Commit Graph

  • 840bcc8557 Update ctrl channel test fixtures for listener constraints. For #3983 Paul Lorenz 2026-06-22 15:38:37 -04:00
  • 76637e57fd Pin release version to the validated branch name. For #4021 Paul Lorenz 2026-06-22 15:36:52 -04:00
  • 785791e0eb Harden LTS release authorization and gating. For #4021 Paul Lorenz 2026-06-22 15:15:46 -04:00
  • 2dc4075446 Make listener ctrl channels multi-underlay-capable. For #3983 Paul Lorenz 2026-06-22 14:53:47 -04:00
  • b71aa636ae Note maintenance-line HA/validation revisit for 2.0. For #4021 Paul Lorenz 2026-06-22 14:05:19 -04:00
  • 6732375e01 Bump zititest channel/v5 to released v5.0.15. For #3983 Paul Lorenz 2026-06-22 14:02:17 -04:00
  • 40e396ae59 Scope grouped control-channel first-dial headers to the initial dial. For #3983 Paul Lorenz 2026-06-22 14:02:17 -04:00
  • eae8d19f8b Address review on LTS release automation. For #4021 Paul Lorenz 2026-06-22 13:59:08 -04:00
  • b79a23bf96 Pin channel/v5 to released v5.0.15 and use SetLoggerFor. For #3983 Paul Lorenz 2026-06-22 13:56:35 -04:00
  • c348b2bae8 Automate LTS point releases. Fixes #4021 Paul Lorenz 2026-06-22 13:35:34 -04:00
  • d7999da321 Document v1.3.0 router floor in backward-compatibility test Paul Lorenz 2026-06-22 11:46:22 -04:00
  • aa71cd768c Add ZET integration tests to release workflow for pre/rc tags (#3997) Christopher Britton 2026-06-22 10:00:39 -04:00
  • 05522e4bf8 Quiet agent CLI logging and route channel logs through slog. For #3983 Paul Lorenz 2026-06-19 14:18:17 -04:00
  • 3027fdffd3 Prevent enrollment-based privilege escalation to admin identities. Fixes #4010 Paul Lorenz 2026-06-19 12:27:53 -04:00
  • 9c651a5742 Check if channel fix corrects CI issues Paul Lorenz 2026-06-19 12:06:06 -04:00
  • e2d328985a add ziti run quickstart cluster dovholuknf 2026-06-18 17:15:41 -04:00
  • 1c877e2501 Migrate to channel/v5 deferred-ack accept API. For #3983 Paul Lorenz 2026-06-18 12:33:43 -04:00
  • 10095b2aa4 Update to latest channel/v5 with bug fixes Paul Lorenz 2026-06-18 11:28:29 -04:00
  • 65bbd7b5f7 Fix K8s test failure diagnostics to capture pod describe and per-pod logs Paul Lorenz 2026-06-16 16:54:21 -04:00
  • d481224c9b Decompose multi-underlay channels onto the channel/v5 API. Fixes #3983 Paul Lorenz 2026-06-16 12:11:01 -04:00
  • ee8ad78e3b Rename MultiChannel to the unified Channel for channel/v5. For #3983 Paul Lorenz 2026-06-15 17:38:48 -04:00
  • ae806045b5 Convert self-describing receive handlers to channel/v5. For #3983 Paul Lorenz 2026-06-15 17:32:36 -04:00
  • 08aa26a051 Rename single-underlay channel constructors for channel/v5. For #3983 Paul Lorenz 2026-06-15 17:23:09 -04:00
  • 1c122af490 Rewrite channel/v4 imports to channel/v5. For #3983 Paul Lorenz 2026-06-13 00:23:47 -04:00
  • bd6eed04d2 Merge pull request #3984 from openziti/issue-3928-posture-revalidation-2.0.x Paul Lorenz 2026-06-18 09:43:35 -04:00
  • c2e6c8ee3d Merge pull request #3917 from openziti/convert-router-forwarder Paul Lorenz 2026-06-17 18:52:50 -04:00
  • d1b132c4da Convert router/forwarder to slog. Fixes #3916 Paul Lorenz 2026-06-01 16:35:10 -04:00
  • b956d0b53e Merge pull request #3870 from openziti/backport-1.6-shared-intercept-hostname-iptables Paul Lorenz 2026-06-17 13:47:23 -04:00
  • 3ad10c3148 Update deps and changelog Paul Lorenz 2026-06-17 11:52:35 -04:00
  • 4083faed86 Refcount shared intercept hostnames so iptables rules are installed for every service (#3868) Paul Lorenz 2026-06-09 16:35:32 -04:00
  • f8dc32a26d Add load balanced routers design doc anycast-support Paul Lorenz 2026-06-16 23:40:02 -04:00
  • 0ee288ecbf Distribute routers and router-target configs through the RDM. Fixes #3976 (#3977) Paul Lorenz 2026-06-16 22:31:43 -04:00
  • 1d6333a6c0 Add router.link.v1 config type. Fixes #3974 (#3975) Paul Lorenz 2026-06-16 16:38:13 -04:00
  • a5b0fce362 Merge pull request #3995 from openziti/issue-3994-add-support-for-multiple-sans Clint Dovholuk 2026-06-16 16:00:17 -04:00
  • 28cd3d746b Merge pull request #3935 from openziti/collapse-fabric-and-edge-services-in-db Paul Lorenz 2026-06-16 13:26:51 -04:00
  • f18ce1b580 Collapse fabric and edge services at the db level. Fixes #3934 Paul Lorenz 2026-02-27 23:21:06 -05:00
  • c213b11068 remove ZITI_CTRL_EDGE_ALT_ADVERTISED_ADDRESS from the equation and make the comment better dovholuknf 2026-06-16 12:13:09 -04:00
  • 5410074cac add support to bootstrap.bash for multiple addressees to be supplied dovholuknf 2026-06-16 11:49:47 -04:00
  • 7ce75078b9 Merge pull request #3911 from openziti/slog-ziti-integration Paul Lorenz 2026-06-15 16:27:05 -04:00
  • 0aefe599c9 Install slog and route agent log-level callbacks through common/logging. Fixes #3910 Paul Lorenz 2026-06-01 10:10:18 -04:00
  • 81930be53f Merge pull request #3989 from openziti/feature/resolver-multi-interface Edward Moscardini 2026-06-15 20:28:21 +02:00
  • 71508d831c merge main; resolve conflicts Edward Moscardini 2026-06-15 13:21:20 -04:00
  • 3f09e263d4 Merge pull request #3973 from openziti/feature/lanif-multi-interface Edward Moscardini 2026-06-15 19:16:50 +02:00
  • 57cec2f095 updated to error instead of timeout on server failure Edward Moscardini 2026-06-15 12:49:20 -04:00
  • ae16461c4b update change log Edward Moscardini 2026-06-15 12:11:37 -04:00
  • 84c44c7de5 expand resolver to support a list of addresses in tproxy mode Edward Moscardini 2026-06-15 12:05:25 -04:00
  • c7f23fecf0 Merge pull request #3930 from openziti/revocation-enforcement Paul Lorenz 2026-06-13 02:15:22 -04:00
  • 21d9d457c1 Revalidate dial circuits and bind terminators on posture changes. Fixes #3928 Paul Lorenz 2026-06-13 01:50:03 -04:00
  • f4b9798352 Merge pull request #3907 from openziti/slog-named-loggers Paul Lorenz 2026-06-13 01:36:29 -04:00
  • ff619272ba Enforce api-session and identity revocations on the router. Fixes #3927 Paul Lorenz 2026-06-05 13:49:00 -04:00
  • 53a7dea7f3 Add named-logger registry, logrus bridge, and pfxlog-shape JSON. Fixes #3906 Paul Lorenz 2026-05-30 11:42:56 -04:00
  • ca08e1e7de Merge pull request #3905 from openziti/slog-async-handler Paul Lorenz 2026-06-12 23:37:26 -04:00
  • ff8ae7cd45 Add common/logging package: AsyncHandler, level helpers, and chain composition. Fixes #3904 Paul Lorenz 2026-05-29 18:23:54 -04:00
  • d35af13964 Merge pull request #3903 from openziti/agent-capabilities Paul Lorenz 2026-06-12 16:46:04 -04:00
  • c92de09624 Document the agent capability model and cover commands end-to-end Paul Lorenz 2026-05-29 15:30:09 -04:00
  • 32dae7f424 Merge pull request #3895 from openziti/agent-prep Paul Lorenz 2026-06-12 16:12:07 -04:00
  • c45ce84d6f Wire ziti registration and CLI v2 selection. Fixes #3902 Paul Lorenz 2026-05-29 15:30:09 -04:00
  • 7e43a0a731 Add agent IPC capabilities and v2 log-level channel commands Paul Lorenz 2026-05-29 15:30:09 -04:00
  • 18671a2593 Hold listener in handler to fix gops listen-goroutine race Paul Lorenz 2026-06-01 13:57:20 -04:00
  • 9483c39bbd Consolidate agent channel plumbing into common/agent. Fixes #3894 Paul Lorenz 2026-05-26 18:45:39 -04:00
  • 92348ddd96 Absorb openziti/agent into common/agent. Fixes #3893 Paul Lorenz 2026-05-26 18:32:07 -04:00
  • 16e8dc2244 Add logging-refactor design proposal Paul Lorenz 2026-05-19 14:58:43 -04:00
  • 230e357fb1 fix empty process hash/signer constraints no longer fail posture issue-3980-posture-check-changes dovholuknf 2026-06-12 14:19:39 -04:00
  • b90fd13e6c fix ziti list posture-checks when os=0 dovholuknf 2026-06-12 14:18:25 -04:00
  • 4283719bf8 HA posture forwarding + no-leader terminator retry dovholuknf 2026-06-12 14:18:05 -04:00
  • f1de1da988 add failing unit tests for posture forwarding, OS empty-version check, and no-leader terminator retry dovholuknf 2026-06-12 13:31:27 -04:00
  • b676aa2c51 backport openziti/ziti#3952 to v1.6 reject invalid externalIdClaim and stop enrollment panic (#3954) Andrew Martinez 2026-06-12 13:53:53 -04:00
  • 3082a34453 backport openziti/ziti#3952 to v2.0 reject invalid externalIdClaim and stop enrollment panic (#3955) Andrew Martinez 2026-06-12 13:53:47 -04:00
  • 9470c1f126 fixes #3952 reject invalid externalIdClaim and stop enrollment panic (#3953) Andrew Martinez 2026-06-12 13:52:54 -04:00
  • 27790c8cbc Merge pull request #3922 from openziti/posture-revalidation Paul Lorenz 2026-06-12 12:22:05 -04:00
  • eccdf7f420 Add posture revalidation integration tests; fix gaps they exposed. For #3908 Paul Lorenz 2026-06-04 20:21:47 -04:00
  • 7826fb8881 update changelog Edward Moscardini 2026-06-11 17:12:40 -04:00
  • 93583ed27b expand lanIf to support a list of interfaces in tproxy mode Edward Moscardini 2026-06-11 16:14:12 -04:00
  • 4361315776 backport openziti/ziti#3233 to release-v1.6.x explicit token.Valid check in router ParseJwt (#3932) Andrew Martinez 2026-06-11 15:04:45 -04:00
  • ab1c513b8b Merge pull request #3879 from openziti/router-configs Paul Lorenz 2026-06-11 14:34:04 -04:00
  • cdc5d89885 Add configs field to routers. Fixes #3780 Paul Lorenz 2026-04-06 19:32:54 -04:00
  • 292543a68a Add ref build and LTS line selectors to setup-cli action (#3962) Christopher Britton 2026-06-10 16:07:10 -04:00
  • 5467c9f1c2 Merge pull request #3965 from openziti/issue-3961-router-panic-on-posture-check-1.6.x Clint Dovholuk 2026-06-10 13:56:01 -04:00
  • 7b4afc0d3b Merge pull request #3964 from openziti/issue-3961-router-panic-on-posture-check-2.0.x Clint Dovholuk 2026-06-10 13:55:46 -04:00
  • 822537fe09 update changelog dovholuknf 2026-06-10 13:51:28 -04:00
  • e8507ce217 Merge pull request #3963 from openziti/issue-3961-router-panic-on-posture-check Clint Dovholuk 2026-06-10 13:50:37 -04:00
  • 556a16df6e add test-writing guide for the tests package (#3966) Andrew Martinez 2026-06-10 13:22:23 -04:00
  • 0ba057e1bf Merge pull request #3918 from openziti/extend-attribute-search Paul Lorenz 2026-06-10 13:00:40 -04:00
  • a582fe5d0f Add role-attribute usage queries. Fixes #1593 Paul Lorenz 2026-06-01 16:49:33 -04:00
  • d53beda6b9 don't mutate the passed in variable, use protobuf getter instead dovholuknf 2026-06-10 12:05:29 -04:00
  • 8ba9f61276 don't mutate the passed in variable, use protobuf getter instead dovholuknf 2026-06-10 12:05:27 -04:00
  • 5d628b0b09 don't mutate the passed in variable, use protobuf getter instead dovholuknf 2026-06-10 12:05:22 -04:00
  • c6b5c98443 terser comments dovholuknf 2026-06-10 11:56:13 -04:00
  • d8c18f926f terser comments dovholuknf 2026-06-10 11:55:50 -04:00
  • 6d1241151b terser comments dovholuknf 2026-06-10 11:55:39 -04:00
  • fe1b28b06b backport 2.0.x: fix router panic with process multi posture check dovholuknf 2026-06-10 11:47:30 -04:00
  • 6cfabd06f5 backport 1.6.x: fix router panic with process multi posture check dovholuknf 2026-06-10 11:46:09 -04:00
  • 362330a4e6 fix router panic with process multi posture check dovholuknf 2026-06-10 11:44:03 -04:00
  • df2054e003 Merge pull request #3950 from openziti/fix-delete-trigger-err-return Paul Lorenz 2026-06-09 23:38:03 -04:00
  • 543546859a Merge pull request #3960 from openziti/backport-2.0-shared-intercept-hostname-iptables Paul Lorenz 2026-06-09 23:37:49 -04:00
  • 12a0ee65aa Refcount shared intercept hostnames so iptables rules are installed for every service (#3958) Paul Lorenz 2026-06-09 16:35:32 -04:00
  • 328304e04f Refcount shared intercept hostnames so iptables rules are installed for every service (#3869) Paul Lorenz 2026-06-09 16:35:32 -04:00
  • 929bd5670f Merge pull request #3913 from openziti/wildcard-oidc-updates Clint Dovholuk 2026-06-09 15:34:15 -04:00
  • f5fb0653d3 Merge pull request #3951 from openziti/fix-getcapool-read-error Clint Dovholuk 2026-06-09 15:33:05 -04:00
  • 205b5715c1 return error when CA cert read fails dovholuknf 2026-06-09 14:36:08 -04:00