deef2bba6a
Fix issues with host.v1 config type schema ( #640 )
...
- require "low", "high" properties in portRange
- fixed allowedAddresses item type in json schema docs
2021-04-23 09:39:29 -04:00
2a2e380cb7
Add error code reporting to control channel requests
2021-04-19 14:22:07 -04:00
503e320b58
Fix file name
2021-04-14 16:10:22 -04:00
fa56d0f487
Add test for cursor on-delete issue
2021-04-14 16:10:21 -04:00
4a9b226f0e
adds the ability for router to extend their enrollment
...
- routers can now opt to extend their enrollment at any time with a
previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
b278f611d0
add policyType to posture query sets
...
- also fixes policy ids being set as the same value due to pointer in
for loop reference
2021-04-13 15:26:17 -04:00
0c281d998b
corrected definitions in host.v1
2021-04-13 08:01:12 -04:00
2110aba5c1
host.v1 configuration type schema changes ( #631 )
...
- Rename host.v1 dialIntercepted* properties to forward*
- Add allowed* properties to whitelist destinations that are dialed via forward*
- Add allowedSourceAddresses, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service
2021-04-13 07:48:47 -04:00
34c91e480c
Propagate router renames to fabric. Lookup identity by id, not name
2021-04-08 12:52:21 -04:00
b493cce490
Add app data to identity and edge router. Add isSystem to ERP
2021-04-06 10:07:57 -04:00
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
39626472e3
Support for intercept.v1 config type ( #618 )
...
* Support for intercept.v1 config type
2021-04-05 11:52:12 -04:00
0731731bba
Set LastActivityAt on api sessions when creating them for router/tunnelers
2021-03-25 16:18:21 -04:00
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
81f2847633
Merge pull request #607 from openziti/empty.posture.fix
...
Empty Posture Fix & Minor Fixes
2021-03-24 15:23:25 -04:00
a48bef714a
Merge pull request #606 from openziti/unify.api.session.modeling
...
unify api session modeling
2021-03-24 14:14:01 -04:00
27a361f776
check nil cursors for policy iteration
2021-03-24 14:06:09 -04:00
3014bdc405
new tests, don't prune policies w/ no checks
2021-03-24 14:06:09 -04:00
a753022e37
unify api session modeling
2021-03-24 13:51:26 -04:00
f41cb21e3f
Merge branch 'main' into check.enabled.on.shutdown
2021-03-24 08:24:55 -04:00
170f318a66
check if enabled before trying to clean up
2021-03-23 15:07:33 -04:00
1100d6f388
update service update on posture data change, tests
2021-03-23 09:54:47 -04:00
993f51f7ab
set mfa posture on enroll
...
- update api session session state on mfa enroll
- update posture data state on mfa enroll
- centralize setting mfa posture data
- pass isMfaRequired and isMfaComplete in apiSession/currentApiSession
2021-03-23 09:54:46 -04:00
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
6383728aa0
Merge pull request #596 from openziti/move.service.request.failure.url
...
moves posture-data/failed-service-requests
2021-03-19 10:56:49 -04:00
8f02a817af
Merge pull request #595 from openziti/remove-old-db-migrations
...
Remove migration data for versions prior to 0.17.1
2021-03-19 10:51:53 -04:00
5449b655b8
moves posture-data/failed-service-requests
...
- GET /identities/{id}/posture-data/failed-service-requests is now under
/identities/{id}/failed-service-requests
2021-03-19 10:30:26 -04:00
c54a007202
formalize posture data API output, add service request errors
...
- GET /identity/{id}/posture-data is now formalized in the swagger.yml
- posture data output now includes the last 100 failed service requests
with temporal posture data state
- added ziti controller instance id header to detect restarts
- add GET /identity/{id}/failed-service-requests
2021-03-19 09:49:44 -04:00
83fa865c2c
remove unused shutdown() function
2021-03-19 09:15:24 -04:00
7e559771f3
fixed cachedLastActivityAt
2021-03-19 09:10:23 -04:00
fccdc0591e
fix expiresAt and expirationSeconds
2021-03-19 08:59:50 -04:00
ec91503b7c
Remove migration data for versions prior to 0.17.1
2021-03-18 15:52:10 -04:00
623681db87
add lastActivityAt
...
- as updates to API Sessions can now happen later than the last time
they were active, updatedAt is no longer the correct representation of
the last activity an API Session had
- move all logic that used updatedAt to lastActivityAt
- add migration to set lastActivityAt
2021-03-17 13:49:12 -04:00
f4319b7b38
Merge branch 'main' into bbolt_tracing
2021-03-17 12:00:18 -04:00
3cfbe17c5b
Support for bbolt tracing.
2021-03-17 10:50:46 -04:00
71a3a1643e
Pass FieldChecker to toBoltEntityForPatch. Add some ReadByName methods. Move some code to allow re-use
2021-03-17 10:41:21 -04:00
2b9388b7ea
Merge pull request #585 from openziti/make.api.session.batch
...
use batch for api access last updates
2021-03-15 13:27:41 -04:00
fb9e4569f8
use mock api session
2021-03-15 11:25:07 -04:00
5841f6fa70
use batch for api access last updates
2021-03-15 11:14:45 -04:00
50f3145e1c
invalid posture errors now only include actual failing checks
...
- reduce looping
- save only failing checks
- output only failing checks as the cause of INVALID_POSTURE
2021-03-11 15:14:33 -05:00
4dba6e95ab
on invalid token ignore and check bool status only
2021-03-11 13:33:51 -05:00
00114b55a1
Set router status online. Allow ziti-tunnel proxy to work without config
2021-03-09 15:48:06 -05:00
9612637454
Merge pull request #573 from openziti/thread.safe.router.state
...
adds thread safe router state
2021-03-08 16:19:54 -05:00
219c19c8e7
fix map passed by reference in shallow struct copy
2021-03-08 15:58:57 -05:00
fff256487c
status to state in broker
2021-03-08 15:04:51 -05:00
90ca54adb8
adds thread safe router state
...
Router state used to be stored and accessed in a thread unsafe way.
State is now locks on a mutex for setting values and values are copied
out for referencing.
2021-03-08 14:55:36 -05:00
9df72e9627
Update deps and update for foundation api change
2021-03-08 13:18:52 -05:00
0066137733
If api session not found, skip rest of loop
2021-03-08 10:27:10 -05:00
3edbc4a16e
reduce from 80 bytes to 80 bits
...
Our secrets were huuuuuge.
2021-03-05 10:03:50 -05:00
1b253839fc
Merge branch 'main' into add.session.route
2021-03-04 09:47:10 -05:00
Shawn Carey