696 Commits

Author	SHA1	Message	Date
bcmmbaga	ed259a6a03	Merge branch 'main' into groups-get-account-refactoring ... # Conflicts: # management/server/account.go # management/server/status/error.go	2024-11-12 17:14:45 +03:00
Pascal Fischer	20a5afc359	[management] Add more logs to the peer update processes (#2881)	2024-11-12 14:19:22 +01:00
bcmmbaga	2806d73161	Add tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-12 13:38:34 +03:00
bcmmbaga	d23b5c892b	Retrieve modified peers once for group events ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-11 22:58:22 +03:00
bcmmbaga	113c21b0e1	Change setup key log level to debug for missing group ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-11 22:57:24 +03:00
bcmmbaga	ab00c41dad	fix sonar ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-11 22:38:24 +03:00
bcmmbaga	664d1388aa	fix merge ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-11 22:29:59 +03:00
bcmmbaga	010a8bfdc1	Merge branch 'main' into groups-get-account-refactoring ... # Conflicts: # management/server/group.go # management/server/group/group.go # management/server/setupkey.go # management/server/sql_store.go # management/server/status/error.go # management/server/store.go	2024-11-11 21:10:02 +03:00
Bethuel Mmbaga	6cb697eed6	[management] Refactor setup key to use store methods (#2861) ... * Refactor setup key handling to use store methods Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add lock to get account groups Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add check for regular user Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * get only required groups for auto-group validation Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add account lock and return auto groups map on validation Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix missing group removed from setup key activity Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Remove context from DB queries Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Add user permission check and add setup events into events to store slice Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Retrieve all groups once during setup key auto-group validation Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Fix lint Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Fix sonar Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-11 19:46:10 +03:00
bcmmbaga	871500c5cc	fix merge ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-09 01:52:09 +03:00
bcmmbaga	cc04aef7b4	Merge branch 'setupkey-get-account-refactoring' into groups-get-account-refactoring	2024-11-09 01:50:10 +03:00
bcmmbaga	3ed8b9cee9	fix missing group removed from setup key activity ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-09 01:48:28 +03:00
Viktor Liu	08b6e9d647	[management] Fix api error message typo peers_group (#2862)	2024-11-08 23:28:02 +01:00
bcmmbaga	bdeb95c58c	Run groups ops in transaction ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-09 01:17:01 +03:00
bcmmbaga	6dc185e141	Preserve store engine in SqlStore transactions ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-09 01:16:03 +03:00
bcmmbaga	7100be83cd	Add AddPeer and RemovePeer methods to Group struct ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-09 01:14:30 +03:00
Pascal Fischer	67ce14eaea	[management] Add peer lock to grpc server (#2859) ... * add peer lock to grpc server * remove sleep and put db update first * don't export lock method	2024-11-08 18:47:22 +01:00
bcmmbaga	d58cf50127	Merge branch 'setupkey-get-account-refactoring' into groups-get-account-refactoring ... # Conflicts: # management/server/sql_store.go	2024-11-08 19:48:13 +03:00
bcmmbaga	40af1a50e3	Merge branch 'feature/get-account-refactoring' into setupkey-get-account-refactoring ... # Conflicts: # management/server/sql_store.go	2024-11-08 19:17:28 +03:00
bcmmbaga	ac05f69131	fix tests ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 18:58:19 +03:00
bcmmbaga	8126d95316	refactor GetGroupByID and add NewGroupNotFoundError ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 18:58:04 +03:00
bcmmbaga	0a70e4c5d4	Refactor groups to use store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 18:39:36 +03:00
bcmmbaga	106fc75936	refactor account peers update ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 18:38:32 +03:00
Pascal Fischer	669904cd06	[management] Remove context from database calls (#2863)	2024-11-08 15:49:00 +01:00
bcmmbaga	f8b5eedd38	add account lock and return auto groups map on validation ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 10:14:13 +03:00
bcmmbaga	931521d505	get only required groups for auto-group validation ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 00:59:37 +03:00
bcmmbaga	1a5f3c653c	add check for regular user ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 00:37:47 +03:00
bcmmbaga	78044c226d	add lock to get account groups ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 00:32:14 +03:00
bcmmbaga	389c9619af	Refactor setup key handling to use store methods ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-11-08 00:31:41 +03:00
Maycon Santos	738387f2de	Add benchmark tests to get account with claims (#2761) ... * Add benchmark tests to get account with claims * add users to account objects * remove hardcoded env	2024-11-07 17:23:35 +01:00
Pascal Fischer	baf0678ceb	[management] Fix potential panic on inactivity expiration log message (#2854)	2024-11-07 16:33:57 +01:00
Pascal Fischer	7fef8f6758	[management] Enforce max conn of 1 for sqlite setups (#2855)	2024-11-07 16:32:35 +01:00
Pascal Fischer	3e88b7c56e	[management] Fix network map update on peer validation (#2849)	2024-11-07 09:50:13 +01:00
Pascal Fischer	a9d06b883f	add all group to add peer affected peers network map check (#2830)	2024-11-01 22:09:08 +01:00
Pascal Fischer	bac95ace18	[management] Add DB access duration to logs for context cancel (#2781)	2024-11-01 10:58:39 +01:00
Pascal Fischer	4c758c6e52	[management] remove network map diff calculations (#2820)	2024-10-31 19:24:15 +01:00
Pascal Fischer	729bcf2b01	[management] add metrics to network map diff (#2811)	2024-10-30 16:53:23 +01:00
pascal-fischer	39c99781cb	fix meta is equal slices (#2807)	2024-10-29 19:54:38 +01:00
pascal-fischer	10480eb52f	[management] Setup key improvements (#2775)	2024-10-28 17:52:23 +01:00
pascal-fischer	563dca705c	[management] Fix session inactivity response (#2770)	2024-10-23 16:40:15 +02:00
Bethuel Mmbaga	7bda385e1b	[management] Optimize network map updates (#2718) ... * Skip peer update on unchanged network map (#2236) * Enhance network updates by skipping unchanged messages Optimizes the network update process by skipping updates where no changes in the peer update message received. * Add unit tests * add locks * Improve concurrency and update peer message handling * Refactor account manager network update tests * fix test * Fix inverted network map update condition * Add default group and policy to test data * Run peer updates in a separate goroutine * Refactor * Refactor lock * Fix peers update by including NetworkMap and posture Checks * go mod tidy * fix merge Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix merge Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * [management] Skip account peers update if no changes affect peers (#2310) * Remove incrementing network serial and updating peers after group deletion * Update account peer if posture check is linked to policy * Remove account peers update on saving setup key * Refactor group link checking into re-usable functions * Add HasPeers function to group * Refactor group management * Optimize group change effects on account peers * Update account peers if ns group has peers * Refactor group changes * Optimize account peers update in DNS settings * Optimize update of account peers on jwt groups sync * Refactor peer account updates for efficiency * Optimize peer update on user deletion and changes * Remove condition check for network serial update * Optimize account peers updates on route changes * Remove UpdatePeerSSHKey method * Remove unused isPolicyRuleGroupsEmpty * Add tests for peer update behavior on posture check changes * Add tests for peer update behavior on policy changes * Add tests for peer update behavior on group changes * Add tests for peer update behavior on dns settings changes * Refactor * Add tests for peer update behavior on name server changes * Add tests for peer update behavior on user changes * Add tests for peer update behavior on route changes * fix tests * Add tests for peer update behavior on setup key changes * Add tests for peer update behavior on peers changes * fix merge * Fix tests * go mod tidy * Add NameServer and Route comparators * Update network map diff logic with custom comparators * Add tests * Refactor duplicate diff handling logic * fix linter * fix tests * Refactor policy group handling and update logic. Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Update route check by checking if group has peers Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Refactor posture check policy linking logic Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Simplify peer update condition in DNS management Refactor the condition for updating account peers to remove redundant checks Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix merge Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add policy tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add posture checks tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix user and setup key tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix account and route tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix typo Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix nameserver tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix routes tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix group tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * upgrade diff package Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix nameserver tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * use generic differ for netip.Addr and netip.Prefix Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * go mod tidy Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add peer tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix merge Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix management suite tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * fix postgres tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * enable diff nil structs comparison Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * skip the update only last sent the serial is larger Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * refactor peer and user Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * skip spell check for groupD Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Refactor group, ns group, policy and posture checks Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * skip spell check for GroupD Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * update account policy check before verifying policy status Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Update management/server/route_test.go Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> * Update management/server/route_test.go Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> * Update management/server/route_test.go Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> * Update management/server/route_test.go Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> * Update management/server/route_test.go Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> * add tests missing tests for dns setting groups Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add tests for posture checks changes Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add ns group and policy tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add route and group tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * increase Linux test timeout to 10 minutes Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Run diff for client posture checks only Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * add panic recovery and detailed logging in peer update comparison Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> * Fix tests Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com> --------- Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>	2024-10-23 13:05:02 +03:00
Bethuel Mmbaga	0106a95f7a	lock account and use transaction (#2767) ... Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>	2024-10-22 13:29:17 +03:00
Maycon Santos	88e4fc2245	Release global lock on early error (#2760)	2024-10-19 18:32:17 +02:00
Maycon Santos	ccd4ae6315	Fix domain information is up to date check (#2754)	2024-10-17 19:21:35 +02:00
Bethuel Mmbaga	96d2207684	Fix JSON function compatibility for SQLite and PostgreSQL (#2746) ... resolves the issue with json_array_length compatibility between SQLite and PostgreSQL. It adjusts the query to conditionally cast types: PostgreSQL: Casts to json with ::json. SQLite: Uses the text representation directly.	2024-10-16 17:55:30 +02:00
ctrl-zzz	49e65109d2	Add session expire functionality based on inactivity (#2326) ... Implemented inactivity expiration by checking the status of a peer: after a configurable period of time following netbird down, the peer shows login required.	2024-10-13 14:52:43 +02:00
Maycon Santos	da3a053e2b	[management] Refactor getAccountIDWithAuthorizationClaims (#2715) ... This change restructures the getAccountIDWithAuthorizationClaims method to improve readability, maintainability, and performance. - have dedicated methods to handle possible cases - introduced Store.UpdateAccountDomainAttributes and Store.GetAccountUsers methods - Remove GetAccount and SaveAccount dependency - added tests	2024-10-12 08:35:51 +02:00
Misha Bragin	208a2b7169	Add billing user role (#2714)	2024-10-10 14:14:56 +02:00
pascal-fischer	8284ae959c	[management] Move testdata to sql files (#2693)	2024-10-10 12:35:03 +02:00
Maycon Santos	6ce09bca16	Add support to envsub go management configurations (#2708) ... This change allows users to reference environment variables using Go template format, like {{ .EnvName }} Moved the previous file test code to file_suite_test.go.	2024-10-09 20:46:23 +02:00