8a875ea91e
Update deps and changelog
2025-09-19 16:47:48 -04:00
c4b89e9d01
fixes #2904 limit client certs requested/allowed ( #2974 )
...
* fixes #2904 limit client certs requested/allowed
Some clients (browsers) show a popup when interacting with our TLS
servers and a pop-up or other UI to select certificates for
interacting with our server. If not limited, this causes any client cert
available to be shown, allowing the user to choose a certificate
that will never work. This fix limits the issuer's allowed so the popup
never appears or only appears with viable options.
- use new xweb to modify server TLS configs with static and 3rd party
CAs
- centralize CA certificates for re-use
2025-04-11 14:33:21 -04:00
e647d67325
Update to channel/v4
2025-04-02 15:28:59 -04:00
56daae2025
fixes #2796 generated clients for enrollment do not work ( #2883 )
...
* fixes #2796 generated clients for enrollment do not work
- default behavior complies with OpenAPI spec, but allows for legacy PEM
handling through middleware intervention
- adds test for generic enrollment endpoint and for specific enrollment
endpoints
2025-03-17 10:05:15 -04:00
d178caefc7
Fix places where controller init is mentioned
2025-02-05 17:10:35 -05:00
c2162ea9a9
Add cluster id, to prevent merging disparate clusters. Fixes #2541
2024-11-14 12:34:17 -05:00
6e1983991d
Fixes from testing
2024-11-01 15:21:01 -04:00
16f0a858e6
Add controller connect events. Fixes #1835 . Fixes #2234
2024-11-01 15:21:01 -04:00
cccf0c06af
Update to channel/v3. Fixes #2390
2024-09-09 12:23:25 -04:00
b8f944326f
Ensure controller is initialized before raft. Fixes #2279
2024-08-01 14:14:55 -04:00
0945427320
Migrated edge router tunneler code to use the router data model. Fixes #2121
2024-07-26 17:06:01 -04:00
77d27ca781
Enhance the router data model with config information, fixes #2010 Add subscription model to router data model, fixes #1990
2024-07-17 14:31:39 -04:00
00aa6ed625
Fix set of empty roles from CLI. Fixes #785
...
Also includes removal of an unused method
2024-07-11 13:19:59 -04:00
c3b43133d1
Merge fabric and controller model code. Fixes #2205
2024-07-09 16:11:01 -04:00
c78ab3d64d
Merge pull request #1941 from openziti/de-hyphenate-ziti-controller
...
de-hyphenate old mentions of ziti-controller as 'ziti controller'
2024-04-30 09:08:31 -04:00
a0245e5cd3
Allow ER/T to intercept services w/out sessions when in HA mode. Fixes #1942
2024-04-16 15:11:00 -04:00
d16ec86d10
de-hyphenate old mentions of ziti-controller as 'ziti controller'
2024-04-12 20:21:20 -04:00
1e17a70d3f
Don't allow session sync to block channel. Fixes #1849
2024-03-20 14:02:18 -04:00
09542c7728
consolidated ha changes
2024-02-29 09:27:56 -05:00
744ae68bbd
Fix controller crash. Fixes #1736
2024-02-08 21:55:48 -05:00
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
b12f1d33f5
Add CreateTerminatorV2 flow for edge terminators. Fixes #1619
2023-09-27 17:32:44 -04:00
07da3cd513
Merge remote-tracking branch 'edge/main' into merge-edge
...
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
5b59ae13ee
Update for moved packages in fabric
2023-08-23 09:40:05 -04:00
dba0fb6f7c
Move protobufs to common
2023-08-04 17:01:15 -04:00
f368b631b0
Merge remote-tracking branch 'origin/main' into prep-for-ziti-merge-p1
2023-08-04 16:26:16 -04:00
7d6f4ef700
Reorganize code in preparation for merging to ziti repo, first pass.
2023-08-04 09:48:06 -04:00
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
b09af68d09
Update edge test for fabric api update. Remove unneeded cgo import.
2023-03-17 11:55:38 -04:00
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
63e0d9663e
Support multiple routers in router edge extensions
2022-09-30 09:34:04 -04:00
32c197e5e1
Update to channel v2
2022-09-26 18:20:00 -04:00
0b8a65207a
Change bootstrap check. Add hooks for isRaftEnabled
2022-08-22 12:14:40 -04:00
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
0014b39f7e
update xweb to v2
2022-06-06 14:33:42 -04:00
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
3380807334
adds ext-jwt authenticator
...
- enables /authenticate?method=ext-jwt
- adds ext-jwt to OpenAPI schema
- rebase to main, squash
2022-03-08 10:01:38 -05:00
5be9095e60
Update to use channel library
2022-01-28 11:35:15 -05:00
3f69bfdd43
Update for control channel API changes
2022-01-19 08:37:40 -05:00
1f784d89ce
adds asynchronous eventer to controller
...
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00
fd866e7f3d
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-13 12:38:54 -05:00
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
bfcb037783
Initial pass at fabric rest api working ( #838 )
...
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
050d5eb0dc
fix possible formatting error
2021-10-19 11:31:31 -04:00
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
01ed7b8a1c
Add policy engine start back in
2021-06-08 12:42:08 -04:00
6625084569
use xweb for Edge Client and Management APIs
...
- use xweb for run
- use xweb for api tests
- use time.ParseDuration for edge configuration
- use CORS defaults in Client/Management API handlers
2021-05-06 16:45:48 -04:00
Paul Lorenz