Commit Graph

6784 Commits

Author SHA1 Message Date
Kenneth Bingham fedbb42bb2 update container readme files 2024-04-12 18:39:28 -04:00
Kenneth Bingham d1a6ed3947 don't bootstrap by default 2024-04-12 17:11:05 -04:00
Kenneth Bingham c9b349afff separate service.env (configure the service) and bootstrap.env (configure the bootstrapper) 2024-04-12 17:11:04 -04:00
Kenneth Bingham 7e2222d5b8 install iproute,libbpf in router container image 2024-04-12 17:10:26 -04:00
Kenneth Bingham 45d319b54f add Linux packages and container bootstrapping for controller and router 2024-04-11 11:54:36 -04:00
Paul Lorenz fd8bc0f7df Merge pull request #1924 from openziti/validate-release-wf
Add release validation workflow. Fixes #1923
2024-04-10 15:07:01 -04:00
Paul Lorenz 0ec0dec58d Update changelog, deps and make the tls handshake rate limiter off by default 2024-04-10 14:09:48 -04:00
dovholuknf e72d84be08 Merge pull request #1925 from openziti/revert-oidc-endpoint
remove oidc endpoint from controller config gen for now
2024-04-10 10:11:57 -04:00
dovholuknf 24a8ab9904 remove oidc endpoint from controller config gen for now 2024-04-10 10:10:29 -04:00
Paul Lorenz 1b2e85b762 Set version to 1.0 2024-04-09 19:48:25 -04:00
Paul Lorenz ff8d70e418 Move rate limiter logging to debug 2024-04-09 19:48:25 -04:00
Paul Lorenz 9bad1d4fb0 Add release validation workflow. Fixes #1923 2024-04-09 19:48:25 -04:00
Paul Lorenz dde5e87599 Merge pull request #1905 from openziti/add-tls-handshake-limiter
Add TLS handshake rate limiter. Fixes #1904
2024-04-09 19:10:19 -04:00
Paul Lorenz 8f4f9944f5 Add TLS handshake rate limiter. Fixes #1904 2024-04-09 17:25:35 -04:00
Paul Lorenz ece25541ba Merge pull request #1906 from openziti/ctrl-load-test
Load test for controller with links, terminators, clients and traffic
2024-04-09 17:24:18 -04:00
Paul Lorenz 3d81cc39a4 Load test for controller with links, terminators, clients and traffic 2024-04-09 16:58:18 -04:00
Paul Lorenz 88570658c2 Merge pull request #1920 from openziti/rename-simple-transfer-to-smoketest
Rename simple-transfer to smoketest
2024-04-09 16:45:55 -04:00
Paul Lorenz ffa39a6805 Merge pull request #1922 from openziti/cli-tidy
Do some CLI tidying. Fixes #1921
2024-04-09 16:22:17 -04:00
Paul Lorenz 91921bea8c Do some CLI tidying. Fixes #1921
* Remove version, use, install and upgrade commands
* Replace version with command which outputs CLI version
* Remove redundant version commands
* Remove ziti fabric add/remove-identity commands
* Remove lots of unused code
* Remove 'ziti tunnel enroll' command, which is replaced by 'ziti edge enroll'
2024-04-09 14:39:59 -04:00
Shawn Carey 4dfdabff8c respect service policies for admin identities (#1919)
respect service policies for admin identities
2024-04-09 14:34:15 -04:00
Paul Lorenz 1772cf9ba1 Rename simple-transfer to smoketest 2024-04-09 14:27:11 -04:00
Paul Lorenz 6be77e96a5 Merge pull request #1903 from openziti/use-cmap-itercb
Use cmap IterCB instead of IterBuffered where possible. Fixes #1902
2024-04-09 13:25:44 -04:00
Paul Lorenz 9413e39c5d Merge pull request #1918 from openziti/dependabot/go_modules/openziti-6bb003213b
Bump the openziti group with 7 updates
2024-04-09 13:25:30 -04:00
Paul Lorenz 3a12eee5ad Merge pull request #1901 from openziti/better-link-mgmt-backwards-compat
Improve link mgmt backwards compatibility. Fixes #1900
2024-04-09 13:24:55 -04:00
dependabot[bot] 2652aaffb5 Bump the openziti group with 7 updates
Bumps the openziti group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/openziti/channel/v2](https://github.com/openziti/channel) | `2.0.122` | `2.0.125` |
| [github.com/openziti/foundation/v2](https://github.com/openziti/foundation) | `2.0.40` | `2.0.42` |
| [github.com/openziti/identity](https://github.com/openziti/identity) | `1.0.73` | `1.0.74` |
| [github.com/openziti/metrics](https://github.com/openziti/metrics) | `1.2.48` | `1.2.49` |
| [github.com/openziti/runzmd](https://github.com/openziti/runzmd) | `1.0.41` | `1.0.42` |
| [github.com/openziti/storage](https://github.com/openziti/storage) | `0.2.33` | `0.2.34` |
| [github.com/openziti/transport/v2](https://github.com/openziti/transport) | `2.0.125` | `2.0.128` |


Updates `github.com/openziti/channel/v2` from 2.0.122 to 2.0.125
- [Commits](https://github.com/openziti/channel/compare/v2.0.122...v2.0.125)

Updates `github.com/openziti/foundation/v2` from 2.0.40 to 2.0.42
- [Commits](https://github.com/openziti/foundation/compare/v2.0.40...v2.0.42)

Updates `github.com/openziti/identity` from 1.0.73 to 1.0.74
- [Commits](https://github.com/openziti/identity/compare/v1.0.73...v1.0.74)

Updates `github.com/openziti/metrics` from 1.2.48 to 1.2.49
- [Commits](https://github.com/openziti/metrics/compare/v1.2.48...v1.2.49)

Updates `github.com/openziti/runzmd` from 1.0.41 to 1.0.42
- [Commits](https://github.com/openziti/runzmd/compare/v1.0.41...v1.0.42)

Updates `github.com/openziti/storage` from 0.2.33 to 0.2.34
- [Commits](https://github.com/openziti/storage/compare/v0.2.33...v0.2.34)

Updates `github.com/openziti/transport/v2` from 2.0.125 to 2.0.128
- [Commits](https://github.com/openziti/transport/compare/v2.0.125...v2.0.128)

---
updated-dependencies:
- dependency-name: github.com/openziti/channel/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: openziti
- dependency-name: github.com/openziti/foundation/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: openziti
- dependency-name: github.com/openziti/identity
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: openziti
- dependency-name: github.com/openziti/metrics
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: openziti
- dependency-name: github.com/openziti/runzmd
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: openziti
- dependency-name: github.com/openziti/storage
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: openziti
- dependency-name: github.com/openziti/transport/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: openziti
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-09 15:04:02 +00:00
Paul Lorenz 86690ec385 Merge pull request #1917 from openziti/fix-sdk-dial-ha
Fix SDK dial error when 'token is malformed'. Api session JWT wasn't being forward to controller. Fixes #1916
2024-04-08 23:12:01 -04:00
Paul Lorenz 103cde6d49 Fix SDK dial error when 'token is malformed'. Api session JWT wasn't being forward to controller. Fixes #1916 2024-04-08 22:42:25 -04:00
Paul Lorenz 6d7b71cd07 Merge pull request #1908 from openziti/dependabot/github_actions/all-6e2c59d6d4
Bump lewagon/wait-on-check-action from 1.3.3 to 1.3.4 in the all group
2024-04-08 14:17:58 -04:00
Paul Lorenz b59ee0270b Merge pull request #1912 from openziti/dependabot/go_modules/third-party-6568ddfc3a
Bump the third-party group with 6 updates
2024-04-08 14:16:54 -04:00
Paul Lorenz a6ec19f0c7 Merge pull request #1915 from openziti/fix-ha-ctrl-panic
Fix ha ctrl panics
2024-04-08 14:16:12 -04:00
Paul Lorenz 873f3c5055 Merge pull request #1899 from openziti/optimize-network-run-loop
Optimize network run loop. Fixes #1897
2024-04-08 12:43:27 -04:00
Paul Lorenz 95c7bd5043 Merge pull request #1898 from openziti/single-link-status
Don't save old link statues in memory, the info is in link events. Fi…
2024-04-08 12:43:03 -04:00
Paul Lorenz 3bdf2634cc Fix panic on first ha controller startup. Fixes #1911 2024-04-08 12:31:35 -04:00
Paul Lorenz 84711f460a Fix panic in PeerConnected. Fixes #1914 2024-04-08 12:31:18 -04:00
dependabot[bot] b8328f48a4 Bump the third-party group with 6 updates
Bumps the third-party group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/hashicorp/go-hclog](https://github.com/hashicorp/go-hclog) | `1.6.2` | `1.6.3` |
| [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty) | `6.5.6` | `6.5.8` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.21.0` | `0.22.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.22.0` | `0.24.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.6.0` | `0.7.0` |
| gopkg.in/AlecAivazis/survey.v1 | `1.8.7` | `1.8.8` |


Updates `github.com/hashicorp/go-hclog` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/hashicorp/go-hclog/releases)
- [Commits](https://github.com/hashicorp/go-hclog/compare/v1.6.2...v1.6.3)

Updates `github.com/jedib0t/go-pretty/v6` from 6.5.6 to 6.5.8
- [Release notes](https://github.com/jedib0t/go-pretty/releases)
- [Commits](https://github.com/jedib0t/go-pretty/compare/v6.5.6...v6.5.8)

Updates `golang.org/x/crypto` from 0.21.0 to 0.22.0
- [Commits](https://github.com/golang/crypto/compare/v0.21.0...v0.22.0)

Updates `golang.org/x/net` from 0.22.0 to 0.24.0
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.24.0)

Updates `golang.org/x/sync` from 0.6.0 to 0.7.0
- [Commits](https://github.com/golang/sync/compare/v0.6.0...v0.7.0)

Updates `gopkg.in/AlecAivazis/survey.v1` from 1.8.7 to 1.8.8

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-hclog
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: third-party
- dependency-name: github.com/jedib0t/go-pretty/v6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: third-party
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: third-party
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: third-party
- dependency-name: golang.org/x/sync
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: third-party
- dependency-name: gopkg.in/AlecAivazis/survey.v1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: third-party
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 16:18:24 +00:00
Paul Lorenz 22dbb7b1b5 Merge pull request #1910 from openziti/circuit-id-in-dial
circuit id in dial
2024-04-08 12:16:59 -04:00
Paul Lorenz 15fe799152 Update deps and changelog 2024-04-08 11:46:34 -04:00
Paul Lorenz 499aa519dd Return circuit id to client dial responses and hosting dial requests. Fixes #1831 2024-04-08 11:41:45 -04:00
dependabot[bot] 9ccdbe899a Bump lewagon/wait-on-check-action from 1.3.3 to 1.3.4 in the all group
Bumps the all group with 1 update: [lewagon/wait-on-check-action](https://github.com/lewagon/wait-on-check-action).


Updates `lewagon/wait-on-check-action` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/lewagon/wait-on-check-action/releases)
- [Commits](https://github.com/lewagon/wait-on-check-action/compare/v1.3.3...v1.3.4)

---
updated-dependencies:
- dependency-name: lewagon/wait-on-check-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 15:25:17 +00:00
dovholuknf 954b229ccf Merge pull request #1887 from RockfieldIT/release-next
Admission from Rockfield IT OpenZiti Adopters:
2024-04-06 19:07:31 -04:00
Patrick Woodlock 6be0de2007 signed 2024-04-06 23:11:10 +01:00
Paul Lorenz d62e3cb71f Use cmap IterCB instead of IterBuffered where possible. Fixes #1902 2024-04-04 21:27:38 -04:00
Paul Lorenz ad779ed118 Improve link mgmt backwards compatibility. Fixes #1900
* We're sending peer change messages to older routers that don't understand them.
* We should probably use the older controller link management code for routers without the link management stability fixes
* Includes a few minor cleanups
2024-04-04 19:07:24 -04:00
Paul Lorenz 8d11af3d97 Optimize network run loop. Fixes #1897
* When routers change (connect/disconnect), we re-check the mesh. We are passing in the routers to the channel and they can build up, which is unnecessary. We only need to signal once for all the routers that change since the last time we checked, that the mesh needs to be checked.
* We pass link changes through the run method, which is unnecessary since we pass it to a new goroutine. This inefficiency should be fixed.
* We're evaluating all faulted links for rerouting, even if they were still pending. Only reroute connected links.
* We're using time.After in each for loop, which can accumulate timers. Use a single Ticker instead.
2024-04-04 18:46:50 -04:00
Paul Lorenz aaceb84a0f Don't save old link statues in memory, the info is in link events. Fixes #1896 2024-04-04 18:18:35 -04:00
Patrick Woodlock 918a598d33 Admission from Rockfield IT OpenZiti Adopters: 2024-03-30 17:42:28 +00:00
dovholuknf 9db4a30d4e Merge pull request #1886 from openziti/add-grc4ciso-to-adopters
add grc4ciso to adopters
2024-03-29 08:30:23 -04:00
dovholuknf 5a56a1886e add grc4ciso to adopters
Signed-off-by: dovholuknf <46322585+dovholuknf@users.noreply.github.com>
2024-03-29 08:13:46 -04:00
Paul Lorenz 355f415f8d Merge pull request #1879 from openziti/fix-host-duration-parsing
Fix duration parsing for host configs. Fixes #1873
2024-03-28 21:24:18 -04:00
Kenneth Bingham a2ff3a6433 Merge pull request #1880 from openziti/use-go-mod-version
use Go version from go.mod
2024-03-28 16:20:27 -04:00