68f0167126
Merge pull request #1927 from openziti/fix.1926.enroll.certs.with.chains
...
fixes #1926 adds chains to enrollment responses
2024-04-23 09:33:22 -04:00
3e9567b412
Use config types from edge-apis instead of manually parsing
2024-04-17 14:25:32 -04:00
ac7c4848c5
Don't use EdgeSessionRemoved tracking for HA sessions. Fixes #1936
2024-04-12 13:48:34 -04:00
0e21934b75
fixes #1926 adds chains to enrollment responses
...
- all server and client certs issued attempt to build a chain less root
from the CA bundle during enrollment
- this change still requires all intermediates to be in the ca bundle,
untill they are moved somewhere else or provided in some other fashion
- updated tests to expect chains in enrollment responses
2024-04-10 10:57:57 -04:00
8f4f9944f5
Add TLS handshake rate limiter. Fixes #1904
2024-04-09 17:25:35 -04:00
8c7b3b2e84
reduces prerms from admin to authenticated on list controllers
...
- updated public key sync to use controller list data instead of mesh peer
- fixes perms on controller list to not be admin only
2024-03-26 10:55:50 -04:00
a089ca7c36
Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576
2024-03-20 14:23:15 -04:00
36ced919ae
Merge branch 'main' into ha-staging
2024-03-14 08:38:57 -04:00
fab81e4cd4
Add terminator chaos testing and fix issues found. Fixes #1794 Fixes #1369
2024-03-12 10:31:36 -04:00
09542c7728
consolidated ha changes
2024-02-29 09:27:56 -05:00
1f94fd5ebe
fix refactor gone awry
2024-02-27 18:31:33 -05:00
261e12043c
Changing xweb to SPA for clarification
...
Signed-off-by: gberl002 <geoff.berl@netfoundry.io >
2024-02-27 14:34:02 -05:00
935c89bb7d
fixes 1354 adds hostname/domain to env info
2024-02-22 14:32:00 -05:00
38617b244e
Merge pull request #1658 from openziti/auth-rate-limiter
...
Add auth rate limiter. Fixes #1657 . Also add links fablab stress test.
2023-12-21 10:53:04 -05:00
04873a250d
Add auth rate limiter. Fixes #1657 . Also add links fablab stress test.
2023-12-21 09:48:04 -05:00
126ee5d79c
codespell: Add spelling check and fix all issues
...
Signed-off-by: Mario Trangoni <mjtrangoni@gmail.com >
2023-12-19 10:52:42 +01:00
9ddd1b941d
Add service max idle time. Fixes #1496 . Add decomission router support. Fixes #1402
2023-12-08 12:48:56 -05:00
a84369a6e9
Consolidate fabric and edge persistence code. Fixes #1555
2023-12-06 17:36:37 -05:00
ad861ad682
adds capabilities in version and enumerated list version
2023-10-18 09:58:59 -04:00
73ad4c9c84
Handle fallout from putting and fabric and edge into the same project
2023-09-29 10:51:56 -04:00
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
07da3cd513
Merge remote-tracking branch 'edge/main' into merge-edge
...
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
74006eeb9d
Don't update identity if it hasn't changed. Fix change attribution for edge client updates. Fixes #1610 . Fixes #1611
2023-09-13 11:42:35 -04:00
453e6cae2a
Consolidate controller/apierror/helpers and messages
2023-08-30 17:16:10 -04:00
5b59ae13ee
Update for moved packages in fabric
2023-08-23 09:40:05 -04:00
81baa1843b
Add default identity type. Remove user,service,device types. Fixes #1428
2023-08-22 20:40:33 -04:00
99ebbbf75c
fix nil list on auth policy rest model, fixes #1584
2023-08-16 09:56:53 -04:00
b061fe9a39
Move internal/certs to common. Remove some incidental files that weren't used.
2023-08-07 10:20:06 -04:00
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
eeb9221fe4
adds .well-known/est/cacerts support to the management API
2023-06-14 09:56:23 -04:00
661be7876d
fixes openziti/ziti#1093
...
- heart beat system was never being configured with a control channel
2023-05-01 10:02:48 -04:00
95ae025ce9
updates golang sdk to v0.20.0
2023-04-26 13:55:51 -04:00
bd1b25f60c
Update presentation layer for api changes
2023-04-25 13:26:03 -04:00
63f9dad3df
Updated model for storage api changes
2023-04-25 13:26:02 -04:00
83bca6a0ba
Update for storage and fabric api changes
2023-04-25 13:26:02 -04:00
d8e50ba43e
Make session edge-router check more efficient. Fixes #1418
2023-04-12 15:54:17 -04:00
0f08bfa7d0
fixes #1391 adding auth policy ref to identity, updates edge-api dep
2023-04-05 15:00:52 -04:00
bd9b6a713b
Pull some tweaks over from denorm branch
2023-04-03 11:34:37 -04:00
ad5dc292bb
Improve list performance by using identity indexes rather than service indexes. Fixes #1388
2023-04-03 09:58:21 -04:00
ffcfb619e4
fixes #1386 by safely dereferencing auth policy ids on PUT
2023-03-30 09:42:16 -04:00
1d0e558f90
Add support disabling routers. Fixes #1373
2023-03-28 13:42:25 -04:00
b7cd692102
Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
...
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
6b8aa137e2
Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
...
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
f274fb30f8
merge check and create tx for MFA enrollment
2023-03-27 16:13:57 -04:00
2a290612b0
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 15:31:49 -04:00
d76b9bc272
Cache api sessions for router/tunneler. Fixes #1364
2023-03-23 10:22:46 -04:00
e192f271ba
remove old "sessionCert" (not ApiSessionCert) bit rot
2023-03-20 18:04:21 -04:00
a46a10d9eb
use new github.com/openziti/edge-api repository
...
- fixes import statements
2023-01-24 16:03:20 -05:00
69c31fcf3e
uses github.com/openziti/edge-api
...
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
8563490cd8
Fix identity links. Fixes #1233 . Fixes #1234
2022-11-16 16:15:12 -05:00
Andrew