Paul Lorenz 0b7bdbc884 Merge pull request #4354 from openziti/backport/v2.0.x-policy-enforcer-metric-refs ...

[Backport-2.0] Hold the policy enforcers' meters rather than resolving one per run

2026-09-09 18:14:49 -04:00

..

api

backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering

2026-08-19 17:46:02 -04:00

apierror

backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering

2026-08-19 17:46:02 -04:00

change

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

command

backport openziti/ziti#4094 to release-v2.0.x accept first-party certs issued by a separate edge signing CA (#4153)

2026-08-26 14:43:34 -04:00

config

Document and test what the router connect churn limit now guards. For #4264

2026-08-24 19:41:09 -04:00

db

backport openziti/ziti#4321 to release-v2.0.x compare process hashes … (#4345)

2026-09-08 11:45:35 -04:00

entities

Update copyright

2022-06-30 17:45:08 -04:00

env

backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering

2026-08-19 17:46:02 -04:00

event

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

events

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

fields

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

handler_ctrl

backport openziti/ziti#4094 to release-v2.0.x accept first-party certs issued by a separate edge signing CA (#4153)

2026-08-26 14:43:34 -04:00

handler_edge_ctrl

Validate the API session token when creating circuits via CreateCircuitV3

2026-08-20 15:38:27 -04:00

handler_mgmt

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

handler_peer_ctrl

Fix potential deadlock if panic while lock held

2026-04-06 09:56:43 -04:00

idgen

Optimize imports

2026-01-28 15:01:35 -05:00

internal

Hold the policy enforcers' meters rather than resolving one per run. Fixes #4350

2026-09-03 17:19:11 -04:00

ioc

Refactor xgress_edge_tunnel_v2 to make it more pluggable

2025-09-03 16:03:15 -04:00

jwtsigner

fix #3231 use root controller server certs for OIDC signing (#3236)

2025-08-26 09:29:50 -04:00

middleware

Optimize imports

2026-01-28 15:01:35 -05:00

model

backport openziti/ziti#4321 to release-v2.0.x compare process hashes … (#4345)

2026-09-08 11:45:35 -04:00

models

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

network

Serialize router control-channel connect/disconnect. For #4264

2026-08-24 19:41:09 -04:00

oidc_auth

backport openziti/ziti#4222 to release-v2.0.x report isCertExtendable correctly for OIDC cert auth (#4226)

2026-08-26 15:59:37 -04:00

peermsg

Add more raft configuration options. Fixes openziti/fabric#597

2023-02-15 23:47:57 -05:00

permissions

Tidy duplicate permission types. Remove vestigial info message. Update changelog

2026-05-08 11:34:20 -04:00

raft

backport openziti/ziti#4094 to release-v2.0.x accept first-party certs issued by a separate edge signing CA (#4153)

2026-08-26 14:43:34 -04:00

response

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

rest_client

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

rest_model

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

rest_server

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

rest_util

Optimize imports

2026-01-28 15:01:35 -05:00

scripts

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

server

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

specs

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

storage

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

subcmd

Optimize imports

2026-01-28 15:01:35 -05:00

sync_strats

backport openziti/ziti#4094 to release-v2.0.x accept first-party certs issued by a separate edge signing CA (#4153)

2026-08-26 14:43:34 -04:00

webapis

merge release-v2.0.x: move changelog entry to 2.0.4, keep both testdata readme sections

2026-08-26 16:35:41 -04:00

xctrl

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

xctrl_example

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

xmgmt

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

xt

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

xt_common

Expand routing costs to use full uint32 space. Each precedence can now cover about 1B. Fixes #3074

2026-02-20 15:54:41 -05:00

xt_random

global circuit costs not cleared when terminator is deleted. Fixes #3556

2026-02-20 15:54:06 -05:00

xt_smartrouting

Optimize imports

2026-01-28 15:01:35 -05:00

xt_sticky

Optimize imports

2026-01-28 15:01:35 -05:00

xt_weighted

costing calculation for the weighted terminator selection strategy is incorrect. Fixes #3557

2026-02-20 15:54:06 -05:00

agent.go

Support ziti agent inspect so ziti processes can be inspected via IPC. Fixes #3824. Fixes #2049

2026-04-24 12:12:02 -04:00

controller_test.go

Validate migration source db has data before restore. For #4104

2026-08-06 16:02:13 -04:00

controller.go

backport openziti/ziti#4094 to release-v2.0.x accept first-party certs issued by a separate edge signing CA (#4153)

2026-08-26 14:43:34 -04:00

health.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

settings.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00