Commit Graph

726 Commits

Author SHA1 Message Date
Paul Lorenz 9a2ef7ba76 Merge pull request #534 from openziti/tunneler-udp-conn-leak
Fix UDP connection leak in tunneler
2021-02-14 08:56:08 -05:00
Paul Lorenz 012c6f1be7 Fix UDP connection leak in tunneler 2021-02-14 08:45:45 -05:00
ziti-ci c9968513e9 Updating dependency github.com/openziti/fabric@v0.16.3 2021-02-11 22:08:03 +00:00
ziti-ci 85c06420c0 Updating dependency github.com/openziti/fabric@v0.16.2 2021-02-11 21:48:51 +00:00
Andrew ecc404ab8a Merge pull request #494 from openziti/remove.posture.timer
moves posture data to not time out
2021-02-11 14:12:12 -05:00
ziti-ci 605f565d4d Updating dependency github.com/openziti/fabric@v0.16.1 2021-02-11 14:02:26 +00:00
Andrew f17db9bbbd Merge pull request #526 from openziti/fix.dupe.router.start.offlining.orig
ignores dupe router startup
2021-02-11 08:30:50 -05:00
Andrew Martinez 6a2c82deca add timeout posture query property, -1 == no timeout
Provides a location for future configurable timeouts and allows
SDKs to detect whether no timeout/timeouts are supported.
2021-02-10 17:13:23 -05:00
Andrew Martinez 2360d44b05 moves posture data to not time out 2021-02-10 16:51:40 -05:00
ziti-ci 583586a04e Updating dependency github.com/openziti/fabric@v0.16.0 2021-02-10 17:21:03 +00:00
Andrew Martinez 2c1a9dd82b ignores dupe router startup
A second edge router starting up could offline the original according to
the edge. This would cause issues w/ API Session and Session
distribution.
2021-02-10 10:58:50 -05:00
Andrew 4944c8b347 Merge pull request #521 from openziti/fix.orphaned.enrollments
fixes orphaned ottca enrollments
2021-02-09 14:08:52 -05:00
Andrew Martinez 5b5fe97961 fix ptr to string in error message 2021-02-09 14:01:20 -05:00
Andrew Martinez 9fab8e6ed0 fix formatting message
Some deps altered after a go test ./... and go mod tidy
2021-02-09 13:57:49 -05:00
Andrew Martinez 35fa25d5af use ast.BoolNodeTrue 2021-02-09 13:55:03 -05:00
Andrew Martinez 46166db9cc fixes orphaned ottca enrollments
- deletes ottca enrollment when CA is deleted
- adds API tests
- adds migration to remove currently orphaned ottca enrollments
- migration tested on a v15 database with orphaned ottca enrollments
2021-02-09 13:55:03 -05:00
dependabot-preview[bot] 2c8cd9c525 Bump github.com/miekg/dns from 1.1.35 to 1.1.38 (#500) 2021-02-09 18:10:17 +00:00
dependabot-preview[bot] d899563780 Bump github.com/mdlayher/netlink from 1.1.1 to 1.2.1 (#462) 2021-02-09 17:53:38 +00:00
Shawn Carey 2dea2f7d4a ziti-tunnel: allow inbound connections for intercepted addresses (#520)
* support `lanIf`
2021-02-09 11:09:44 -05:00
Andrew 7cab03a968 Merge pull request #523 from openziti/fix.unit.tests
fix missing apitests build tag
2021-02-09 09:18:33 -05:00
Andrew Martinez e645df39af fix missing apitests build tag 2021-02-09 09:10:42 -05:00
Shawn Carey a8b5a3e8d8 use previousService to get removed service config (#518) 2021-02-08 16:28:01 -05:00
ziti-ci 81b3ecfa73 Updating dependency github.com/openziti/fabric@v0.15.21 2021-02-07 00:28:09 +00:00
Andrew 730740552b Merge pull request #511 from openziti/fix.pc.os.patch
fixes os PATCH for posture checks
2021-02-05 15:28:07 -05:00
Andrew Martinez c23bf9dbcf fixes os PATCH for posture checks
PATCH requests were clearing OS fields as they were not respecting field
checker results.
2021-02-05 14:56:23 -05:00
Andrew 4ab891f505 Merge pull request #510 from openziti/add.identity.attr.patch.test
add test to check role attrs aren't lost if not provided during a PATCH
2021-02-05 13:27:37 -05:00
Andrew Martinez 28832a3526 add test to check role attrs aren't lost if not provided during a PATCH 2021-02-05 13:20:07 -05:00
ziti-ci 982c332dfe Updating dependency github.com/openziti/fabric@v0.15.20 2021-02-05 18:02:00 +00:00
Paul Lorenz 208036d29c Merge pull request #509 from openziti/fix-router-crash
Fix router crash caused by concurrent access to map
2021-02-05 12:20:43 -05:00
Paul Lorenz f61faf0d54 Fix router crash caused by concurrent access to map 2021-02-05 10:13:26 -05:00
Andrew 18513f7ee4 Merge pull request #504 from openziti/api.session.performance
moves hasApiSession lookup to api model and limit 1
2021-02-04 09:32:01 -05:00
Andrew 5b1101bb24 Merge pull request #505 from openziti/fix.484.edge.router.list
fixes #484 adds current identity edge router lookup
2021-02-04 09:28:10 -05:00
Andrew Martinez 65832b8da5 fix missing formatted log call, spelling 2021-02-04 09:24:00 -05:00
Curt Tudor 2c6814aaa4 edge router enhancements for browZer support (#499) 2021-02-04 06:09:46 -05:00
Andrew Martinez e34d25b0dd fixes #484 adds current identity edge router lookup 2021-02-03 15:37:15 -05:00
Andrew Martinez 5c47c31016 moves hasApiSession lookup to api model and limit 1
This move isolates the cost of hasApiSession to the identity endpoint
lookups in the REST API. Being in the model caused this cost to be
shared on all identity lookups for internal logic.

Limit 1 is an attempt to reduce the cost of searching over a large set.
API Sessions do not have an index on identity id so there is still some
cost.
2021-02-03 14:01:53 -05:00
ziti-ci 039f89e79f Updating dependency github.com/openziti/fabric@v0.15.18 2021-02-02 21:32:56 +00:00
ziti-ci 06dd2d419f Updating dependency github.com/openziti/fabric@v0.15.17 2021-02-02 21:06:18 +00:00
ziti-ci b3a0130736 Updating dependency github.com/openziti/fabric@v0.15.16 2021-02-02 20:13:17 +00:00
Andrew 3aa595f369 Merge pull request #502 from openziti/fix.random.mfa.test.failure
fixes mfa random api test failures
2021-02-02 15:09:40 -05:00
Andrew Martinez ed4458a296 fixes mfa random api test failures
Codes are 6 digits with leading zero.
2021-02-02 14:56:50 -05:00
Paul Lorenz 95c2f077ac Merge pull request #501 from openziti/fix-half-close
Ensure read exits when xgress is closed
2021-02-02 12:25:48 -05:00
Paul Lorenz a30d1fb1a5 Ensure read exits when xgress is closed 2021-02-02 11:16:39 -05:00
Andrew 5de4d629f3 Merge pull request #498 from openziti/add.server.header
fixes #497 send session header
2021-02-01 15:07:24 -05:00
Andrew cf193ca010 Merge pull request #496 from openziti/public.query.max
limit public query options to 500 whe "none" is specified
2021-02-01 15:06:04 -05:00
Andrew Martinez df1f2a1a75 fixes #497 send session header
- add server headers during HTTP handler delegation rather than at HTTP
  response time
- remove all old header setting locations
- remove unused status writer and other response code
- add manual set on authentication for session headers
2021-02-01 14:28:29 -05:00
Andrew Martinez cab720ed47 limit public query options to 500 whe "none" is specified 2021-02-01 09:27:55 -05:00
Paul Lorenz 79e558aba6 Merge pull request #493 from openziti/tunneler-poller
Update service poller to use service update callback
2021-01-29 16:05:47 -05:00
Paul Lorenz f485d4e8c3 Update service poller to use service update callback 2021-01-29 15:32:51 -05:00
ziti-ci b3fa54b347 Updating dependency github.com/openziti/sdk-golang@v0.15.13 2021-01-29 20:19:52 +00:00