Commit Graph

358 Commits

Author SHA1 Message Date
Andrew 68f0167126 Merge pull request #1927 from openziti/fix.1926.enroll.certs.with.chains
fixes #1926 adds chains to enrollment responses
2024-04-23 09:33:22 -04:00
Paul Lorenz 3e9567b412 Use config types from edge-apis instead of manually parsing 2024-04-17 14:25:32 -04:00
Paul Lorenz ac7c4848c5 Don't use EdgeSessionRemoved tracking for HA sessions. Fixes #1936 2024-04-12 13:48:34 -04:00
Andrew Martinez 0e21934b75 fixes #1926 adds chains to enrollment responses
- all server and client certs issued attempt to build a chain less root
  from the CA bundle during enrollment
- this change still requires all intermediates to be in the ca bundle,
  untill they are moved somewhere else or provided in some other fashion
- updated tests to expect chains in enrollment responses
2024-04-10 10:57:57 -04:00
Paul Lorenz 8f4f9944f5 Add TLS handshake rate limiter. Fixes #1904 2024-04-09 17:25:35 -04:00
Andrew Martinez 8c7b3b2e84 reduces prerms from admin to authenticated on list controllers
- updated public key sync to use controller list data instead of mesh peer
- fixes perms on controller list to not be admin only
2024-03-26 10:55:50 -04:00
Paul Lorenz b5e96dbeea Merge pull request #1851 from openziti/posture-check-optimization
Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576
2024-03-25 10:37:30 -04:00
Paul Lorenz 881ec14b63 Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method. 2024-03-21 10:10:07 -04:00
Paul Lorenz a089ca7c36 Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576 2024-03-20 14:23:15 -04:00
Andrew Martinez 36ced919ae Merge branch 'main' into ha-staging 2024-03-14 08:38:57 -04:00
Paul Lorenz fab81e4cd4 Add terminator chaos testing and fix issues found. Fixes #1794 Fixes #1369 2024-03-12 10:31:36 -04:00
Andrew Martinez 09542c7728 consolidated ha changes 2024-02-29 09:27:56 -05:00
dovholuknf 1f94fd5ebe fix refactor gone awry 2024-02-27 18:31:33 -05:00
gberl002 261e12043c Changing xweb to SPA for clarification
Signed-off-by: gberl002 <geoff.berl@netfoundry.io>
2024-02-27 14:34:02 -05:00
Andrew Martinez 935c89bb7d fixes 1354 adds hostname/domain to env info 2024-02-22 14:32:00 -05:00
Paul Lorenz 38617b244e Merge pull request #1658 from openziti/auth-rate-limiter
Add auth rate limiter. Fixes #1657. Also add links fablab stress test.
2023-12-21 10:53:04 -05:00
Paul Lorenz 04873a250d Add auth rate limiter. Fixes #1657. Also add links fablab stress test. 2023-12-21 09:48:04 -05:00
Mario Trangoni 126ee5d79c codespell: Add spelling check and fix all issues
Signed-off-by: Mario Trangoni <mjtrangoni@gmail.com>
2023-12-19 10:52:42 +01:00
Paul Lorenz 9ddd1b941d Add service max idle time. Fixes #1496. Add decomission router support. Fixes #1402 2023-12-08 12:48:56 -05:00
Paul Lorenz a84369a6e9 Consolidate fabric and edge persistence code. Fixes #1555 2023-12-06 17:36:37 -05:00
Andrew Martinez ad861ad682 adds capabilities in version and enumerated list version 2023-10-18 09:58:59 -04:00
Paul Lorenz 73ad4c9c84 Handle fallout from putting and fabric and edge into the same project 2023-09-29 10:51:56 -04:00
Paul Lorenz f3d67b7f49 Update fabric imports 2023-09-28 23:34:28 -04:00
Paul Lorenz 07da3cd513 Merge remote-tracking branch 'edge/main' into merge-edge
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
Paul Lorenz 74006eeb9d Don't update identity if it hasn't changed. Fix change attribution for edge client updates. Fixes #1610. Fixes #1611 2023-09-13 11:42:35 -04:00
Paul Lorenz 453e6cae2a Consolidate controller/apierror/helpers and messages 2023-08-30 17:16:10 -04:00
Paul Lorenz 5b59ae13ee Update for moved packages in fabric 2023-08-23 09:40:05 -04:00
Paul Lorenz 81baa1843b Add default identity type. Remove user,service,device types. Fixes #1428 2023-08-22 20:40:33 -04:00
Andrew Martinez 99ebbbf75c fix nil list on auth policy rest model, fixes #1584 2023-08-16 09:56:53 -04:00
Paul Lorenz b061fe9a39 Move internal/certs to common. Remove some incidental files that weren't used. 2023-08-07 10:20:06 -04:00
Paul Lorenz 8b3092a3d9 Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
Move eid to common
2023-08-04 16:35:26 -04:00
Paul Lorenz f368b631b0 Merge remote-tracking branch 'origin/main' into prep-for-ziti-merge-p1 2023-08-04 16:26:16 -04:00
Paul Lorenz 1f5eed5956 Move eid to common 2023-08-04 11:46:53 -04:00
Paul Lorenz 7d6f4ef700 Reorganize code in preparation for merging to ziti repo, first pass. 2023-08-04 09:48:06 -04:00
Andrew Martinez 414cff49d7 adds support OIDC authentication, api access, and ER connections 2023-07-20 09:41:12 -04:00
Andrew Martinez eeb9221fe4 adds .well-known/est/cacerts support to the management API 2023-06-14 09:56:23 -04:00
Andrew Martinez 661be7876d fixes openziti/ziti#1093
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
Andrew Martinez 95ae025ce9 updates golang sdk to v0.20.0 2023-04-26 13:55:51 -04:00
Paul Lorenz 7d6901be3d Add edge code needed for entity change events. Fixes #629 2023-04-25 22:34:02 -04:00
Paul Lorenz 43fc1e96fe Get tests running and do some cleanups 2023-04-25 13:26:19 -04:00
Paul Lorenz bd1b25f60c Update presentation layer for api changes 2023-04-25 13:26:03 -04:00
Paul Lorenz 63f9dad3df Updated model for storage api changes 2023-04-25 13:26:02 -04:00
Paul Lorenz 83bca6a0ba Update for storage and fabric api changes 2023-04-25 13:26:02 -04:00
Paul Lorenz d8e50ba43e Make session edge-router check more efficient. Fixes #1418 2023-04-12 15:54:17 -04:00
Andrew Martinez 0f08bfa7d0 fixes #1391 adding auth policy ref to identity, updates edge-api dep 2023-04-05 15:00:52 -04:00
Paul Lorenz bd9b6a713b Pull some tweaks over from denorm branch 2023-04-03 11:34:37 -04:00
Paul Lorenz ad5dc292bb Improve list performance by using identity indexes rather than service indexes. Fixes #1388 2023-04-03 09:58:21 -04:00
Andrew Martinez ffcfb619e4 fixes #1386 by safely dereferencing auth policy ids on PUT 2023-03-30 09:42:16 -04:00
Paul Lorenz 1d0e558f90 Add support disabling routers. Fixes #1373 2023-03-28 13:42:25 -04:00
Andrew b7cd692102 Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00