a4a872c377
remove test sleeps, use const for window size
2021-01-26 14:08:16 -05:00
4051c47dd5
Merge branch 'main' into mfa
2021-01-26 13:52:59 -05:00
bca8d657fc
Clean up xgress edge abstractions and close logic
2021-01-26 10:43:02 -05:00
f2431ab9b3
bulk posture response
2021-01-25 13:55:41 -05:00
891d8eb5ce
Add service events when configs are updated/deleted. Add service events test
2021-01-19 14:30:34 -05:00
5207dbb931
use UTC time
2021-01-19 08:53:21 -05:00
2d61799c24
add posture check MFA tests
2021-01-19 08:37:29 -05:00
308d7f3a10
mfa initial
...
- add mfa read endpoints
- add mfa enroll enpoints
- fix mfa library timing issues
- adds mfa at tests
- adds admin mfa management endpoints
- adds admin mfa at tests
- improve at tests
- fix auth check vs auth query
- fix swagger for auth queryies
- fix swagger doc
- adds more api tests for validation
- redo auth query structure
- redo mfa endpoints
- move mfa verify to authenticate router:wq
- add recovery code support and tests
- add partial session authentication status
2021-01-19 08:36:27 -05:00
c5d3a4b69b
Improve posture check perf using indexes
2021-01-18 14:15:30 -05:00
803eb5d5d6
Move service policy enforcer to use service events
2021-01-15 15:28:59 -05:00
2194d8a2e2
Implement service change notifications
2021-01-15 15:28:59 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
4f5dfd93cc
Support router provided connection ids
2020-12-15 17:35:43 -05:00
73383f0992
Update for fabric API changes ( #442 )
2020-12-07 15:02:00 -05:00
ced4df53c3
Use copy-on-write muxer. Use no-op sequencer. Fix AT bug related to dots in generated ids. ( #438 )
...
* Fix intermittent AT failure. Use noop sequencer
* Use copy-on-write msg mux impl
* Try with non-zero queue depth
2020-11-30 19:08:01 -05:00
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
6126f179ad
fix tests
2020-10-21 22:28:50 -04:00
d3bb89a5b0
pass select edge headers through fabric
...
implement passing edge flags
add test for edge.Conn.CloseWrite()
use CloseWrite() on proxied connections
2020-10-20 11:33:11 -04:00
568eb129c7
address PR comments
...
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
c53843c08d
Update go-events to latest version ( #332 )
2020-10-09 12:37:20 -04:00
41da009787
remove the last of the things named gateway
2020-10-08 07:53:17 -04:00
94bb1b25b6
edge api version support
2020-10-07 07:25:14 -04:00
3bbff3a01a
support version info from fabric
2020-10-07 07:25:14 -04:00
76823ff435
add ZITI_TEST_LOG_LEVEL, set to fatal for travis, remove prints
2020-10-02 15:43:49 -04:00
f4ee38772d
set log level for API tests to error
...
- testing to see if this help traviceci get through the tests
2020-10-02 14:35:09 -04:00
b23bf3efd8
fix #321 add policy display fields for reads
...
- adds *Display fields for policy list and detail
- adds *Display fields for both set of policy attributes
- adds API tests
2020-10-01 08:09:46 -04:00
50bc204dd5
Add edge terminator validator
2020-09-29 09:27:05 -04:00
50c6b3e4b3
Support identity dial/bind
2020-09-29 09:27:03 -04:00
a3ee258df2
fixes #305 reimplements chain validation
...
- cert auth module caches static and dynamic (3rd party) CA chains
- all cert auths validated against active chains
- deleted/disabled 3rd party CAs no longer validate
2020-09-22 07:11:55 -04:00
c179f87538
Improve session create performance. Closes GH-281
2020-08-20 12:35:04 -04:00
e2ad712948
Add edge session events API. Closes GH-229
2020-08-11 14:00:57 -04:00
c8b7a8d8c7
Implemented policy model performance improvements. Fixes GH-256
2020-07-28 10:03:36 -04:00
14eb819b30
Model performance test, work in progress
2020-07-28 10:01:34 -04:00
1242a1b950
fixes #240
...
- adds spec router
- updates swagger to allow for both JSON and YAML spec bodies
- pulls spec from generated rest server
2020-07-09 09:29:09 -04:00
6182beeffa
rename text producer
...
- text producer is now pem producer only
- remove ability to render errors in pem producer
- update tests
- fix accept header processing for multiple accepts in one header
2020-07-07 11:44:40 -04:00
923b182b85
fixes #233 return API errors as JSON if possible
2020-07-01 15:54:20 -04:00
c48f7a3e1b
fix api tests for updb patch
2020-06-25 15:19:33 -04:00
48def995f3
fixes #191 , CLI password changes
...
- requires corresponding changes in the CLI as well
2020-06-25 14:53:53 -04:00
736c535cdd
Fix listener close logic ( #223 )
...
* Fix listener close logic
* Make timeout 8m
* Fix bbolt deadlock
2020-06-24 14:32:32 -04:00
6a0e1a9ea4
Add some test debugging
2020-06-22 11:35:36 -04:00
7e9d9a63f1
Fix session create response. fail faster on rotating hs tests
2020-06-22 11:10:09 -04:00
81b5a4ef76
Move service and router names to fabric
2020-06-19 14:10:31 -04:00
66fef91989
update foundation to avoid bbolt bug
2020-06-17 15:35:43 -04:00
0817b9b6c5
Merge branch 'master' into use.shortids
2020-06-17 13:49:20 -04:00
6571dbd72c
use shortids
2020-06-16 17:33:45 -04:00
c5d08014b5
Update rolling tests
2020-06-15 15:51:23 -04:00
0923db08d5
Merge branch 'master' into open.api
2020-06-15 13:49:23 -04:00
ad3e438e43
fix bug with multiple content-type headers on enroll
2020-06-10 12:17:58 -04:00
Andrew Martinez