Commit graph

6927 commits

Author SHA1 Message Date
Abhishek K
b0f09e3517
Merge pull request #3251 from gravitl/NET-1784-latest
NET-1784: add allowed network cidr to acl rules
2024-12-15 10:43:57 +04:00
abhishek9686
0216c596cb add all networks rules 2024-12-15 10:41:59 +04:00
abhishek9686
98e313242b add allowed networks 2024-12-13 14:08:34 +04:00
Abhishek K
116e2ef959
Net 1784 latest (#3250)
* fix all resources rules

* for any service set defaults
2024-12-12 10:02:31 +04:00
Yabin Ma
1d9e0f71df
add format int64 for swagger doc (#3247)
* add format int64 for swagger doc

* add format int64 for swagger doc

* add global override

* swagger doc update

* add new line for .swaggo file
2024-12-12 09:52:52 +04:00
abhishek9686
f14d916936 for any service set defaults 2024-12-12 02:32:36 +04:00
abhishek9686
effb7eb5d7 fix all resources rules 2024-12-12 02:30:32 +04:00
Yabin Ma
94cc85377f
add auto relay only when the relay and relayed nodes are in the same network (#3249) 2024-12-11 18:51:50 +04:00
Abhishek K
70ffdef387
update release version (#3248) 2024-12-10 15:16:54 +04:00
Yabin Ma
9024aead60
add back compatibility for encrypt message (#3246) 2024-12-10 12:47:05 +04:00
Abhishek K
7093373c77
NET-1784: Migrate All Policies (#3245)
* migrate all policies

* migrate all policies

* add acl policy type for any traffic

* use any service type for migration
2024-12-10 11:55:37 +04:00
dependabot[bot]
a2c7c252b4
Bump alpine from 3.20.3 to 3.21.0 (#3242)
Bumps alpine from 3.20.3 to 3.21.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-10 11:21:59 +04:00
dependabot[bot]
b6a9053736
Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#3244)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-10 11:21:40 +04:00
dependabot[bot]
24742db39a
Bump golang.org/x/crypto from 0.29.0 to 0.30.0 (#3243)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.29.0 to 0.30.0.
- [Commits](https://github.com/golang/crypto/compare/v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-10 11:21:29 +04:00
Abhishek K
f124b10c35
NET-1784: Adv Acl Rules (#3239)
* define direction on acl req

* define protocol types and rule model

* get rules for node

* fetch acl rule for a node

* redine acl firewall model

* add json tags

* update port,protocol, and direction

* add json tags to acl options

* convert protocol to string

* simplify acl map

* add json tags to acl rules

* add networks to fw update

* add acls rules

* NET-1784: add allow all field

* add allow all field on fw udpate

* remove debug logs

* fix port and protocol types

* migrate default acl policies

* define constants for service types

* add adv options for user rules on ingress gw

* debug log

* allow whole network

* add static nodes to acl rules

* replace peers on acl updates

* initiliase rule map

* add user acl rules on target node

* revert acl check on extclient

* handle static node rules on ingress gw

* update multiple policies for users

* check allowed direction

* remove debug logs
2024-12-10 11:21:14 +04:00
Abhishek K
31c2311bef
NET-1782: Fetch Node Connection Status from metrics (#3237)
* add live status of node

* handle static node status

* add public IP field to server configuration

* get public Ip from config

* improve node status logic

* improvise status check

* use only checkin status on old nodes

---------

Co-authored-by: the_aceix <aceixsmartx@gmail.com>
2024-12-10 10:46:05 +04:00
Abhishek K
6962027e12
Merge pull request #3223 from gravitl/lmnzx-patch-1
Update deletedroplets.yml to extend the sleep to 30mins
2024-12-10 10:16:16 +04:00
Vishal Dalwadi
496d541822
NET-1833: add retries to license key validation. (#3222)
* feat(go): add retries to license key validation.

* feat(go): increase the number of retries.
2024-12-10 10:15:54 +04:00
Yabin Ma
5f21c8bb1d
NET-1778: scale test code changes (#3203)
* comment ACL call and add debug message

* add cache for network nodes

* fix load node to network cache issue

* add peerUpdate call 1 min limit

* add debug log for scale test

* release maps

* avoid default policy for node

* 1 min limit for peerUpdate trigger

* mq options

* Revert "mq options"

This reverts commit 10b93d0118.

* set peerUpdate run in sequence

* update for emqx 5.8.2

* remove batch peer update

* change the sleep to 10 millisec to avoid timeout

* add compress and change encrypt for peerUpdate message

* add mem profiling and automaxprocs

* add failover ctx mutex

* ignore request to failover peer

* remove code without called

* remove debug logs

* update emqx to v5.8.2

* change broker keepalive

* add OLD_ACL_SUPPORT setting

* add host version check for message encrypt

* remove debug message

* remove peerUpdate call control

---------

Co-authored-by: abhishek9686 <abhi281342@gmail.com>
2024-12-10 10:15:31 +04:00
Yabin Ma
c56f1cab15
fix swagger generation issue (#3241) 2024-12-10 08:41:41 +04:00
Yabin Ma
87ef555542
NET1847:Add STUN settings (#3235)
* add setting to turn on/off STUN

* sync stun setting in peerUpdate

* sync stun servers setting in peerUpdate
2024-12-06 09:38:32 +04:00
Abhishek K
5cb49e3d45
Merge pull request #3231 from gravitl/NET-1842
NET-1842:initialize cache in startup
2024-12-04 12:33:05 +04:00
Yabin Ma
508c4cf8a9
fix nm-quick.sh -p issue (#3234) 2024-12-03 13:29:44 +04:00
dependabot[bot]
4bdc098466
Bump github.com/go-playground/validator/v10 from 10.22.1 to 10.23.0 (#3214)
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.22.1 to 10.23.0.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](https://github.com/go-playground/validator/compare/v10.22.1...v10.23.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-03 13:26:03 +04:00
Abhishek K
8546f858c1
NET-1780: Bind Caddy to public IP, set default netclient to use port 443 (#3220)
* bind caddy to public ip

* set netclient on server to 443
2024-12-03 13:25:49 +04:00
Aceix
89751480e8
feat: receive device info and public endpoint from rac (#3215) 2024-12-03 13:19:43 +04:00
dependabot[bot]
1bfcebaf91
Bump dawidd6/action-download-artifact from 6 to 7 (#3236)
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 6 to 7.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-03 13:18:27 +04:00
dependabot[bot]
259433efe3
Bump golang.org/x/crypto from 0.28.0 to 0.29.0 (#3199)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.28.0 to 0.29.0.
- [Commits](https://github.com/golang/crypto/compare/v0.28.0...v0.29.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-03 13:18:14 +04:00
Yabin Ma
71162e401d
forbid duplicated ip in Edit node (#3206) 2024-12-03 13:18:02 +04:00
dependabot[bot]
43c54fbaa1
Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#3179)
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-03 13:16:59 +04:00
dependabot[bot]
9b6922ac35
Bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 (#3200)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.23.0 to 0.24.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-03 13:16:37 +04:00
Max Ma
e8d3e80b08 initialize cache in startup 2024-11-29 11:35:34 +01:00
Abhishek K
343f5ee393
Merge pull request #3230 from gravitl/master
Master
2024-11-27 15:33:42 +04:00
Abhishek K
dc656352bd
Merge pull request #3229 from gravitl/release-v0.26.0
Release v0.26.0
2024-11-27 15:32:58 +04:00
Abhishek K
24a5757efe
Merge pull request #3228 from gravitl/node_acl_fix26
Node, acl cache fix
2024-11-27 15:31:05 +04:00
abhishek9686
df7a1fae65 sync hosts into cache 2024-11-27 15:30:20 +04:00
abhishek9686
64f730f6f0 list cache 2024-11-27 15:05:08 +04:00
abhishek9686
cbe660fbf2 get all nodes on startup 2024-11-27 15:01:26 +04:00
abhishek9686
cde56204fc load all nodes into cache 2024-11-27 14:56:24 +04:00
Abhishek K
462395f6f2
Merge pull request #3226 from gravitl/master
Master
2024-11-27 13:16:10 +04:00
Abhishek K
fca07f6582
Merge pull request #3225 from gravitl/release-v0.26.0
Release v0.26.0
2024-11-27 13:15:43 +04:00
Abhishek K
ea2a1488c7
Merge pull request #3224 from gravitl/acls_cache_fix
initiliase acl cache
2024-11-27 13:01:37 +04:00
abhishek9686
698032a4dc load acls into cache 2024-11-27 12:57:48 +04:00
abhishek9686
7df8196aba initiliase acl cache 2024-11-27 12:28:08 +04:00
lmnzx
48a8d51e26
Update deletedroplets.yml to extend the sleep to 30mins 2024-11-26 18:27:55 +05:30
Abhishek K
a0747d45a7
Merge pull request #3219 from gravitl/master
Master
2024-11-23 18:21:11 +04:00
Abhishek K
208cbd3e60
Merge pull request #3218 from gravitl/release-v0.26.0
Release v0.26.0
2024-11-23 18:19:24 +04:00
Abhishek K
dbb44c2867
Merge pull request #3217 from gravitl/failover_mutex
Failover mutex
2024-11-23 18:18:36 +04:00
abhishek9686
44769aff31 ignore request to failover peer 2024-11-22 19:31:50 +04:00
abhishek9686
6f60551f02 add failover ctx mutex 2024-11-22 19:14:50 +04:00