Andrew
ddd383ef23
Merge pull request #874 from openziti/add.enforcer.metrics
...
adds metrics for api session and service policy enforcers
2022-01-31 10:04:07 -05:00
Paul Lorenz
5be9095e60
Update to use channel library
2022-01-28 11:35:15 -05:00
Andrew Martinez
1680a7d898
switch to meter for deletes
2022-01-24 13:16:43 -05:00
Andrew Martinez
b36c890c42
fix gauges
2022-01-24 11:24:15 -05:00
Andrew Martinez
2fba1293af
adds metrics for api session and service policy enforcers
2022-01-24 11:22:05 -05:00
Paul Lorenz
3f69bfdd43
Update for control channel API changes
2022-01-19 08:37:40 -05:00
Andrew Martinez
236babd62c
adds start/end times for events
2022-01-18 14:19:52 -05:00
Andrew Martinez
1f784d89ce
adds asynchronous eventer to controller
...
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00
Andrew
9bd955127c
Merge pull request #866 from openziti/broker.async.bbolt.tx
...
move broker event handlers to go routines
2022-01-18 09:27:17 -05:00
Paul Lorenz
f1709586a2
Merge pull request #864 from openziti/cache-tunnel-sessions
...
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-18 09:15:05 -05:00
Andrew Martinez
9b05d4e49b
move broker event handlers to go routines
2022-01-17 13:59:33 -05:00
Andrew Martinez
4be50ea143
adds zero start time check
2022-01-17 10:24:00 -05:00
Andrew Martinez
050b0b086e
moves metric endpoint logging lower in the stack
...
- endpoint url/path -> name remains the same
- start timing on request context before we start processing
- log metrics in IsAllowed which is called by all endpoint after routing
- logging before routing to a handler would log all probe attacks
2022-01-17 10:12:59 -05:00
Paul Lorenz
fd866e7f3d
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-13 12:38:54 -05:00
Andrew
9a42304511
Merge pull request #858 from openziti/add.router.re-enroll.logic
...
Add.router.reenroll.logic
2022-01-07 08:53:03 -05:00
Andrew
c8facce38f
Merge pull request #861 from openziti/add.metrics.for.all.endpoints
...
adds metrics for endpoints with keys of path[method]
2022-01-06 14:46:29 -05:00
Andrew Martinez
8b20f0278a
normalize URL ids for metric names
2022-01-06 14:42:31 -05:00
Andrew Martinez
65702f502a
swap from brackets to period seperators
2022-01-06 14:11:01 -05:00
Andrew Martinez
dfa0f7c6ab
adds metrics for endpoints with keys of path[method]
2022-01-06 14:02:36 -05:00
Paul Lorenz
7b1ee2893d
Add identity refresh meter
2022-01-06 13:45:18 -05:00
Andrew Martinez
cf20c2dfa8
adds api tests
2022-01-03 15:54:51 -05:00
Andrew Martinez
770c7bcd06
adds re-enrollment logic for edge-routers
2022-01-03 09:06:33 -05:00
Andrew Martinez
97773f5917
update log messages w/ router context
2021-12-20 09:20:10 -05:00
Andrew Martinez
37f5f88944
remove unused REST API
2021-12-20 09:19:14 -05:00
Andrew Martinez
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
Paul Lorenz
0d66f75eb8
Add additional fields and make field names more consistent
2021-12-14 09:58:24 -05:00
Paul Lorenz
31107eb4d4
Update for removing custom bbolt version with trace support
2021-12-11 00:34:40 -05:00
Paul Lorenz
bfcb037783
Initial pass at fabric rest api working ( #838 )
...
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
Paul Lorenz
f1af4df5d8
Merge pull request #837 from openziti/fix-panic
...
Fix panic caused by missing return on error
2021-11-17 10:34:23 -05:00
Paul Lorenz
66ed64d749
Fix panic caused by missing return on error
2021-11-17 10:22:56 -05:00
Paul Lorenz
96cdde0227
Enrolment -> Enrollment in spec
2021-11-10 13:19:08 -05:00
Paul Lorenz
de45dc0554
Remove some unused types. Fix version map
2021-11-09 09:18:15 -05:00
Andrew Martinez
027f8673ce
patch client cert instead of using verify options
2021-11-05 10:47:45 -04:00
Andrew Martinez
ece9e8222a
formating directive fix
2021-11-05 10:27:00 -04:00
Andrew Martinez
1f9ca6878a
changes client cert validation
...
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
Paul Lorenz
24ae6dbb19
Fix panic on session view
2021-11-02 16:40:22 -04:00
Andrew
8e53e50fd9
Merge pull request #818 from openziti/identity.enrollment.extension
...
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
Andrew
62ae85539f
Merge pull request #819 from openziti/gosec.improvements
...
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
Paul Lorenz
2d4260e76e
Allow using a specific bolt db file for tests
2021-10-26 14:19:24 -04:00
Andrew Martinez
c8de8a8fac
fixes gosec output of a few items
2021-10-21 17:40:52 -04:00
Andrew Martinez
a1f7a48cdc
adds identity cert extension endpoint to client/man API
...
- now supports POST /current-identity/authenticators/{id}/extend for
cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
Paul Lorenz
7d483a822b
Merge pull request #817 from openziti/fix-panic-on-invalid-service
...
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
Paul Lorenz
40389c1f88
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:37:56 -04:00
Andrew Martinez
050d5eb0dc
fix possible formatting error
2021-10-19 11:31:31 -04:00
Andrew Martinez
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
Andrew Martinez
45158ff864
updates to newest foundation/fabric/sdk-golang
2021-10-18 16:07:33 -04:00
Andrew Martinez
49006ab9f6
fixes posture check timeouts that sit at 0 after endpoint states
2021-10-07 10:22:57 -04:00
Andrew Martinez
6b80d444a0
remove old dgrijalva jwt ref
2021-10-01 11:17:00 -04:00
Paul Lorenz
0c8206b8d4
Don't allow hashtags or at symbols on role attributes. Fixes #786
2021-09-22 10:31:01 -04:00
Eugene K
c9e7d2f4c7
update host configs as well to pickup wildcardDomain addition
2021-09-15 15:57:39 -04:00