891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
c5d3a4b69b
Improve posture check perf using indexes
2021-01-18 14:15:30 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
4f5dfd93cc
Support router provided connection ids
2020-12-15 17:35:43 -05:00
73383f0992
Update for fabric API changes ( #442 )
2020-12-07 15:02:00 -05:00
ced4df53c3
Use copy-on-write muxer. Use no-op sequencer. Fix AT bug related to dots in generated ids. ( #438 )
...
* Fix intermittent AT failure. Use noop sequencer
* Use copy-on-write msg mux impl
* Try with non-zero queue depth
2020-11-30 19:08:01 -05:00
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
6126f179ad
fix tests
2020-10-21 22:28:50 -04:00
d3bb89a5b0
pass select edge headers through fabric
...
implement passing edge flags
add test for edge.Conn.CloseWrite()
use CloseWrite() on proxied connections
2020-10-20 11:33:11 -04:00
568eb129c7
address PR comments
...
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
c53843c08d
Update go-events to latest version ( #332 )
2020-10-09 12:37:20 -04:00
41da009787
remove the last of the things named gateway
2020-10-08 07:53:17 -04:00
94bb1b25b6
edge api version support
2020-10-07 07:25:14 -04:00
3bbff3a01a
support version info from fabric
2020-10-07 07:25:14 -04:00
76823ff435
add ZITI_TEST_LOG_LEVEL, set to fatal for travis, remove prints
2020-10-02 15:43:49 -04:00
f4ee38772d
set log level for API tests to error
...
- testing to see if this help traviceci get through the tests
2020-10-02 14:35:09 -04:00
b23bf3efd8
fix #321 add policy display fields for reads
...
- adds *Display fields for policy list and detail
- adds *Display fields for both set of policy attributes
- adds API tests
2020-10-01 08:09:46 -04:00
50bc204dd5
Add edge terminator validator
2020-09-29 09:27:05 -04:00
50c6b3e4b3
Support identity dial/bind
2020-09-29 09:27:03 -04:00
a3ee258df2
fixes #305 reimplements chain validation
...
- cert auth module caches static and dynamic (3rd party) CA chains
- all cert auths validated against active chains
- deleted/disabled 3rd party CAs no longer validate
2020-09-22 07:11:55 -04:00
c179f87538
Improve session create performance. Closes GH-281
2020-08-20 12:35:04 -04:00
e2ad712948
Add edge session events API. Closes GH-229
2020-08-11 14:00:57 -04:00
c8b7a8d8c7
Implemented policy model performance improvements. Fixes GH-256
2020-07-28 10:03:36 -04:00
14eb819b30
Model performance test, work in progress
2020-07-28 10:01:34 -04:00
1242a1b950
fixes #240
...
- adds spec router
- updates swagger to allow for both JSON and YAML spec bodies
- pulls spec from generated rest server
2020-07-09 09:29:09 -04:00
6182beeffa
rename text producer
...
- text producer is now pem producer only
- remove ability to render errors in pem producer
- update tests
- fix accept header processing for multiple accepts in one header
2020-07-07 11:44:40 -04:00
923b182b85
fixes #233 return API errors as JSON if possible
2020-07-01 15:54:20 -04:00
c48f7a3e1b
fix api tests for updb patch
2020-06-25 15:19:33 -04:00
48def995f3
fixes #191 , CLI password changes
...
- requires corresponding changes in the CLI as well
2020-06-25 14:53:53 -04:00
736c535cdd
Fix listener close logic ( #223 )
...
* Fix listener close logic
* Make timeout 8m
* Fix bbolt deadlock
2020-06-24 14:32:32 -04:00
6a0e1a9ea4
Add some test debugging
2020-06-22 11:35:36 -04:00
7e9d9a63f1
Fix session create response. fail faster on rotating hs tests
2020-06-22 11:10:09 -04:00
81b5a4ef76
Move service and router names to fabric
2020-06-19 14:10:31 -04:00
66fef91989
update foundation to avoid bbolt bug
2020-06-17 15:35:43 -04:00
0817b9b6c5
Merge branch 'master' into use.shortids
2020-06-17 13:49:20 -04:00
6571dbd72c
use shortids
2020-06-16 17:33:45 -04:00
c5d08014b5
Update rolling tests
2020-06-15 15:51:23 -04:00
0923db08d5
Merge branch 'master' into open.api
2020-06-15 13:49:23 -04:00
ad3e438e43
fix bug with multiple content-type headers on enroll
2020-06-10 12:17:58 -04:00
f0eb83e7fe
Update for API changes and fix close bug. Fixes GH-189 ( #190 )
...
* Update for API changes and fix close bug. Fixes GH-189
2020-06-09 20:21:40 -04:00
3087972172
all conversion work
...
- remove old JSON schema, unsused code
- remove unused variables from base router functions
- rework all API entities
- rework all links
- fix lint issues
- adds error conversion logic
- update tests as needed
- fix up go test
- fix backwards compat w/ non json enroller
2020-06-09 14:11:23 -04:00
b6d9efaf8c
fixed #183 , move to openziti
2020-05-26 17:37:35 -04:00
8a8f861934
fix re-used name format between API tests
2020-05-20 13:08:13 -04:00
e8b10600c4
fixes #147 , identity naming durin auto enrollment
...
- allows CAs to specify a naming format for auto ca identities
- name collisions during auto enrollment now adds a six digit
incrementing number
2020-05-20 13:00:54 -04:00
6732d0abfa
fixes #158
...
- update for identities does not allow enrol/auth/default admin to be
updated
- adds migrations to fix broken data models between ident/auth/enrol
- fixes migration not to be stuck at version 4
2020-05-18 09:17:31 -04:00
00208186cf
Merge pull request #156 from netfoundry/fix-server-first-race-condition
...
Fix server first race condition
2020-05-13 10:38:36 -04:00
Paul Lorenz