858 Commits

Author	SHA1	Message	Date
bcmmbaga	9d86f76a24	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/account.go # management/server/account_test.go # management/server/ephemeral.go # management/server/ephemeral_test.go # management/server/http/handlers/peers/peers_handler.go # management/server/http/handlers/peers/peers_handler_test.go # management/server/integrated_validator.go # management/server/mock_server/account_mock.go # management/server/peer.go # management/server/store/sql_store.go # management/server/store/sql_store_test.go # management/server/store/store.go # management/server/testdata/store_with_expired_peers.sql # management/server/user.go	2025-01-08 22:31:10 +03:00
Bethuel Mmbaga	409003b4f9	[management] Add support for disabling resources and routing peers in networks (#3154) ... * sync openapi changes Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add option to disable network resource(s) Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add network resource enabled state from api Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add option to disable network router(s) Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * migrate old network resources and routers Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-08 19:35:57 +03:00
Bethuel Mmbaga	02a3feddb8	[management] Add MySQL Support (#3108) ... * Add mysql store support * Add support to disable activity events recording	2025-01-06 13:38:30 +01:00
Pascal Fischer	d9487a5749	[misc] separate integration and benchmark test workflows (#3147)	2025-01-03 15:48:31 +01:00
Pascal Fischer	cfa6d09c5e	[management] add peers benchmark (#3143)	2025-01-03 15:28:15 +01:00
Pascal Fischer	a01253c3c8	[management] add users benchmark (#3141)	2025-01-03 15:24:30 +01:00
Pascal Fischer	bc013e4888	[management] exclude self from network map if self is routing peer (#3142)	2025-01-02 18:46:28 +01:00
Pascal Fischer	782e3f8853	[management] Add integration test for the setup-keys API endpoints (#2936)	2025-01-02 13:51:01 +01:00
Maycon Santos	03fd656344	[management] Fix policy tests (#3135) ... - Add firewall rule isEqual method - Fix tests	2024-12-31 18:45:40 +01:00
Pascal Fischer	18b049cd24	[management] remove sorting from network map generation (#3126)	2024-12-31 18:10:40 +01:00
Bethuel Mmbaga	2bdb4cb44a	[management] Preserve jwt groups when accessing API with PAT (#3128) ... * Skip JWT group sync for token-based authentication Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-31 18:59:37 +03:00
Pascal Fischer	18316be09a	[management] add selfhosted metrics for networks (#3118)	2024-12-30 12:53:51 +01:00
Maycon Santos	1a623943c8	[management] Fix networks net map generation with posture checks (#3124)	2024-12-30 12:40:24 +01:00
Pascal Fischer	fbce8bb511	[management] remove ids from policy creation api (#2997)	2024-12-27 14:13:36 +01:00
Bethuel Mmbaga	445b626dc8	[management] Add missing group usage checks for network resources and routes access control (#3117) ... * Prevent deletion of groups linked to routes access control groups Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Prevent deletion of groups linked to network resource Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-27 14:39:34 +03:00
Bethuel Mmbaga	7ee7ada273	[management] Fix duplicate resource routes when routing peer is part of the source group (#3095) ... * Remove duplicate resource routes when routing peer is part of the source group Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-20 21:10:53 +03:00
Viktor Liu	ddc365f7a0	[client, management] Add new network concept (#3047) ... --------- Co-authored-by: Pascal Fischer <32096965+pascal-fischer@users.noreply.github.com> Co-authored-by: bcmmbaga <bethuelmbaga12@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com>	2024-12-20 11:30:28 +01:00
Pascal Fischer	6142828a9c	[management] restructure api files (#3013)	2024-12-10 15:59:25 +01:00
Bethuel Mmbaga	97bb74f824	Remove peer login log (#3005) ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-09 18:40:06 +01:00
bcmmbaga	9a96b91d9d	Fix merge ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-09 14:21:28 +01:00
bcmmbaga	a05bd464cd	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/peer.go	2024-12-06 13:45:23 +03:00
M. Essam	713e320c4c	Update account peers on login on meta change (#2991) ... * Update account peers on login on meta change * Factor out LoginPeer peer not found handling	2024-12-05 14:15:23 +01:00
Maycon Santos	b50b89ba14	[client] Cleanup status resources on engine stop (#2981) ... cleanup leftovers from status recorder when stopping the engine	2024-12-04 14:09:04 +01:00
Pascal Fischer	d063fbb8b9	[management] merge update account peers in sync call (#2978)	2024-12-03 16:41:19 +01:00
Joakim Nohlgård	7dacd9cb23	[management] Add missing parentheses on iphone hostname generation condition (#2977)	2024-12-03 13:49:02 +01:00
Maycon Santos	f9723c9266	[client] Account different policiy rules for routes firewall rules (#2939) ... * Account different policies rules for routes firewall rules This change ensures that route firewall rules will consider source group peers in the rules generation for access control policies. This fixes the behavior where multiple policies with different levels of access was being applied to all peers in a distribution group * split function * avoid unnecessary allocation Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com> --------- Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com>	2024-11-29 17:50:35 +01:00
Maycon Santos	8efad1d170	Add guide when signing key is not found (#2942) ... Some users face issues with their IdP due to signing key not being refreshed With this change we advise users to configure key refresh Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * removing leftover --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>	2024-11-29 10:06:40 +01:00
bcmmbaga	a3663fb444	Merge branch 'main' into peers-get-account-refactoring	2024-11-29 10:15:10 +03:00
Pascal Fischer	c6641be94b	[tests] Enable benchmark tests on github actions (#2961)	2024-11-28 19:22:01 +01:00
bcmmbaga	8c4613b456	Merge branch 'main' into peers-get-account-refactoring	2024-11-28 17:41:13 +03:00
Pascal Fischer	89cf8a55e2	[management] Add performance test for login and sync calls (#2960)	2024-11-28 14:59:53 +01:00
bcmmbaga	d66140fc82	Fix merge ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 15:08:42 +03:00
bcmmbaga	dea6886394	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/peer.go	2024-11-28 15:07:52 +03:00
bcmmbaga	1ba6eb62a6	Retrieve all groups for peers and restrict groups for regular users ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 15:01:44 +03:00
bcmmbaga	f87bc601c6	Add account locks and remove redundant ephemeral check ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 14:03:08 +03:00
Pascal Fischer	00c3b67182	[management] refactor to use account object instead of separate db calls for peer update (#2957)	2024-11-28 11:13:01 +01:00
bcmmbaga	cde0e51c72	Refactor test names and remove duplicate TestPostgresql_SavePeerStatus ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 12:30:38 +03:00
bcmmbaga	a22d5041e3	Add missing tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 12:21:15 +03:00
bcmmbaga	fde9f2ffda	Add store locks and prevent fetching setup keys peers when retrieving user peers with empty userID ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 12:18:02 +03:00
bcmmbaga	21561a2b07	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/sql_store_test.go	2024-11-27 13:20:14 +03:00
bcmmbaga	b2139875d9	Merge branch 'nameserver-get-account-refactoring' into peers-get-account-refactoring ... # Conflicts: # management/server/account.go # management/server/http/peers_handler.go # management/server/peer.go	2024-11-27 13:18:17 +03:00
Bethuel Mmbaga	9683da54b0	[management] Refactor nameserver groups to use store methods (#2888)	2024-11-26 17:39:04 +01:00
Bethuel Mmbaga	0e48a772ff	[management] Refactor DNS settings to use store methods (#2883)	2024-11-26 13:43:05 +01:00
Bethuel Mmbaga	f118d81d32	[management] Refactor policy to use store methods (#2878)	2024-11-26 10:46:05 +01:00
bcmmbaga	72bfc9d07e	Merge branch 'dns-get-account-refactoring' into nameserver-get-account-refactoring	2024-11-25 19:20:53 +03:00
bcmmbaga	79822cdc15	Merge branch 'policy-get-account-refactoring' into dns-get-account-refactoring	2024-11-25 19:17:38 +03:00
bcmmbaga	bdb2a76eae	Merge branch 'main' into policy-get-account-refactoring ... # Conflicts: # management/server/policy.go # management/server/posture_checks_test.go # management/server/sql_store.go # management/server/sql_store_test.go # management/server/status/error.go # management/server/store.go # management/server/testdata/extended-store.sql	2024-11-25 19:03:55 +03:00
Bethuel Mmbaga	ca12bc6953	[management] Refactor posture check to use store methods (#2874)	2024-11-25 16:26:24 +01:00
Pascal Fischer	9db1932664	[management] Fix getSetupKey call (#2927)	2024-11-22 10:15:51 +01:00
bcmmbaga	f42c775e45	Add tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-22 11:56:52 +03:00
bcmmbaga	24970a1746	Refactor get and save accounts in route ops ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-22 00:46:05 +03:00
bcmmbaga	de3e67e7ae	Add route store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-22 00:45:45 +03:00
bcmmbaga	7be83a0199	Add tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-21 21:03:24 +03:00
bcmmbaga	7d0331f41e	Fix prevent users from creating PATs for other users ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-21 21:03:16 +03:00
bcmmbaga	7af55fbd71	Add account locks ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-21 19:50:59 +03:00
bcmmbaga	82746d93ee	Use UTC time in test ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-21 17:15:07 +03:00
Pascal Fischer	aa575d6f44	[management] Add activity events to group propagation flow (#2916)	2024-11-21 15:10:34 +01:00
bcmmbaga	7fa1bbc722	Fix tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-20 22:45:20 +03:00
bcmmbaga	66d8bbf8e2	Fix database transaction locking issue ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-20 22:45:14 +03:00
bcmmbaga	6ea98f0ce7	Remove db query context and fix get user by id ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-20 22:44:06 +03:00
bcmmbaga	6a456c52bf	Refactor user and PAT handling ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 23:42:27 +03:00
bcmmbaga	4d00207c3b	Refactor account methods and mock ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 23:41:22 +03:00
bcmmbaga	2de0777f7a	Refactor auth middleware ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 23:33:46 +03:00
Pascal Fischer	f66bbcc54c	[management] Add metric for peer meta update (#2913)	2024-11-19 18:13:26 +01:00
Pascal Fischer	5dd6a08ea6	link peer meta update back to account object (#2911)	2024-11-19 17:25:49 +01:00
bcmmbaga	0ee56e14d9	fix lint ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 10:47:26 +03:00
Pascal Fischer	52ea2e84e9	[management] Add transaction metrics and exclude getAccount time from peers update (#2904)	2024-11-19 00:04:50 +01:00
bcmmbaga	20fc8e879e	fix tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 00:54:07 +03:00
bcmmbaga	b60e2c3261	prevent duplicate rules during updates ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 22:48:38 +03:00
bcmmbaga	df98c67ac8	prevent changing ruleID when not empty ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 18:46:52 +03:00
bcmmbaga	ec6438e643	Use update strength and simplify check ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 17:12:13 +03:00
bcmmbaga	6dd56e3328	Merge branch 'posturechecks-get-account-refactoring' into policy-get-account-refactoring	2024-11-18 16:58:04 +03:00
bcmmbaga	48edfa601f	add tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 16:43:19 +03:00
bcmmbaga	a2a49bdd47	fix peer fields updated after save ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 16:43:09 +03:00
bcmmbaga	a2fb274b86	remove duplicate store method ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 15:09:30 +03:00
bcmmbaga	a61e9da3e9	run peer ops in transaction ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 15:06:25 +03:00
bcmmbaga	d4c712493a	Merge branch 'groups-get-account-refactoring' into posturechecks-get-account-refactoring	2024-11-15 20:52:59 +03:00
İsmail	a1c5287b7c	Fix the Inactivity Expiration problem. (#2865)	2024-11-15 18:21:27 +01:00
Bethuel Mmbaga	12f442439a	[management] Refactor group to use store methods (#2867) ... * Refactor setup key handling to use store methods Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add lock to get account groups Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add check for regular user Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * get only required groups for auto-group validation Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add account lock and return auto groups map on validation Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * refactor account peers update Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Refactor groups to use store methods Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * refactor GetGroupByID and add NewGroupNotFoundError Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add AddPeer and RemovePeer methods to Group struct Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Preserve store engine in SqlStore transactions Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Run groups ops in transaction Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix missing group removed from setup key activity Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix merge Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix merge Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix sonar Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Change setup key log level to debug for missing group Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Retrieve modified peers once for group events Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add account locking and merge group deletion methods Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Fix tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-15 20:09:32 +03:00
bcmmbaga	51c1ec283c	Add locks and remove log ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-15 19:34:57 +03:00
Pascal Fischer	d9b691b8a5	[management] Limit the setup-key update operation (#2841)	2024-11-15 17:00:06 +01:00
Pascal Fischer	4aee3c9e33	[client/management] add peer lock to peer meta update and fix isEqual func (#2840)	2024-11-15 16:59:03 +01:00
bcmmbaga	4ef3890bf7	Fix typo ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-15 17:48:00 +03:00
Pascal Fischer	44e799c687	[management] Fix limited peer view groups (#2894)	2024-11-15 11:16:16 +01:00
bcmmbaga	f6f7260897	Fix tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-14 19:34:05 +03:00
bcmmbaga	c557c98390	Refactor peer to use store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-14 19:33:57 +03:00
bcmmbaga	7d849a92c0	Refactor peer handlers ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-14 19:32:34 +03:00
bcmmbaga	f5e7449d01	Add lock for peer store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-14 19:24:51 +03:00
bcmmbaga	8420a52563	Refactor ephemeral peers ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-14 13:04:49 +03:00
bcmmbaga	6315644065	Add peer store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-14 13:04:36 +03:00
bcmmbaga	ef55b9eccc	Add tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-13 20:41:41 +03:00
bcmmbaga	218345e0ff	Refactor name server groups to use store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-13 20:41:30 +03:00
Viktor Liu	39329e12a1	[client] Improve state write timeout and abort work early on timeout (#2882) ... * Improve state write timeout and abort work early on timeout * Don't block on initial persist state	2024-11-13 13:46:00 +01:00
bcmmbaga	4b943c34b7	Add tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-13 13:16:32 +03:00
bcmmbaga	560190519d	Refactor dns settings to use store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-13 13:15:47 +03:00
bcmmbaga	9bc8e6e29e	Merge branch 'posturechecks-get-account-refactoring' into policy-get-account-refactoring	2024-11-12 23:53:46 +03:00
bcmmbaga	9872bee41d	Refactor anyGroupHasPeers to retrieve all groups once ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-12 23:53:29 +03:00
bcmmbaga	3a915decd7	Add policy tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-12 20:15:47 +03:00
bcmmbaga	50e6389a1d	Merge branch 'posturechecks-get-account-refactoring' into policy-get-account-refactoring	2024-11-12 19:06:27 +03:00
bcmmbaga	bbaee18cd5	Fix typo ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-12 19:05:57 +03:00