Commit Graph

358 Commits

Author SHA1 Message Date
Michael Quigley
135fd483fa
update share backend (#125) 2022-12-02 13:21:05 -05:00
Michael Quigley
5ba457313a
admin update frontend (#129) 2022-12-02 12:19:41 -05:00
Michael Quigley
38c83fda92
update frontend backend (#129) 2022-12-02 10:46:53 -05:00
Michael Quigley
d5d2497955
list frontends backend (#129) 2022-12-02 09:30:06 -05:00
Michael Quigley
309f4e7d87
add backend for 'admin delete frontend' (#129) 2022-12-02 08:58:41 -05:00
Michael Quigley
f0228e8fe0
admin create frontend now interrogates ziti for the identity (#129) 2022-12-02 08:44:17 -05:00
Michael Quigley
cbf809c06a
more edge control plane consolidation (#112, #129) 2022-12-02 08:28:40 -05:00
Michael Quigley
93d6f89107
oops... sorry sqlite 2022-12-01 16:51:53 -05:00
Michael Quigley
c9db95fe03
create frontend handler (#129) 2022-12-01 16:14:42 -05:00
Michael Quigley
9db6aa1c07
frontends.environment_id is now nullable; support anonymous public frontends (#110, #129) 2022-12-01 14:56:55 -05:00
Michael Quigley
8610cf944a
add admin support to rest_model_zrok.Principal; authenticator (#116) 2022-12-01 14:48:23 -05:00
Michael Quigley
b4f85e711f
configuration versioning (#118) 2022-12-01 13:40:57 -05:00
Michael Quigley
44f4e37e83
remove service03 type; consolidated service type (#119) 2022-12-01 12:54:14 -05:00
Michael Quigley
301249fe4a
more cleanups and polish for sharing and reserving (#122, #41) 2022-11-30 14:38:49 -05:00
Michael Quigley
3f5c5003de
zrok reserve; zrok release (#41) 2022-11-30 13:45:57 -05:00
Michael Quigley
f9143c3a5b
more naming refactoring 'name' -> 'token' (#119) 2022-11-30 12:46:19 -05:00
Michael Quigley
483babe813
massive name -> token work (#119) 2022-11-30 12:10:00 -05:00
Michael Quigley
f54d315e34
frontends.name -> frontends.token (#119) 2022-11-30 11:52:48 -05:00
Michael Quigley
0f9ed9dd68
api namespace/naming polish 2022-11-30 11:43:00 -05:00
Michael Quigley
64c3bdd3c1
service details operation (#41) 2022-11-30 11:17:09 -05:00
Michael Quigley
6841704b90
don't dealloate reserved services (#41) 2022-11-29 16:43:35 -05:00
Michael Quigley
158cc42c07
basic service reservation support (#41) 2022-11-29 16:41:18 -05:00
Michael Quigley
37be8fc4e0
services.reserved (#41) 2022-11-29 13:55:42 -05:00
Michael Quigley
189ed81718
add reserved column to frontends table (#41) 2022-11-29 13:45:23 -05:00
Michael Quigley
65d1539182
ensure supplied email addresses are valid at both the CLI and the API (#108) 2022-11-29 13:23:23 -05:00
Michael Quigley
39302cd4d5
allow access to private share service from unrelated environment (#109) 2022-11-29 13:07:49 -05:00
Michael Quigley
a3956509f3
working frontend allocation/deallocation; cleanups (#113) 2022-11-28 13:55:53 -05:00
Michael Quigley
5359754ba1
continued refinement of frontends; access/unacess (#113, #109) 2022-11-28 13:33:59 -05:00
Michael Quigley
c0e22792d0
cascade delete services when removing environment 2022-11-28 11:40:39 -05:00
Michael Quigley
4b70a8a0d3
Merge branch 'main' into v0.3.0 2022-11-28 11:26:12 -05:00
Michael Quigley
ebb13ac611
simply token generation; createToken+createServiceName (#114) 2022-11-28 11:18:56 -05:00
Michael Quigley
5971037835
createServicePolicyDialForEnvironment (#109, #112) 2022-11-28 11:10:10 -05:00
Michael Quigley
ce72fceb74
unaccess (#111); more access private wiring (#106, #109) 2022-11-23 13:00:01 -05:00
Michael Quigley
09c603845c
roughed-in access handler (#111) 2022-11-23 12:24:35 -05:00
Michael Quigley
6807cb3755
private sharing handler (#99, #109) 2022-11-22 15:31:02 -05:00
Michael Quigley
49987df381
streamlined unshare impl (#99) 2022-11-22 14:24:41 -05:00
Michael Quigley
ff3f623a74
use tags.zrokServiceName instead of name by convention (#99) 2022-11-22 14:12:35 -05:00
Michael Quigley
b54876fcb6
de-lint (#99) 2022-11-22 11:39:00 -05:00
Michael Quigley
c7d8395b89
publicResourceAllocator (#99) 2022-11-22 11:35:25 -05:00
Michael Quigley
6184e0e450
updated store.Services and friends (#103) 2022-11-22 11:14:58 -05:00
Michael Quigley
cbb9ec833f
service; prettier for sqlite (#103) 2022-11-22 10:58:17 -05:00
Michael Quigley
775ebb892f
make the new services table more pretty (#103) 2022-11-22 10:52:43 -05:00
Michael Quigley
5d60b5831d
initial strategy-based unshare handler (#99) 2022-11-21 15:11:35 -05:00
Michael Quigley
38c86aea82
implement store layer for service model changes (#103) 2022-11-21 14:51:11 -05:00
Michael Quigley
7cd36021ce
add share_mode and backend_mode to sql structures (#103) 2022-11-21 14:42:25 -05:00
Michael Quigley
ade25d21db
public sharing strategy; update test loop to match (#99) 2022-11-21 13:45:08 -05:00
Michael Quigley
82d9f6f6ed
additional service share/unshare and related naming refactoring (#102) 2022-11-18 15:48:13 -05:00
Michael Quigley
11068394b8
tunnel -> service; tunnel.Tunnel -> service.Share; tunnel.Untunnel -> service.Unshare (#102) 2022-11-18 15:36:55 -05:00
Michael Quigley
70c99b9791
frontend support in store; tests (#88, #98) 2022-11-17 14:41:07 -05:00
Michael Quigley
1fcb496321
store.Frontend (#98, #88) 2022-11-17 14:25:35 -05:00
Michael Quigley
f193976a50
ephemeral/non-ephemeral environments (#98, #88) 2022-11-17 13:27:57 -05:00
Michael Quigley
b9dca57dfa
store.CreateEphemeralEnvironment; tests (#88, #98) 2022-11-17 12:44:53 -05:00
Michael Quigley
dcdc00dcf4
sqlite3 port of the DDL changes (#20, #88) 2022-11-17 09:13:37 -05:00
Michael Quigley
d661b6a567
revised frontends schema (#20) 2022-11-15 14:48:40 -05:00
Michael Quigley
d825052a6a
docs; (#20) 2022-11-15 11:45:31 -05:00
Michael Quigley
59dd271591
better migration naming (#20) 2022-11-15 11:05:40 -05:00
Michael Quigley
cf77948ac5
availability_type; frontends; environments.account_id nullale; (#20) 2022-11-15 11:04:05 -05:00
Michael Quigley
bc98096881
ingress; first (#20) 2022-11-14 16:06:16 -05:00
Michael Quigley
01b43c6b74
accidental hard-coded email sender address, corrected 2022-11-11 10:50:17 -05:00
Michael Quigley
84af5be304
code maintenance; lint removal 2022-11-08 15:28:13 -05:00
Michael Quigley
bfdb3a1bd3
better logging to allow correlation with underlying ziti and operational management (#90) 2022-11-08 15:25:27 -05:00
Michael Quigley
c7dc3d5d71
wiring in the environment ziti identity for better correlation in logs (#90) 2022-11-08 15:07:18 -05:00
Michael Quigley
b9c9e62910
can't show 'cfg.Path', as it can contain secrets (#89) 2022-11-08 14:07:44 -05:00
Michael Quigley
e062a9f61f
add build-time version metadata (#70) 2022-11-02 15:07:43 -04:00
Michael Quigley
cc80b0e860
add migration for timestamp->timestamptz for postgres (#33) 2022-11-01 17:32:16 -04:00
Michael Quigley
477ff0f031
uptime for services (#33) 2022-11-01 17:03:32 -04:00
Michael Quigley
95b4143a85
communicate time as epoch ms; better disable of durations in ui (#33) 2022-11-01 16:52:02 -04:00
Michael Quigley
225e00861b
update cf to v0.0.13 to support secret suppression (#85) 2022-10-31 15:56:59 -04:00
Michael Quigley
8ba3b88a85
should probably include a default case, rather than panic-ing (#46) 2022-10-21 10:30:07 -04:00
Michael Quigley
3c8e5dee9f
vestigial log message 2022-10-21 09:37:34 -04:00
Michael Quigley
014da707d7
changes to support the agreement between sqlite and postgres (#46) 2022-10-21 09:31:12 -04:00
Michael Quigley
d479ff8609
basic schema conversion for postgres (#46) 2022-10-21 08:48:31 -04:00
Michael Quigley
bc75b312bf
organizing sqlite3 stuff to support postgres (#46) 2022-10-21 08:36:43 -04:00
Michael Quigley
6148fe316d
fix for service name creation (#79) 2022-10-20 14:16:18 -04:00
Michael Quigley
005db24691
better flux query for overview metrics (#74, #80) 2022-10-19 17:37:29 -04:00
Michael Quigley
e5e683d694
more 'active' removal; overview api sends spark metrics; spark ui (#74, #80) 2022-10-19 15:21:15 -04:00
Michael Quigley
e2d3208165
controller config structure improvements 2022-10-19 13:20:47 -04:00
Michael Quigley
40252f7a10
naming cleanups in api 2022-10-19 12:35:29 -04:00
Michael Quigley
887db1d2b6
more naming simplification 2022-10-19 12:24:43 -04:00
Michael Quigley
2d75181483
naming clarification 2022-10-19 12:10:22 -04:00
Michael Quigley
4a69d9dd31
not session... service 2022-10-19 12:00:07 -04:00
Michael Quigley
13251aec17
centralized metrics storage in metricsAgent, rather than the handler (#74, #76) 2022-10-19 11:37:31 -04:00
Michael Quigley
83c12e30cb
metrics lint; cache infrastructure (#74, #76) 2022-10-19 11:25:08 -04:00
Michael Quigley
095024c179
dnsSafeShortid (#79) 2022-10-18 15:49:30 -04:00
Michael Quigley
67377ed985
shortid (#79) 2022-10-18 15:21:53 -04:00
Michael Quigley
8bd7991b2b
tweak metrics logging to reduce irrelevant messages (#74, #76) 2022-10-18 13:31:49 -04:00
Michael Quigley
51d78526fe
better metrics accumulator (#74, #76) 2022-10-18 11:57:32 -04:00
Michael Quigley
1542e0131f
write to influxdb (#74, #76) 2022-10-17 15:54:22 -04:00
Michael Quigley
4559036ad8
starting on influx infrasructure (#74, #76) 2022-10-17 14:40:54 -04:00
Michael Quigley
69c44bdd51
local now; namespace (#74, #76) 2022-10-17 13:45:52 -04:00
Michael Quigley
e22e71cf71
metrics loop; bson (#74, #76) 2022-10-14 16:13:21 -04:00
Michael Quigley
318c73ad03
receiving metrics snapshots (#74, #76) 2022-10-14 15:49:59 -04:00
Michael Quigley
e519b4f16a
more metrics infrastructure (#74, #76) 2022-10-13 16:18:18 -04:00
Michael Quigley
41d5c2b652
metrics service name; metrics agent shutdown (#74, #76) 2022-10-13 15:50:15 -04:00
Michael Quigley
462025f5fa
metrics agent infrastructure 2022-10-13 14:23:52 -04:00
Michael Quigley
9d78e8e942
metrics config infrastructure (#74) 2022-10-12 12:42:05 -04:00
Michael Quigley
e58440722d
service cascade when processing environment disable (#52) 2022-10-07 14:27:01 -04:00
Michael Quigley
c2bfa5ea09
centralize more edge delete functionality 2022-10-07 14:17:15 -04:00
Michael Quigley
67bd77d2c3
garbage collect orphaned configs (#75) 2022-10-07 14:06:15 -04:00
Michael Quigley
b393c7f294
more garbage collection of orphans (#75) 2022-10-07 13:46:40 -04:00
Michael Quigley
69c71c0974
garbage collect service edge router policies (#75) 2022-10-07 09:30:58 -04:00
Michael Quigley
e8e0167a51
batch, offline garbage collection (#75) 2022-10-06 14:52:52 -04:00
Michael Quigley
637f27d9f4
query services (#75) 2022-10-06 13:52:19 -04:00
Michael Quigley
abe8d3e153
scaffolding for zrok gc (#75) 2022-10-06 13:24:15 -04:00
Michael Quigley
99bf504301
fix for sqlite transactional concurrency issue (#40) 2022-10-03 13:53:59 -04:00
Michael Quigley
02d6b7fce9
better url-ing in the ui (#68); demo improvements 2022-09-28 14:47:42 -04:00
Michael Quigley
3b9e6c5072
don't forward the error details 2022-09-26 16:35:06 -04:00
Michael Quigley
e61de01d9d
probably don't want to forward some of these errors 2022-09-26 16:33:57 -04:00
Michael Quigley
0142834665
fixed a lingering and silly bug causing FK constraint issues 2022-09-26 16:32:24 -04:00
Michael Quigley
9cbbb40105
extract real ip address when behind a load balancer (#68) 2022-09-26 16:21:49 -04:00
Michael Quigley
4b77fa785b
logging improvements {for operational reasons} (#50) 2022-09-20 16:38:20 -04:00
Michael Quigley
9cf3cf6f05
more cleanups and polish; working registration (#50) 2022-09-20 16:33:36 -04:00
Michael Quigley
5fae000dad
missing deferred rollback (#50) 2022-09-20 16:28:19 -04:00
Michael Quigley
27d1f390a5
verify/register ui improvements (#50) 2022-09-20 16:27:18 -04:00
Michael Quigley
242a8bee7b
controller registration endpoint improvements (#50) 2022-09-20 16:01:46 -04:00
Michael Quigley
ec6afaaa3d
better, more resilient account request processing (#50) 2022-09-20 14:23:01 -04:00
Michael Quigley
3ac9541463
remove immediate create; streamline controller account infrastructure (#50) 2022-09-20 14:05:27 -04:00
Michael Quigley
72e98beac9
not a journal (#50) 2022-09-20 13:49:14 -04:00
Michael Quigley
6190ac0c60
working, tested verify endpoint (#50) 2022-09-19 16:26:54 -04:00
Michael Quigley
08aba670ab
implement verify endpoint (#50) 2022-09-19 16:13:47 -04:00
Michael Quigley
4c8e4dbdef
tags for identity and edge router policy (#60) 2022-09-19 14:42:05 -04:00
Michael Quigley
549c3ca456
add zrok tags to identities and edge router policies (#60) 2022-09-15 16:06:38 -04:00
Michael Quigley
0ceda88b4c
add tags to zrok-created objects (#60) 2022-09-15 15:18:37 -04:00
Michael Quigley
54b4161045
service name refactoring (#59) 2022-09-14 14:16:37 -04:00
Michael Quigley
366f7db982
shortuuid for tokens (#59) 2022-09-14 14:08:12 -04:00
Michael Quigley
de3412e3d1
using the 'go-mail' framework (#50, #51) 2022-09-12 17:02:51 -04:00
Michael Quigley
aa19870d41
very rough, templatized html email verification (#50, #51) 2022-09-12 15:28:59 -04:00
Michael Quigley
712bdf734b
more verification email elaboration (#50, #51) 2022-09-12 15:00:44 -04:00
Michael Quigley
600f0396d2
multi-path account create logic (#50, #51) 2022-09-12 14:35:11 -04:00
Michael Quigley
11f18f8f48
we're officially in v0.2.x 2022-09-09 16:42:31 -04:00
Michael Quigley
05fe3ef281
store.AccountRequest and friends (#50, #51) 2022-09-09 14:03:47 -04:00
Michael Quigley
75eeb481e9
account request infrastructure (#50, #51) 2022-09-09 13:35:21 -04:00
Michael Quigley
5d594ce91a
more registration config (#50, #51) 2022-09-09 13:23:30 -04:00
Michael Quigley
e5711629a0
email subsystem configuration (#50, #51) 2022-09-09 10:23:14 -04:00
Michael Quigley
c95e84b53e
username -> email (#50, #51) 2022-09-09 10:20:05 -04:00
Michael Quigley
8095128c91
better http frontend configuration semantics (#48) 2022-09-06 15:01:38 -04:00
Michael Quigley
e2c376e5ca
disable; working (#30) 2022-09-02 13:07:27 -04:00
Michael Quigley
c59f3cd722
roughed-in 'disable' endpoint for controller (#30) 2022-09-02 12:45:54 -04:00
Michael Quigley
97878a7758
disable elaboration (#30); enable lint 2022-09-02 10:50:13 -04:00
Michael Quigley
d1e63fd8e6
listen/bind -> frontend/backend (#37) 2022-08-31 14:49:41 -04:00
Michael Quigley
b45f01b34a
create edge router policy for identity at enable time, not tunnel time 2022-08-17 13:43:16 -04:00
Michael Quigley
dda920f4df
minor namespacing; docs 2022-08-17 13:21:07 -04:00
Michael Quigley
c6c1a470d3
rough in controller proxy auth config building (#12) 2022-08-16 11:55:26 -04:00
Michael Quigley
cd3d7d81f4
zrok proxy config v1 (#12) 2022-08-15 17:29:31 -04:00
Michael Quigley
d8d3e77788
destroy config when done (#12) 2022-08-15 15:30:26 -04:00
Michael Quigley
01ffe50889
config namespacing (#12) 2022-08-15 15:08:58 -04:00
Michael Quigley
6fcd952d68
create config (#12) 2022-08-15 15:06:57 -04:00
Michael Quigley
9f71367d40
ensure zrok.auth.v1 config type is present at controller startup 2022-08-15 14:36:17 -04:00
Michael Quigley
6652163d75
controller startup/setup (#12) 2022-08-15 14:25:50 -04:00
Michael Quigley
1f36af7cf5
configurable edge client (#31) 2022-08-12 11:03:15 -04:00
Michael Quigley
6b47936b29
clean ziti; configurable proxy identities 2022-08-10 11:56:00 -04:00
Michael Quigley
57931eff09
add 'proxyEndpoint' to tunnel response (#21) 2022-08-09 11:49:40 -04:00
Michael Quigley
2c36a461eb
remove /listEnvironments endpoint 2022-08-09 11:42:16 -04:00
Michael Quigley
36b08f1e00
cf-based config (#23) 2022-08-09 11:34:00 -04:00
Michael Quigley
8606072b80
elaborating controller config (#23) 2022-08-09 11:18:24 -04:00
Michael Quigley
df59bb7dcf
lint and polish 2022-08-05 14:34:39 -04:00
Michael Quigley
17038dc4e7
hide inactive services 2022-08-05 14:28:21 -04:00
Michael Quigley
53b69807bc
ugly, rough react flow 2022-08-03 15:48:04 -04:00
Michael Quigley
6e49e4991e
basic overview implementation 2022-08-03 15:05:28 -04:00
Michael Quigley
cf6236eeaf
associate services to environments 2022-08-03 14:58:11 -04:00
Michael Quigley
2d94591812
elaboration 2022-08-03 14:25:29 -04:00
Michael Quigley
aceb649fa7
more naming alignment 2022-08-03 13:48:17 -04:00
Michael Quigley
cf49c10d87
identities -> environments 2022-08-03 13:43:54 -04:00
Michael Quigley
46b00ab9f0
identities -> 'environments' 2022-08-03 11:54:11 -04:00
Michael Quigley
1a4bb269e8
fixed ziggy; styling (#14) 2022-08-03 10:58:47 -04:00
Michael Quigley
c21023a9cc
reasonably complete ui/api scaffolding; login/out (#14, #18) 2022-08-02 14:41:59 -04:00
Michael Quigley
1f4c697a2a
cleaned out and regenerated api; new list identities endpoint (#18) 2022-08-02 13:54:40 -04:00
Michael Quigley
e699994ca5
basic login service/state (#17) 2022-08-02 13:23:31 -04:00
Michael Quigley
069417ade0
better authorization handling 2022-08-01 15:44:26 -04:00
Michael Quigley
9e0caf192b
#all policies (#13) 2022-08-01 13:46:18 -04:00
Michael Quigley
d82b75f3b2
better deactivation (#10) 2022-07-29 16:27:03 -04:00
Michael Quigley
4080e219a3
record service activate/deactivate (#10) 2022-07-29 16:21:47 -04:00
Michael Quigley
2ae1ff06c4
record service alloc/dealloc (#10) 2022-07-29 16:03:53 -04:00
Michael Quigley
1292c5d702
fix authentication transaction; record created identities (#10) 2022-07-29 15:54:13 -04:00
Michael Quigley
cb1a88e339
not public; lint 2022-07-29 15:28:40 -04:00
Michael Quigley
4b3c22d02a
endpoint tracking (#10) 2022-07-29 15:19:28 -04:00
Michael Quigley
409fee1576
identities (#10) 2022-07-29 15:15:48 -04:00
Michael Quigley
7fd1287465
identities ddl (#10) 2022-07-29 13:33:55 -04:00
Michael Quigley
e63e831374
store updates (#10) 2022-07-29 13:27:00 -04:00
Michael Quigley
abad64c808
set migrations table name 2022-07-29 11:10:39 -04:00
Michael Quigley
e3f4eb33fe
authenticate remaining api endpoints (#11) 2022-07-28 14:32:49 -04:00
Michael Quigley
e6e487c07e
richer principal (#11) 2022-07-28 12:12:50 -04:00
Michael Quigley
cc86776351
authentication (#11) 2022-07-27 14:50:46 -04:00
Michael Quigley
6156005446
authentication; enable only (for now) (#11) 2022-07-27 14:45:16 -04:00
Michael Quigley
4311d89526
api improvements 2022-07-27 13:38:35 -04:00
Michael Quigley
d44ebb9e80
tunnel/untunnel handler cleanups (#3) 2022-07-27 13:17:47 -04:00
Michael Quigley
6b4fcadc6b
more reasonable allocation and deallocation of resources (#3, #9) 2022-07-27 12:55:51 -04:00
Michael Quigley
91849caf25
clean up edge router policy (#3, #9) 2022-07-27 12:17:37 -04:00
Michael Quigley
cfa603ea0c
de-linting (#3) 2022-07-27 09:49:54 -04:00
Michael Quigley
06b523d39f
separate dial/bind service policies (#3) 2022-07-26 18:07:49 -04:00
Michael Quigley
7b7da0f6ac
rough policies, just to wire things up (#3) 2022-07-26 17:26:39 -04:00
Michael Quigley
73718804e1
service policy (#3) 2022-07-26 17:17:37 -04:00
Michael Quigley
f44599e9c2
create serp (#3) 2022-07-26 16:36:47 -04:00
Michael Quigley
2d4299984e
create the service (#3) 2022-07-26 16:21:49 -04:00
Michael Quigley
54328c488b
tunnel request/response (#3) 2022-07-26 15:38:35 -04:00
Michael Quigley
84ac03c048
api package naming cleanup (less conflicts with existing ziti infrastructure) 2022-07-26 15:16:02 -04:00
Michael Quigley
cad9a2bf5b
rough and sketchy identity creation and enrollment 2022-07-26 12:26:58 -04:00
Michael Quigley
bb57075059
skeleton bits for zrok enable 2022-07-25 17:05:44 -04:00
Michael Quigley
17c75b212d
swagger lint 2022-07-25 16:44:13 -04:00
Michael Quigley
efdf5b5293
account creation error handling 2022-07-25 16:23:55 -04:00