Commit Graph

  • 0cefe735db Copy terminator peer data and instance secret out of bolt memory. Fixes #4108 Paul Lorenz 2026-07-15 17:00:39 -04:00
  • ad844fe55b Merge pull request #4101 from openziti/ignore-revocation-timestamps-rdm-diff-2.0.x v2.0.1 Paul Lorenz 2026-07-15 10:09:40 -04:00
  • 3187db726a Load revocations when rebuilding the router data model. For #4102 Paul Lorenz 2026-07-14 17:02:45 -04:00
  • b3a8b32952 Ignore revocation timestamps in RDM diff pending deterministic timestamps. For #4088 Paul Lorenz 2026-07-14 12:46:53 -04:00
  • 4a8b63d99d fix(oidc_auth): hex-encode peer signer kid in KeySet() (#4068) Björn Mage 2026-07-07 20:23:06 -04:00
  • 03e3e2f945 Use latest ZET release for release integration tests now that Latest >= 1.17 (#4092) Christopher Britton 2026-07-07 08:01:44 -04:00
  • 35c78c834b Merge pull request #4090 from openziti/backport.v2.0.x.fix.issue.4083 Clint Dovholuk 2026-07-06 10:08:14 -04:00
  • 721dbfac43 fix indentation dovholuknf 2026-07-06 09:27:21 -04:00
  • 5fe044454f add better ipsans detection to bootstrap.bash dovholuknf 2026-07-06 09:24:00 -04:00
  • 45b5046f52 fixes openziti/ziti#4071 unify router capabilities into one shared namespace (#4073) Andrew Martinez 2026-07-02 17:02:34 -04:00
  • ba9060ae2b Mark router disconnected before rerouting its links. Fixes #4079 Paul Lorenz 2026-07-02 15:53:23 -04:00
  • 604ff75082 Merge pull request #3999 from openziti/router-config-registry Paul Lorenz 2026-07-02 15:47:24 -04:00
  • 92b070b758 Add router-side managed configuration registry. Fixes #3998 Paul Lorenz 2026-06-16 23:27:22 -04:00
  • 4859a3f8a9 Merge pull request #4074 from openziti/issue-4069-apiaddresses-startup-race Paul Lorenz 2026-07-02 11:27:59 -04:00
  • f65beed490 Merge pull request #4075 from openziti/backport.v2.0.x.fix.openziti.ziti.4070.apiaddresses-startup-race Paul Lorenz 2026-07-02 10:43:10 -04:00
  • 4d3b303f65 Defer xweb initialized signal until config is loaded. Fixes #4069 Paul Lorenz 2026-07-01 17:38:46 -04:00
  • 4a970c6b0a Merge pull request #4058 from openziti/fix-rdm-validate-proto-panic Paul Lorenz 2026-07-02 10:17:47 -04:00
  • acccb37a5e Merge pull request #4059 from openziti/fix-rdm-validate-proto-panic-2.0.x Paul Lorenz 2026-07-02 10:04:40 -04:00
  • 51de712ffb Add CHANGELOG entry for apiAddresses startup race fix. For #4070 Paul Lorenz 2026-07-02 09:58:21 -04:00
  • 3943a6a55c Defer xweb initialized signal until config is loaded. Fixes #4070 Paul Lorenz 2026-07-01 17:38:46 -04:00
  • a9a1ebf602 Merge pull request #4072 from openziti/issue-4066 Clint Dovholuk 2026-07-02 07:37:37 -04:00
  • f4789da02d use abs paths for zac location and add zac to the join hint dovholuknf 2026-07-02 07:11:24 -04:00
  • 5dbd41ea19 generic hostname dovholuknf 2026-07-01 16:17:30 -04:00
  • 3169585bf7 lint fix dovholuknf 2026-07-01 15:43:49 -04:00
  • 2d2f760161 add zac to the cluster banner too dovholuknf 2026-07-01 15:36:36 -04:00
  • 56dceb15f7 continued review, cleanup name dovholuknf 2026-07-01 14:26:39 -04:00
  • 3969df3b6e refinements after initial review. tweak comments and changelog dovholuknf 2026-07-01 13:45:03 -04:00
  • 74adfab303 allow bootstraping the zac with quickstart as well dovholuknf 2026-07-01 13:29:00 -04:00
  • 9e5fa89892 Merge pull request #4061 from openziti/issue-4060-add-ext-jwt-signer-to-verify-traffic Clint Dovholuk 2026-07-01 08:05:44 -04:00
  • 2923d6345f remove fatal, prefer returning an error. cleanup jwt parsing dovholuknf 2026-07-01 08:05:14 -04:00
  • 2298670dc4 Merge pull request #4044 from openziti/fablab-log-strategy-chaos Paul Lorenz 2026-06-30 13:03:06 -04:00
  • 16a0d797e1 Add fablab log strategy and host-reachability-aware chaos helpers Paul Lorenz 2026-06-25 18:42:53 -04:00
  • b6f268d075 Fix flaky link state checker resurrecting faulted links Paul Lorenz 2026-06-30 10:17:35 -04:00
  • 24977a6acd Fix router panic when validating data model with nested proto messages Paul Lorenz 2026-06-29 17:59:15 -04:00
  • 4a62cda684 Fix router panic when validating data model with nested proto messages Paul Lorenz 2026-06-29 17:58:22 -04:00
  • ef5c4d2d7b add support for using ext-jwt-signers with verify traffic dovholuknf 2026-06-30 08:51:20 -04:00
  • 87ea5ac960 Merge pull request #4037 from openziti/metrics-msg-in-ziti Paul Lorenz 2026-06-29 23:05:45 -04:00
  • bbc00a2502 Fix stale single-router perf test bind handler call Paul Lorenz 2026-06-29 16:24:05 -04:00
  • 187aa11f24 Own the metrics wire format in ziti. Fixes #4036 Paul Lorenz 2026-06-25 13:10:58 -04:00
  • 8453508eb2 Merge pull request #4043 from openziti/ziti-ops-log-pipe Paul Lorenz 2026-06-29 22:35:43 -04:00
  • 95a9ed00f8 Fix oidc-listener-bind-failure test config to use new test PKI Paul Lorenz 2026-06-29 22:12:31 -04:00
  • d27be96105 Fix stale sdk-golang import path in identities_token_test Paul Lorenz 2026-06-29 17:46:34 -04:00
  • 27e7fcdaaf Merge pull request #4032 from openziti/issue-4031-inspect-content-type-2.0.x Paul Lorenz 2026-06-29 16:11:39 -04:00
  • 2117c59a63 Add ziti ops log-pipe command Paul Lorenz 2026-06-25 18:41:56 -04:00
  • cffe2f0849 Merge pull request #4053 from openziti/issue-4052-use-refresh-token-to-reauth Clint Dovholuk 2026-06-29 15:30:22 -04:00
  • f660f1b83a Update deps and changelog Paul Lorenz 2026-06-29 15:12:38 -04:00
  • f8bc731c2f Accept SDK inspect replies regardless of content type. Fixes #4031 Paul Lorenz 2026-06-19 11:45:19 -04:00
  • 4912a3226e Merge pull request #4041 from openziti/issue-3881-dns-upstream-modes Paul Lorenz 2026-06-29 14:28:24 -04:00
  • 356ef963db spelling fix dovholuknf 2026-06-29 13:13:39 -04:00
  • 5bef2b8c3a Merge pull request #4038 from openziti/issue-4035-prometheus-ctrl-metric-labels Paul Lorenz 2026-06-29 13:12:58 -04:00
  • 2799c00191 Merge pull request #4042 from openziti/link-manager-striped-locking Paul Lorenz 2026-06-29 13:12:36 -04:00
  • 54451bfecf Merge pull request #4048 from openziti/housekeeper-aws-vpc-cleanup Paul Lorenz 2026-06-29 13:11:01 -04:00
  • c5a443e42d Merge pull request #4050 from openziti/issue-4049-backport-enrollment-priv-escalation Paul Lorenz 2026-06-29 13:07:34 -04:00
  • cba63836f9 Merge pull request #4028 from openziti/connect-v2 Paul Lorenz 2026-06-29 13:07:11 -04:00
  • 863f6c90fe Merge pull request #4029 from openziti/sdk-golang-v2 Paul Lorenz 2026-06-29 13:06:36 -04:00
  • 474420d5c6 Merge pull request #4030 from openziti/issue-3929-revocation-max-token-duration Paul Lorenz 2026-06-29 13:05:56 -04:00
  • 93bce3be97 Merge pull request #4018 from openziti/backcompat-doc-version-floor Paul Lorenz 2026-06-29 12:05:05 -04:00
  • a9664eb0c5 Merge pull request #3991 from openziti/3841-firewalled-cluster-join Paul Lorenz 2026-06-29 11:50:05 -04:00
  • 18cf6ea5c1 Harden and clarify firewalled controller cluster join. Fixes #3841 Paul Lorenz 2026-06-15 14:30:13 -04:00
  • 806ae69b63 adds test verifying ext-jwt bearer auth fails before token enrollment (#4047) Andrew Martinez 2026-06-29 11:44:31 -04:00
  • 1b180d14e8 fix #3933 add controller to enrollment response (#3947) Andrew Martinez 2026-06-29 11:44:23 -04:00
  • cdc3241144 fixes #3992 stop controller panic when a web server listener fails (#4006) Andrew Martinez 2026-06-29 11:18:03 -04:00
  • 27c9c2ec31 Merge pull request #4040 from openziti/issue-4039-fix-cached-login-error Clint Dovholuk 2026-06-29 09:38:54 -04:00
  • 1bccb9b9af self-review tightening dovholuknf 2026-06-29 09:37:20 -04:00
  • 6535c2353a guard against nil client dovholuknf 2026-06-29 07:59:17 -04:00
  • ba3b70939e update access tokens automatically from ziti cli, add tests dovholuknf 2026-06-29 07:49:10 -04:00
  • eba2afbe06 Prevent enrollment-based privilege escalation to admin identities. Fixes #4049 Paul Lorenz 2026-06-26 13:18:33 -04:00
  • 158e52b60e Merge pull request #4013 from openziti/issue-4010-enrollment-priv-escalation Paul Lorenz 2026-06-26 13:13:18 -04:00
  • 5fb197935d Deny enrollment access on identity read error. For #4010 Paul Lorenz 2026-06-24 15:46:54 -04:00
  • 2ee646c1c4 Add striped per-link locking and cache-before-txn router reads. Fixes #4045 Paul Lorenz 2026-06-25 18:40:51 -04:00
  • ed63a9b9aa Add VPC dependency-aware teardown to the AWS housekeeper Paul Lorenz 2026-06-26 11:28:49 -04:00
  • 26b7d3363f Merge pull request #4025 from openziti/update_triage_workflow Edward Moscardini 2026-06-26 08:04:09 +02:00
  • ca3c41a9b7 Add serial DNS upstream query modes. Fixes #3881 Paul Lorenz 2026-06-25 18:42:33 -04:00
  • 464283aee3 cleanup after self review, remove some duplicate code dovholuknf 2026-06-25 17:27:26 -04:00
  • a4a9532c29 add test for stale cert download dovholuknf 2026-06-25 16:52:05 -04:00
  • b87bff3d12 if the certs for a given host/port have changed, ask the user if they want to download them again dovholuknf 2026-06-25 16:46:00 -04:00
  • a41344c2ca Emit source_entity_id label on prometheus metrics. Fixes #4035 Paul Lorenz 2026-06-25 15:18:03 -04:00
  • 3f0dcca249 Merge pull request #3985 from openziti/issue-3929-revocation-enforcement-2.0.x Paul Lorenz 2026-06-24 18:56:08 -04:00
  • 67eba590e2 Implement connect-v2. Fixes #3884 Paul Lorenz 2026-03-25 16:58:08 -04:00
  • f7b7fb30f1 Merge pull request #4012 from openziti/issue-4011-inspect-content-type-mismatch Paul Lorenz 2026-06-24 16:12:20 -04:00
  • 8a39abad42 Use MaxTokenDuration for identity revocation lifetime. For #3929 Paul Lorenz 2026-06-24 15:39:02 -04:00
  • 30256b9918 Enforce api-session and identity revocations on the router. Fixes #3929 Paul Lorenz 2026-06-13 02:23:08 -04:00
  • e168a50d2a Use MaxTokenDuration for identity revocation lifetime. For #3929 Paul Lorenz 2026-06-24 15:39:30 -04:00
  • e1c3c4a99a Accept SDK inspect replies regardless of content type. Fixes #4011 Paul Lorenz 2026-06-19 11:45:19 -04:00
  • 8c95919a9f Merge pull request #4026 from openziti/issue-4002-zac-bootstrapping Clint Dovholuk 2026-06-24 15:19:46 -04:00
  • 30ea8af537 pr feedback - dedup version resolution into resolveVersion helper dovholuknf 2026-06-24 14:03:53 -04:00
  • 8c7148e051 pr feedback - stabilize download tests dovholuknf 2026-06-24 13:57:26 -04:00
  • baceef8e4e pr feedback, don't write config file when we can test from the configure command. bad --tls-cert/--tls-key returns without ever opening the listener dovholuknf 2026-06-24 13:53:46 -04:00
  • ac6f3ce100 Merge pull request #4027 from openziti/prep-for-1.5.160-release v1.5.16 Paul Lorenz 2026-06-24 12:16:55 -04:00
  • 265ceca90f ZAC bootstrapping CLI (download, configure, serve) plus ST1005 lint fix dovholuknf 2026-06-24 11:48:56 -04:00
  • 638a8180cf Update deps and changelog for 1.5.16 release Paul Lorenz 2026-06-23 15:33:40 -04:00
  • fce8c126c6 Merge pull request #4008 from openziti/issue-4007-cluster-quickstart Clint Dovholuk 2026-06-23 16:57:02 -04:00
  • ef8e05e673 PR feedback update and small tweak to --size, add test, cap at 9 dovholuknf 2026-06-23 16:31:11 -04:00
  • 86092a8640 Migrate to the sdk-golang v2 module path. For #3884 Paul Lorenz 2026-06-23 15:43:39 -04:00
  • 4f4accfc07 make sure cluster comes up and works and small tweaks dovholuknf 2026-06-23 10:07:57 -04:00
  • f81a9820fb Merge pull request #4024 from openziti/add_patch_policy Edward Moscardini 2026-06-23 15:59:58 +02:00
  • 1cc9cbbdc4 update triage workflow to add/remove users Edward Moscardini 2026-06-23 09:26:17 -04:00
  • 46996e7c3f append release policy with patch policy Edward Moscardini 2026-06-23 05:35:55 -04:00
  • 9ee09c283c Merge pull request #3996 from openziti/channel-v5 Paul Lorenz 2026-06-22 18:09:00 -04:00
  • f15c1adf90 Make LTS dependency updates external-only. For #4021 automate-lts-releases Paul Lorenz 2026-06-22 18:07:07 -04:00