Commit Graph

336 Commits

Author SHA1 Message Date
Paul Lorenz 898e41ae2a Implement router data model changesets. Fixes #1966 2024-04-23 11:56:10 -04:00
Andrew Martinez 0e21934b75 fixes #1926 adds chains to enrollment responses
- all server and client certs issued attempt to build a chain less root
  from the CA bundle during enrollment
- this change still requires all intermediates to be in the ca bundle,
  untill they are moved somewhere else or provided in some other fashion
- updated tests to expect chains in enrollment responses
2024-04-10 10:57:57 -04:00
Paul Lorenz 3d81cc39a4 Load test for controller with links, terminators, clients and traffic 2024-04-09 16:58:18 -04:00
Shawn Carey 4dfdabff8c respect service policies for admin identities (#1919)
respect service policies for admin identities
2024-04-09 14:34:15 -04:00
Paul Lorenz 84711f460a Fix panic in PeerConnected. Fixes #1914 2024-04-08 12:31:18 -04:00
Andrew Martinez 8c7b3b2e84 reduces prerms from admin to authenticated on list controllers
- updated public key sync to use controller list data instead of mesh peer
- fixes perms on controller list to not be admin only
2024-03-26 10:55:50 -04:00
Paul Lorenz b5e96dbeea Merge pull request #1851 from openziti/posture-check-optimization
Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576
2024-03-25 10:37:30 -04:00
Paul Lorenz 3cdb009aea Merge pull request #1853 from openziti/fix-db-validation
Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method.
2024-03-21 13:51:02 -04:00
Paul Lorenz 881ec14b63 Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method. 2024-03-21 10:10:07 -04:00
Paul Lorenz a089ca7c36 Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576 2024-03-20 14:23:15 -04:00
Paul Lorenz aad1ad57cf Add api session cert index to fix lookup perf. Fixes #1846 2024-03-20 09:05:53 -04:00
Andrew Martinez 36ced919ae Merge branch 'main' into ha-staging 2024-03-14 08:38:57 -04:00
Paul Lorenz fab81e4cd4 Add terminator chaos testing and fix issues found. Fixes #1794 Fixes #1369 2024-03-12 10:31:36 -04:00
Andrew Martinez 9cfc8e07fc update sdk/edge-api deps 2024-03-12 09:45:55 -04:00
Andrew Martinez 09542c7728 consolidated ha changes 2024-02-29 09:27:56 -05:00
Andrew Martinez 935c89bb7d fixes 1354 adds hostname/domain to env info 2024-02-22 14:32:00 -05:00
Andrew Martinez 8c0bf8b885 fixes 1691 multiple er re-enrolls creates multiple enrollments
- ers do not support having multiple enrollments, detail returns 1
- re-enrolling now clears existing enrollments
- adds test to re-enroll twice
- encapsulates all er re-enrollment logic as a single atomic command
2024-01-25 15:09:30 -05:00
Mario Trangoni 126ee5d79c codespell: Add spelling check and fix all issues
Signed-off-by: Mario Trangoni <mjtrangoni@gmail.com>
2023-12-19 10:52:42 +01:00
Paul Lorenz 151c8973d1 Revert posture check optimization. Fixes #1642 2023-12-14 16:36:07 -05:00
Paul Lorenz 94d39c37b9 Don't scan for posture checks if there are 0 posture checks in the system. Fixes #1576 2023-12-11 16:33:49 -05:00
Paul Lorenz 9ddd1b941d Add service max idle time. Fixes #1496. Add decomission router support. Fixes #1402 2023-12-08 12:48:56 -05:00
Paul Lorenz a84369a6e9 Consolidate fabric and edge persistence code. Fixes #1555 2023-12-06 17:36:37 -05:00
Paul Lorenz f1846fbbe3 Fix transit router create. Ensure enrollment id is set. Fixes #1540 2023-11-29 15:17:24 -05:00
Paul Lorenz 9bed8a14a8 Add optional command rate limiter. Fixes #1445 2023-10-23 13:45:49 -04:00
Paul Lorenz f3d67b7f49 Update fabric imports 2023-09-28 23:34:28 -04:00
Paul Lorenz b12f1d33f5 Add CreateTerminatorV2 flow for edge terminators. Fixes #1619 2023-09-27 17:32:44 -04:00
Paul Lorenz 07da3cd513 Merge remote-tracking branch 'edge/main' into merge-edge
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
Paul Lorenz 74006eeb9d Don't update identity if it hasn't changed. Fix change attribution for edge client updates. Fixes #1610. Fixes #1611 2023-09-13 11:42:35 -04:00
Andrew Martinez a05e5a4e94 fixes #1607 remove "not before" enrollment attribute 2023-09-12 09:27:08 -04:00
Paul Lorenz 453e6cae2a Consolidate controller/apierror/helpers and messages 2023-08-30 17:16:10 -04:00
Paul Lorenz 5b59ae13ee Update for moved packages in fabric 2023-08-23 09:40:05 -04:00
Paul Lorenz 81baa1843b Add default identity type. Remove user,service,device types. Fixes #1428 2023-08-22 20:40:33 -04:00
Paul Lorenz 6426d55020 Add some warn logging on terminator instance id bind conflict 2023-08-09 10:56:46 -04:00
Paul Lorenz b061fe9a39 Move internal/certs to common. Remove some incidental files that weren't used. 2023-08-07 10:20:06 -04:00
Paul Lorenz 03b58ebcd3 Move jwtsigner package to controller 2023-08-04 17:04:44 -04:00
Paul Lorenz dba0fb6f7c Move protobufs to common 2023-08-04 17:01:15 -04:00
Paul Lorenz 8b3092a3d9 Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
Move eid to common
2023-08-04 16:35:26 -04:00
Paul Lorenz f368b631b0 Merge remote-tracking branch 'origin/main' into prep-for-ziti-merge-p1 2023-08-04 16:26:16 -04:00
Paul Lorenz 1f5eed5956 Move eid to common 2023-08-04 11:46:53 -04:00
Paul Lorenz 7d6f4ef700 Reorganize code in preparation for merging to ziti repo, first pass. 2023-08-04 09:48:06 -04:00
Andrew Martinez 414cff49d7 adds support OIDC authentication, api access, and ER connections 2023-07-20 09:41:12 -04:00
Paul Otto 1fed936746 Fix cert expire check logic error 2023-06-27 11:36:33 -06:00
Andrew Martinez 3325f91e76 fixes #1416 allows totp provisioning URL domain to be configured
- sets default to openziti.io (previously ziti.dev)
- adds edge.totp configuration section
2023-06-13 09:10:31 -04:00
Andrew Martinez 3116412857 adds missing error message for unmatched iss field 2023-05-10 10:36:33 -04:00
Andrew Martinez 661be7876d fixes openziti/ziti#1093
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
Andrew Martinez 95ae025ce9 updates golang sdk to v0.20.0 2023-04-26 13:55:51 -04:00
Paul Lorenz 7d6901be3d Add edge code needed for entity change events. Fixes #629 2023-04-25 22:34:02 -04:00
Paul Lorenz 70008bfc8f Update for fabric api changes. Fixes #1295 2023-04-25 13:26:25 -04:00
Paul Lorenz 43fc1e96fe Get tests running and do some cleanups 2023-04-25 13:26:19 -04:00
Paul Lorenz bd1b25f60c Update presentation layer for api changes 2023-04-25 13:26:03 -04:00