Yury Gargay 9bc7b9e897

Add initial support of device posture checks (#1540) ...

This PR implements the following posture checks:

* Agent minimum version allowed
* OS minimum version allowed
* Geo-location based on connection IP

For the geo-based location, we rely on GeoLite2 databases which are free IP geolocation databases. MaxMind was tested and we provide a script that easily allows to download of all necessary files, see infrastructure_files/download-geolite2.sh.

The OpenAPI spec should extensively cover the life cycle of current version posture checks.

2024-02-20 09:59:56 +01:00

..

account

extract account into separate package

2023-11-28 14:34:57 +01:00

activity

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

geolocation

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

http

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

idp

add owner role support (#1340)

2023-12-01 17:24:57 +01:00

jwtclaims

Fix jwks validation and flag/config overriding (#1380)

2023-12-12 14:56:27 +01:00

metrics

Merge branch 'main' into feature/peer-approval

2023-12-04 17:34:53 +01:00

mock_server

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

peer

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

posture

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

status

Move Login business logic from gRPC API to Accountmanager (#713)

2023-03-03 18:35:38 +01:00

telemetry

Implement lightweight method to check is peer has update channel (#1351)

2023-12-05 14:17:56 +01:00

testdata

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

account_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

account.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

config.go

Expose trusted proxy list and counter configuration for realip middleware (#1535)

2024-02-08 14:40:40 +01:00

dns_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

dns.go

Allow service users with user role read-only access to all resources (#1484)

2024-01-25 09:50:27 +01:00

ephemeral_test.go

extract peer into seperate package

2023-11-28 13:45:26 +01:00

ephemeral.go

extract peer into seperate package

2023-11-28 13:45:26 +01:00

event_test.go

Extend linter rules (#1300)

2023-11-10 16:33:13 +01:00

event.go

Allow service users with user role read-only access to all resources (#1484)

2024-01-25 09:50:27 +01:00

file_store_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

file_store.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

group_test.go

add owner role support (#1340)

2023-12-01 17:24:57 +01:00

group.go

Return error when peer is not valid (#1573)

2024-02-13 10:59:31 +01:00

grpcserver.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

management_proto_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

management_suite_test.go

Move management server to a separate directory (#67)

2021-07-24 16:14:29 +02:00

management_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

nameserver_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

nameserver.go

Allow adding 3 nameserver addresses (#1588)

2024-02-19 14:29:20 +01:00

network_test.go

Exclude second last IP from allocation to use it in the Fake DNS (#912)

2023-05-30 18:26:44 +04:00

network.go

Merge branch 'main' into feature/peer-approval

2023-11-29 16:27:01 +01:00

peer_test.go

extract peer into seperate package

2023-11-28 13:45:26 +01:00

peer.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

personal_access_token_test.go

move into separate package

2023-05-16 12:57:56 +02:00

personal_access_token.go

Implement SQLite Store using gorm and relational approach (#1065)

2023-10-12 15:42:36 +02:00

policy_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

policy.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

posture_checks_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

posture_checks.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

route_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

route.go

Allow service users with user role read-only access to all resources (#1484)

2024-01-25 09:50:27 +01:00

rule.go

Implement SQLite Store using gorm and relational approach (#1065)

2023-10-12 15:42:36 +02:00

scheduler_test.go

Proactively expire peers' login per account (#698)

2023-02-27 16:44:26 +01:00

scheduler.go

Proactively expire peers' login per account (#698)

2023-02-27 16:44:26 +01:00

setupkey_test.go

Allow service users with user role read-only access to all resources (#1484)

2024-01-25 09:50:27 +01:00

setupkey.go

Allow service users with user role read-only access to all resources (#1484)

2024-01-25 09:50:27 +01:00

sqlite_store_test.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

sqlite_store.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

store_test.go

Extend linter rules (#1300)

2023-11-10 16:33:13 +01:00

store.go

Add initial support of device posture checks (#1540)

2024-02-20 09:59:56 +01:00

turncredentials_test.go

Add metrics for PeersUpdateManager (#1310)

2023-11-16 18:21:52 +01:00

turncredentials.go

Reorder peer deletion when deleteing a user (#1191)

2023-10-03 16:46:58 +02:00

updatechannel_test.go

Add metrics for PeersUpdateManager (#1310)

2023-11-16 18:21:52 +01:00

updatechannel.go

Implement lightweight method to check is peer has update channel (#1351)

2023-12-05 14:17:56 +01:00

user_test.go

Allow service users with user role read-only access to all resources (#1484)

2024-01-25 09:50:27 +01:00

user.go

Get cache from external cache when refresh fails (#1537)

2024-02-07 16:14:30 +01:00