Commit Graph

  • 1f89acca65 Let go test time out before the CI step so hung tests produce a goroutine dump. For #4365 legacy-api-session-activity Paul Lorenz 2026-09-09 18:39:33 -04:00
  • 9c9ee0d1be Mark the api session enforcer delete meter on every delete attempt. Fixes #4380 backport/v1.6.x-policy-enforcer-metric-refs Paul Lorenz 2026-09-09 18:16:47 -04:00
  • f20e9c3a19 Mark the api session enforcer delete meter on every delete attempt. Fixes #4379 backport/v2.0.x-api-session-enforcer-delete-meter Paul Lorenz 2026-09-09 18:16:47 -04:00
  • e134383b29 Mark the api session enforcer delete meter on every delete attempt. Fixes #4378 fix/api-session-enforcer-delete-meter Paul Lorenz 2026-09-09 18:16:47 -04:00
  • 0b7bdbc884 Merge pull request #4354 from openziti/backport/v2.0.x-policy-enforcer-metric-refs release-v2.0.x Paul Lorenz 2026-09-09 18:14:49 -04:00
  • 110db6623b Merge pull request #4353 from openziti/fix/policy-enforcer-metric-refs main Paul Lorenz 2026-09-09 17:37:48 -04:00
  • 8e9bfb21fc Restore legacy API session activity marking for REST requests. Fixes #4367 legacy-api-session-activity-2.0 Paul Lorenz 2026-09-08 14:26:51 -04:00
  • f1264086d4 Restore legacy API session activity marking for REST requests. Fixes #4365 Paul Lorenz 2026-09-08 14:26:51 -04:00
  • 117f1aa107 Merge pull request #4372 from openziti/ctrl-event-ordering-2.0 Paul Lorenz 2026-09-09 16:58:17 -04:00
  • 926a52c062 Merge pull request #4370 from openziti/ctrl-event-ordering Paul Lorenz 2026-09-09 16:50:44 -04:00
  • 4ae599e4fe Merge pull request #4358 from openziti/backport-2.0/posture-cache-eviction Paul Lorenz 2026-09-09 16:46:19 -04:00
  • 65de567eb1 Merge pull request #4356 from openziti/fix/posture-cache-eviction Paul Lorenz 2026-09-09 16:46:03 -04:00
  • cbe91314c0 Update CHANGELOG backport-2.0-admin-mfa-removal Christopher Britton 2026-08-24 15:00:19 -04:00
  • 6e5ea1fc35 Replicate admin MFA removal across HA cluster members (#4284) Christopher Britton 2026-08-24 14:46:51 -04:00
  • e67f27999b Bump the third-party group across 1 directory with 15 updates dependabot/go_modules/third-party-0b2546e07c dependabot[bot] 2026-09-09 15:23:57 +00:00
  • 15ce9d2b60 Bump the openziti group across 1 directory with 2 updates dependabot/go_modules/openziti-309c87373c dependabot[bot] 2026-09-09 15:22:53 +00:00
  • 27da55a9f8 e2ee improvements: add changelog entry e2ee.crypto.exchange.v2.0-4373 eugene 2026-05-26 14:58:07 -04:00
  • 8953c7f068 e2ee improvements eugene 2026-05-18 12:39:24 -04:00
  • 9e3d5a1993 Deliver router ctrl events to each listener in order. Fixes #4371 Paul Lorenz 2026-09-08 15:25:02 -04:00
  • 64e8910a87 Deliver router ctrl events to each listener in order. Fixes #4369 Paul Lorenz 2026-09-08 15:25:02 -04:00
  • b4f6223ad1 fixes openziti/ziti#4321 compare process hashes and fingerprints case… (#4344) Andrew Martinez 2026-09-08 18:45:15 +01:00
  • d51acff74b backport openziti/ziti#4321 to release-v2.0.x compare process hashes … (#4345) Andrew Martinez 2026-09-08 16:45:35 +01:00
  • f01dab81e0 Bump the all group across 1 directory with 5 updates dependabot/github_actions/all-ba47c57ff8 dependabot[bot] 2026-09-07 15:27:06 +00:00
  • 5e883cbce2 Bump portainer/kubectl-shell dependabot/docker/dist/docker-images/ziti-cli/all-a0bdbbf4c5 dependabot[bot] 2026-09-07 15:23:24 +00:00
  • 6e4d899950 Bump github.com/zitadel/oidc/v3 from 3.49.2 to 3.49.6 dependabot/go_modules/github.com/zitadel/oidc/v3-3.49.6 dependabot[bot] 2026-09-07 15:22:46 +00:00
  • b7178ef995 Evict posture data for disconnected api sessions. Fixes #4357 Paul Lorenz 2026-09-01 14:51:52 -04:00
  • 33eea80f33 Evict posture data for disconnected api sessions. Fixes #4323 Paul Lorenz 2026-09-01 14:51:52 -04:00
  • b271a9e48d Merge pull request #4343 from openziti/xgress-terminator-half-close-test Paul Lorenz 2026-09-03 21:34:56 -04:00
  • 5188a018d1 Merge pull request #4317 from openziti/backport-2.0/posture-process-list-handling Paul Lorenz 2026-09-03 21:33:35 -04:00
  • 040942f938 Merge pull request #4315 from openziti/fix/posture-process-list-handling Paul Lorenz 2026-09-03 21:33:29 -04:00
  • b6f29d37ae Hold the policy enforcers' meters rather than resolving one per run. Fixes #4350 Paul Lorenz 2026-09-03 17:18:29 -04:00
  • ebbf8684a6 Hold the policy enforcers' meters rather than resolving one per run. Fixes #4350 Paul Lorenz 2026-09-03 17:18:29 -04:00
  • 49fdd2c0a1 Hold the policy enforcers' meters rather than resolving one per run. Fixes #4350 Paul Lorenz 2026-09-03 17:18:29 -04:00
  • 53a231fa60 Bound and instrument the wait for a router connect setup gossip-links Paul Lorenz 2026-09-03 10:12:50 -04:00
  • 9492eaa524 Exercise router delete and recreate in the links test Paul Lorenz 2026-09-02 13:34:03 -04:00
  • dc777e0131 Report clock skew between gossip peers Paul Lorenz 2026-09-01 13:25:53 -04:00
  • 3b59bfb95e Clean up every per-router store when a router is deleted Paul Lorenz 2026-08-31 16:04:07 -04:00
  • 1e29dafc93 Add gossip design docs and changelog entries Paul Lorenz 2026-08-08 22:38:39 -04:00
  • 2b66e3b2b8 Add a links-test model for exercising gossip link state at scale Paul Lorenz 2026-08-08 22:38:21 -04:00
  • d562afe1d1 Detect slow control channel handlers, off unless configured on Paul Lorenz 2026-08-08 22:36:18 -04:00
  • 2d9a26afe2 Add inspect targets and a validate-gossip command for replicated link state Paul Lorenz 2026-08-08 22:33:51 -04:00
  • a0631b46c9 Filter metrics on the name they are emitted under, and keep mapper registration internal Paul Lorenz 2026-08-08 22:32:29 -04:00
  • bdab4b4aba Report host CPU and memory as metrics Paul Lorenz 2026-08-08 22:31:50 -04:00
  • 9595e10cfa Replicate link state over gossip. Fixes #3726 Paul Lorenz 2026-08-08 22:30:31 -04:00
  • c8fdc2d807 Label a link's conn state with the iteration its connections were read at Paul Lorenz 2026-08-08 22:23:23 -04:00
  • 1d4c666484 Add a gossip protocol and replicated state store Paul Lorenz 2026-08-08 22:20:50 -04:00
  • 41afd70917 fixes openziti/ziti#4318 guard mac and domain posture checks against unreported data (#4325) Andrew Martinez 2026-09-03 16:13:31 +01:00
  • c869040201 Close ER/T dial circuits when the router loses dial access. Fixes #4332 backport.v2.0.x.fix.openziti.ziti.4332.ert-close-circuits-on-dial-access-loss Paul Lorenz 2026-09-02 16:34:51 -04:00
  • fa86bc13d7 backport openziti/ziti#4318 to release-v2.0.x guard mac and domain posture checks against unreported data (#4326) Andrew Martinez 2026-09-03 14:53:17 +01:00
  • 2815adb601 Cover an xgress terminator half-closing to a legacy edge client. For #4338 Paul Lorenz 2026-09-02 21:55:53 -04:00
  • b09af292f3 Relay an xgress terminator's half-close to edge clients. Fixes #4340 backport.v1.6.x.fix.openziti.ziti.4340.xgress-terminator-half-close Paul Lorenz 2026-09-02 21:55:44 -04:00
  • 5d4a5fb364 Relay an xgress terminator's half-close to edge clients. Fixes #4339 backport.v2.0.x.fix.openziti.ziti.4339.xgress-terminator-half-close Paul Lorenz 2026-09-02 21:55:44 -04:00
  • e1561aed54 fixes openziti/ziti#4319 os posture check with no versions passes at the router (#4324) Andrew Martinez 2026-09-02 23:34:41 +01:00
  • b1454c6d63 fixes openziti/ziti#4320 normalize reported MAC addresses on the router (#4328) Andrew Martinez 2026-09-02 23:34:26 +01:00
  • 86c0c8928e fixes openziti/ziti#4319 os posture check with no versions passes at the router (#4329) Andrew Martinez 2026-09-02 23:34:15 +01:00
  • 9a5085cc65 backport openziti/ziti#4320 to release-v2.0.x normalize reported MAC addresses on the router (#4334) Andrew Martinez 2026-09-02 23:34:12 +01:00
  • a205fdb55f Collect controller events on the test goroutine Paul Lorenz 2026-08-28 21:21:16 -04:00
  • d5d9d936d1 Index links by router id, and serialize the two structures that index. Fixes #4246 Paul Lorenz 2026-08-28 21:21:15 -04:00
  • 3e93acad13 Add LockedSet to common/concurrency Paul Lorenz 2026-08-28 21:21:15 -04:00
  • 6c968b1ed0 Deprecate creating a router outside enrollment Paul Lorenz 2026-08-31 16:04:56 -04:00
  • 3f83d1be19 Close ER/T dial circuits when the router loses dial access. Fixes #4336 backport.v1.6.x.fix.openziti.ziti.4336.ert-close-circuits-on-dial-access-loss Paul Lorenz 2026-09-02 17:11:12 -04:00
  • 8b8209f105 Close ER/T dial circuits when the router loses dial access. Fixes #4330 fix/ert-close-circuits-on-dial-access-loss Paul Lorenz 2026-09-02 09:40:00 -04:00
  • a6a20db6ec Merge pull request #3832 from openziti/dependabot/docker/dist/docker-images/ziti-controller/all-e76bae1def Clint Dovholuk 2026-09-02 16:14:01 -04:00
  • b623481c3e backport openziti/ziti#4118 to release-v2.0.x serve the overlapping-kid ext-jwt test's jwks endpoints over loopback http (#4333) Andrew Martinez 2026-09-02 17:01:54 +01:00
  • 567920d786 go mod tidy (#4327) Andrew Martinez 2026-09-01 20:50:42 +01:00
  • d05f85d3d8 Fix router posture process-list response handling. Fixes #4316 Paul Lorenz 2026-09-01 14:22:57 -04:00
  • 05a3ae7660 Fix router posture process-list response handling. Fixes #4314 Paul Lorenz 2026-09-01 14:22:57 -04:00
  • 1b2ea0c224 Merge pull request #3836 from openziti/oidc-auth-test Paul Lorenz 2026-08-31 22:39:24 -04:00
  • a2202ae429 Apply managed link heartbeat and queue settings at runtime. For #3743 router-link-runtime-config Paul Lorenz 2026-07-02 16:29:25 -04:00
  • 030e0483e2 Auto-GC stale router links. Fixes #4005 router-link-gc Paul Lorenz 2026-08-29 14:36:43 -04:00
  • 444c4fe626 Merge pull request #4290 from openziti/wss-nocert-2.0.x Paul Lorenz 2026-08-31 21:43:38 -04:00
  • d3e7f88e53 Add the 2.0.5 CHANGELOG section. For #4289 Paul Lorenz 2026-08-31 16:00:17 -04:00
  • 6d8c4ad6e7 Don't require a client cert on TLS layers that don't request one. Fixes #4202 Paul Lorenz 2026-08-04 00:43:02 -04:00
  • ec56d6b7ba Merge pull request #4309 from openziti/fix/server-close-listener-test-race Paul Lorenz 2026-08-31 14:43:54 -04:00
  • d0c9699b3e Assert routers are actually back up after a recovery restart Paul Lorenz 2026-08-28 22:16:50 -04:00
  • e8b42b89ae Add OIDC auth fablab test and supporting test infrastructure Paul Lorenz 2026-07-02 16:08:34 -04:00
  • 6313560a57 Collect controller events on the test goroutine link-table-router-index Paul Lorenz 2026-08-28 21:21:16 -04:00
  • 7aa8100444 Index links by router id, and serialize the two structures that index. Fixes #4246 Paul Lorenz 2026-08-28 21:21:15 -04:00
  • 6a9ef65327 Add LockedSet to common/concurrency Paul Lorenz 2026-08-28 21:21:15 -04:00
  • 99a0ed6606 change log updates for v2.0.4 v2.0.4 Andrew Martinez 2026-08-28 16:57:20 +01:00
  • 740f2a95a6 Load revocations when rebuilding the router data model. Fixes #4102 fix-rdm-buildall-missing-revocations Paul Lorenz 2026-07-14 17:00:46 -04:00
  • 977665f771 Wait for the hosting side before tearing down the listener-close test backport/v2.0.x-listener-close-test-race Paul Lorenz 2026-08-27 14:37:51 -04:00
  • d86161e3cb Merge pull request #4300 from openziti/backport.v2.0.x.fix.openziti.ziti.4296.cost-header-panic Paul Lorenz 2026-08-27 15:02:42 -04:00
  • a71b6bdedd Merge remote-tracking branch 'origin/release-v2.0.x' into backport.v2.0.x.fix.openziti.ziti.4296.cost-header-panic Paul Lorenz 2026-08-27 15:00:51 -04:00
  • 4445da1f8f Wait for the hosting side before tearing down the listener-close test Paul Lorenz 2026-08-27 14:37:51 -04:00
  • aff1038519 Merge commit from fork Andrew Martinez 2026-08-27 18:34:27 +01:00
  • 913b58757a Merge commit from fork Andrew Martinez 2026-08-27 18:34:26 +01:00
  • a05d5c9123 serve the overlapping-kid ext-jwt test's jwks endpoints over loopback http fix.jwks.tests Andrew Martinez 2026-08-27 11:18:53 -04:00
  • 9da313139d Merge pull request #4182 from openziti/backport.2.0.x.issue.3891 Clint Dovholuk 2026-08-27 10:23:39 -04:00
  • d0bf9baa1d Merge remote-tracking branch 'origin/release-v2.0.x' into backport.2.0.x.issue.3891 dovholuknf 2026-08-27 10:23:25 -04:00
  • fa1aec891f Merge pull request #4181 from openziti/backport.2.0.x.issue.3914 Clint Dovholuk 2026-08-27 10:20:43 -04:00
  • eb425c8d2c merge release-v2.0.x: move changelog entry to 2.0.4, keep both testdata readme sections dovholuknf 2026-08-26 16:35:41 -04:00
  • e210773d2b merge release-v2.0.x and move changelog entry dovholuknf 2026-08-26 16:34:09 -04:00
  • f626c1254b backport openziti/ziti#4222 to release-v1.6.x report isCertExtendable correctly for OIDC cert auth (#4225) release-v1.6.x Andrew Martinez 2026-08-26 21:11:01 +01:00
  • 08145805d0 Backport.v2.0.x.fix.openziti.ziti.4118.ext jwt kid collision (#4192) Andrew Martinez 2026-08-26 21:03:00 +01:00
  • e7cb15d632 backport openziti/ziti#4222 to release-v2.0.x report isCertExtendable correctly for OIDC cert auth (#4226) Andrew Martinez 2026-08-26 20:59:37 +01:00
  • 991ccffbdd fixes openziti/ziti#4222 report isCertExtendable correctly for OIDC cert auth (#4224) Andrew Martinez 2026-08-26 20:59:17 +01:00
  • adb94da27a align router checks to logic from the controller posture-bug dovholuknf 2026-08-26 15:49:07 -04:00
  • b79da5c45c initial test attempt dovholuknf 2026-08-26 10:15:10 -04:00
  • 8c919dfbe2 backport openziti/ziti#4094 to release-v2.0.x accept first-party certs issued by a separate edge signing CA (#4153) Andrew Martinez 2026-08-26 19:43:34 +01:00