887 Commits

Author	SHA1	Message	Date
bcmmbaga	b15ee5c07c	Refactor ToGroupsInfo to process slices of groups ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-15 00:09:10 +03:00
Pascal Fischer	44f69c70e0	fix validator	2025-01-14 21:01:15 +01:00
Pascal Fischer	a5731fe509	fix validator	2025-01-14 20:56:19 +01:00
Pascal Fischer	61b38e56e4	fix validator	2025-01-14 20:51:07 +01:00
Pascal Fischer	29ea44b874	update expectations	2025-01-14 20:44:06 +01:00
bcmmbaga	84aea32118	Refactor peer scheduler to retry every 3 seconds on errors ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-14 22:13:11 +03:00
bcmmbaga	acb5340d40	Merge remote-tracking branch 'origin/peers-get-account-refactoring' into peers-get-account-refactoring	2025-01-14 22:11:22 +03:00
Pascal Fischer	8b7766e34d	update expectations	2025-01-14 20:10:04 +01:00
Pascal Fischer	2706ede08e	update expectations	2025-01-14 19:42:48 +01:00
Pascal Fischer	3483139903	update expectations	2025-01-14 19:17:48 +01:00
bcmmbaga	ce7385119a	Use integrated validator direct ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-14 20:58:43 +03:00
bcmmbaga	cd15c85d5b	Add status error for generic result error ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-14 20:54:44 +03:00
Pascal Fischer	9ff56eae64	update cloud expectations	2025-01-14 18:43:50 +01:00
Pascal Fischer	47a18db186	update local benchmark expectations	2025-01-14 18:04:20 +01:00
adasauce	0c28099712	[management] enable optional zitadel configuration of a PAT (#3159) ... * [management] enable optional zitadel configuration of a PAT for service user via the ExtraConfig fields * [management] validate both PAT and JWT configurations for zitadel	2025-01-14 12:38:08 +03:00
bcmmbaga	eb062c07ec	Adjust benchmarks ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-14 12:09:52 +03:00
bcmmbaga	7a9c75db91	Adjust benchmarks ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-13 23:19:30 +03:00
bcmmbaga	c603c40a53	Add get peer groups tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-13 20:56:51 +03:00
bcmmbaga	48af90c770	Get account direct from store without buffer ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-13 19:18:18 +03:00
bcmmbaga	3cc6d3862d	Improve peer performance ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-13 17:52:39 +03:00
bcmmbaga	d1e5d584f7	Fix merge ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-13 16:12:34 +03:00
bcmmbaga	b1325267d8	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/peer.go	2025-01-13 15:54:37 +03:00
Bethuel Mmbaga	3fce8485bb	Enabled new network resource and router by default (#3174) ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-11 20:09:29 +01:00
Maycon Santos	1cc88a2190	[management] adjust benchmark (#3168)	2025-01-11 14:08:13 +01:00
Bethuel Mmbaga	168ea9560e	[Management] Send peer network map when SSH status is toggled (#3172)	2025-01-11 13:19:30 +01:00
bcmmbaga	2e596fbf1a	use account object to get validated peers ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-10 13:37:38 +03:00
Maycon Santos	649bfb236b	[management] Send relay credentials with turn updates (#3164) ... send relay credentials when sending turn credentials update to avoid removing servers from clients	2025-01-10 09:44:02 +01:00
bcmmbaga	fa1eaa0aec	fix store tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-09 13:38:09 +03:00
bcmmbaga	baf211203a	fix merge ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-08 23:17:54 +03:00
bcmmbaga	9d86f76a24	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/account.go # management/server/account_test.go # management/server/ephemeral.go # management/server/ephemeral_test.go # management/server/http/handlers/peers/peers_handler.go # management/server/http/handlers/peers/peers_handler_test.go # management/server/integrated_validator.go # management/server/mock_server/account_mock.go # management/server/peer.go # management/server/store/sql_store.go # management/server/store/sql_store_test.go # management/server/store/store.go # management/server/testdata/store_with_expired_peers.sql # management/server/user.go	2025-01-08 22:31:10 +03:00
Bethuel Mmbaga	409003b4f9	[management] Add support for disabling resources and routing peers in networks (#3154) ... * sync openapi changes Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add option to disable network resource(s) Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add network resource enabled state from api Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add option to disable network router(s) Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * migrate old network resources and routers Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2025-01-08 19:35:57 +03:00
Bethuel Mmbaga	02a3feddb8	[management] Add MySQL Support (#3108) ... * Add mysql store support * Add support to disable activity events recording	2025-01-06 13:38:30 +01:00
Pascal Fischer	d9487a5749	[misc] separate integration and benchmark test workflows (#3147)	2025-01-03 15:48:31 +01:00
Pascal Fischer	cfa6d09c5e	[management] add peers benchmark (#3143)	2025-01-03 15:28:15 +01:00
Pascal Fischer	a01253c3c8	[management] add users benchmark (#3141)	2025-01-03 15:24:30 +01:00
Pascal Fischer	bc013e4888	[management] exclude self from network map if self is routing peer (#3142)	2025-01-02 18:46:28 +01:00
Pascal Fischer	782e3f8853	[management] Add integration test for the setup-keys API endpoints (#2936)	2025-01-02 13:51:01 +01:00
Maycon Santos	03fd656344	[management] Fix policy tests (#3135) ... - Add firewall rule isEqual method - Fix tests	2024-12-31 18:45:40 +01:00
Pascal Fischer	18b049cd24	[management] remove sorting from network map generation (#3126)	2024-12-31 18:10:40 +01:00
Bethuel Mmbaga	2bdb4cb44a	[management] Preserve jwt groups when accessing API with PAT (#3128) ... * Skip JWT group sync for token-based authentication Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-31 18:59:37 +03:00
Pascal Fischer	18316be09a	[management] add selfhosted metrics for networks (#3118)	2024-12-30 12:53:51 +01:00
Maycon Santos	1a623943c8	[management] Fix networks net map generation with posture checks (#3124)	2024-12-30 12:40:24 +01:00
Pascal Fischer	fbce8bb511	[management] remove ids from policy creation api (#2997)	2024-12-27 14:13:36 +01:00
Bethuel Mmbaga	445b626dc8	[management] Add missing group usage checks for network resources and routes access control (#3117) ... * Prevent deletion of groups linked to routes access control groups Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Prevent deletion of groups linked to network resource Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-27 14:39:34 +03:00
Bethuel Mmbaga	7ee7ada273	[management] Fix duplicate resource routes when routing peer is part of the source group (#3095) ... * Remove duplicate resource routes when routing peer is part of the source group Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-20 21:10:53 +03:00
Viktor Liu	ddc365f7a0	[client, management] Add new network concept (#3047) ... --------- Co-authored-by: Pascal Fischer <32096965+pascal-fischer@users.noreply.github.com> Co-authored-by: bcmmbaga <bethuelmbaga12@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com>	2024-12-20 11:30:28 +01:00
Pascal Fischer	6142828a9c	[management] restructure api files (#3013)	2024-12-10 15:59:25 +01:00
Bethuel Mmbaga	97bb74f824	Remove peer login log (#3005) ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-09 18:40:06 +01:00
bcmmbaga	9a96b91d9d	Fix merge ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-12-09 14:21:28 +01:00
bcmmbaga	a05bd464cd	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/peer.go	2024-12-06 13:45:23 +03:00
M. Essam	713e320c4c	Update account peers on login on meta change (#2991) ... * Update account peers on login on meta change * Factor out LoginPeer peer not found handling	2024-12-05 14:15:23 +01:00
Maycon Santos	b50b89ba14	[client] Cleanup status resources on engine stop (#2981) ... cleanup leftovers from status recorder when stopping the engine	2024-12-04 14:09:04 +01:00
Pascal Fischer	d063fbb8b9	[management] merge update account peers in sync call (#2978)	2024-12-03 16:41:19 +01:00
Joakim Nohlgård	7dacd9cb23	[management] Add missing parentheses on iphone hostname generation condition (#2977)	2024-12-03 13:49:02 +01:00
Maycon Santos	f9723c9266	[client] Account different policiy rules for routes firewall rules (#2939) ... * Account different policies rules for routes firewall rules This change ensures that route firewall rules will consider source group peers in the rules generation for access control policies. This fixes the behavior where multiple policies with different levels of access was being applied to all peers in a distribution group * split function * avoid unnecessary allocation Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com> --------- Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com>	2024-11-29 17:50:35 +01:00
Maycon Santos	8efad1d170	Add guide when signing key is not found (#2942) ... Some users face issues with their IdP due to signing key not being refreshed With this change we advise users to configure key refresh Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * removing leftover --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>	2024-11-29 10:06:40 +01:00
bcmmbaga	a3663fb444	Merge branch 'main' into peers-get-account-refactoring	2024-11-29 10:15:10 +03:00
Pascal Fischer	c6641be94b	[tests] Enable benchmark tests on github actions (#2961)	2024-11-28 19:22:01 +01:00
bcmmbaga	8c4613b456	Merge branch 'main' into peers-get-account-refactoring	2024-11-28 17:41:13 +03:00
Pascal Fischer	89cf8a55e2	[management] Add performance test for login and sync calls (#2960)	2024-11-28 14:59:53 +01:00
bcmmbaga	d66140fc82	Fix merge ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 15:08:42 +03:00
bcmmbaga	dea6886394	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/peer.go	2024-11-28 15:07:52 +03:00
bcmmbaga	1ba6eb62a6	Retrieve all groups for peers and restrict groups for regular users ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 15:01:44 +03:00
bcmmbaga	f87bc601c6	Add account locks and remove redundant ephemeral check ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 14:03:08 +03:00
Pascal Fischer	00c3b67182	[management] refactor to use account object instead of separate db calls for peer update (#2957)	2024-11-28 11:13:01 +01:00
bcmmbaga	cde0e51c72	Refactor test names and remove duplicate TestPostgresql_SavePeerStatus ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 12:30:38 +03:00
bcmmbaga	a22d5041e3	Add missing tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 12:21:15 +03:00
bcmmbaga	fde9f2ffda	Add store locks and prevent fetching setup keys peers when retrieving user peers with empty userID ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-28 12:18:02 +03:00
bcmmbaga	21561a2b07	Merge branch 'main' into peers-get-account-refactoring ... # Conflicts: # management/server/sql_store_test.go	2024-11-27 13:20:14 +03:00
bcmmbaga	b2139875d9	Merge branch 'nameserver-get-account-refactoring' into peers-get-account-refactoring ... # Conflicts: # management/server/account.go # management/server/http/peers_handler.go # management/server/peer.go	2024-11-27 13:18:17 +03:00
Bethuel Mmbaga	9683da54b0	[management] Refactor nameserver groups to use store methods (#2888)	2024-11-26 17:39:04 +01:00
Bethuel Mmbaga	0e48a772ff	[management] Refactor DNS settings to use store methods (#2883)	2024-11-26 13:43:05 +01:00
Bethuel Mmbaga	f118d81d32	[management] Refactor policy to use store methods (#2878)	2024-11-26 10:46:05 +01:00
bcmmbaga	72bfc9d07e	Merge branch 'dns-get-account-refactoring' into nameserver-get-account-refactoring	2024-11-25 19:20:53 +03:00
bcmmbaga	79822cdc15	Merge branch 'policy-get-account-refactoring' into dns-get-account-refactoring	2024-11-25 19:17:38 +03:00
bcmmbaga	bdb2a76eae	Merge branch 'main' into policy-get-account-refactoring ... # Conflicts: # management/server/policy.go # management/server/posture_checks_test.go # management/server/sql_store.go # management/server/sql_store_test.go # management/server/status/error.go # management/server/store.go # management/server/testdata/extended-store.sql	2024-11-25 19:03:55 +03:00
Bethuel Mmbaga	ca12bc6953	[management] Refactor posture check to use store methods (#2874)	2024-11-25 16:26:24 +01:00
Pascal Fischer	9db1932664	[management] Fix getSetupKey call (#2927)	2024-11-22 10:15:51 +01:00
bcmmbaga	f42c775e45	Add tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-22 11:56:52 +03:00
bcmmbaga	24970a1746	Refactor get and save accounts in route ops ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-22 00:46:05 +03:00
bcmmbaga	de3e67e7ae	Add route store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-22 00:45:45 +03:00
bcmmbaga	7be83a0199	Add tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-21 21:03:24 +03:00
bcmmbaga	7d0331f41e	Fix prevent users from creating PATs for other users ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-21 21:03:16 +03:00
bcmmbaga	7af55fbd71	Add account locks ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-21 19:50:59 +03:00
bcmmbaga	82746d93ee	Use UTC time in test ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-21 17:15:07 +03:00
Pascal Fischer	aa575d6f44	[management] Add activity events to group propagation flow (#2916)	2024-11-21 15:10:34 +01:00
bcmmbaga	7fa1bbc722	Fix tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-20 22:45:20 +03:00
bcmmbaga	66d8bbf8e2	Fix database transaction locking issue ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-20 22:45:14 +03:00
bcmmbaga	6ea98f0ce7	Remove db query context and fix get user by id ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-20 22:44:06 +03:00
bcmmbaga	6a456c52bf	Refactor user and PAT handling ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 23:42:27 +03:00
bcmmbaga	4d00207c3b	Refactor account methods and mock ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 23:41:22 +03:00
bcmmbaga	2de0777f7a	Refactor auth middleware ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 23:33:46 +03:00
Pascal Fischer	f66bbcc54c	[management] Add metric for peer meta update (#2913)	2024-11-19 18:13:26 +01:00
Pascal Fischer	5dd6a08ea6	link peer meta update back to account object (#2911)	2024-11-19 17:25:49 +01:00
bcmmbaga	0ee56e14d9	fix lint ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 10:47:26 +03:00
Pascal Fischer	52ea2e84e9	[management] Add transaction metrics and exclude getAccount time from peers update (#2904)	2024-11-19 00:04:50 +01:00
bcmmbaga	20fc8e879e	fix tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-19 00:54:07 +03:00
bcmmbaga	b60e2c3261	prevent duplicate rules during updates ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 22:48:38 +03:00
bcmmbaga	df98c67ac8	prevent changing ruleID when not empty ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 18:46:52 +03:00
bcmmbaga	ec6438e643	Use update strength and simplify check ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-18 17:12:13 +03:00