2e support fixes #173
- adds edge level edge_transport xgress
- adds service encyrptionRequired flag (rest API, protobuffs)
- adds edge router encryption checks
2020-07-27 16:18:46 -04:00