Commit graph

298 commits

Author SHA1 Message Date
abhishek9686
0f97dc6c7f move user mgmt func to pro 2024-07-30 18:04:27 +05:30
abhishek9686
a7a431b36b move user roles and groups 2024-07-29 16:41:57 +05:30
abhishek9686
9d92fe52c1 format oauth error 2024-07-28 07:00:46 +05:30
abhishek9686
16874d4992 filter nodes and hosts based on user network access 2024-07-25 23:41:50 +05:30
abhishek9686
f6ae4788a1 fix rac apis 2024-07-24 16:08:59 +05:30
abhishek9686
9abc892c5a migrate rac apis to new user mgmt 2024-07-22 00:00:26 +05:30
abhishek9686
d8d82b933a fix merge conflicts 2024-07-16 15:54:29 +05:30
Max Ma
65faf73fe9
NET-1226: Scalability Improvements (#2987)
* add api to check if failover node existed

* remove 5 minute peerUpdate

* update peerUpdate to trigger pull

* update Action name to SignalPull

* revert the peerUpdate from SignalPull

* fix getfailover error issue

* rm acls creation for on-prem emqx

* remove use of acls

* add additional broker status field on status api

* NET-1165: Remove creation of acls on emqx (#2996)

* rm acls creation for on-prem emqx

* remove use of acls

* add additional broker status field on status api

* comment out mq reconnect logic

* configure mq conn params

* add metric_interval in ENV for publishing metrics

* add metric_interval in ENV for publishing metrics

* update PUBLISH_METRIC_INTERVAL env name

* revert the mq setttings back

* fix error nil issue

---------

Co-authored-by: abhishek9686 <abhi281342@gmail.com>
Co-authored-by: Abhishek K <32607604+abhishek9686@users.noreply.github.com>
2024-07-09 18:56:55 +05:30
abhishek9686
a797875c9b delete invite after user singup 2024-07-09 13:37:35 +05:30
abhishek9686
7b0906ac62 add user role as service user if empty 2024-07-08 17:54:44 +05:30
abhishek9686
db3deba181 deprecate use of old admin fields 2024-07-07 13:53:22 +05:30
abhishek9686
34bcff2b1d set admin field for backward compatbility 2024-07-07 10:49:01 +05:30
Max Ma
7254fd850a
NET-1308:return error if relayed node is an InetClient (#2980)
* return error if relayed node is an InetClient

* add relayed InetGW/Relay check

* add relayedby check when adding InetClient
2024-07-05 15:53:14 +05:30
abhishek9686
b486787deb create invited user on oauth signup, with groups in the invite 2024-07-04 08:51:27 +05:30
abhishek9686
12acada4a1 add invited user via oauth signup automatically 2024-07-02 16:14:22 +05:30
abhishek9686
3d58241e14 Merge branch 'develop' of https://github.com/gravitl/netmaker into NET-1227 2024-06-14 17:48:01 +05:30
Abhishek K
1ce38f7c7c
NET-1349: add new user to pending user via RAC login (#2967)
* add new user to pending user via RAC login

* fix: add check for allowed domains

---------

Co-authored-by: the_aceix <aceixsmartx@gmail.com>
2024-06-11 18:07:32 +05:30
abhishek9686
6eaedc5fb0 setup user access middlerware controller 2024-06-11 07:32:10 +05:30
abhishek9686
607a2d98ee add new user to pending user via RAC login 2024-06-10 18:28:21 +05:30
Abhishek K
87b2c1bb33
NET-1307: restrict failover node from being relayed (#2960)
* restrict failover node from being relayed

* set errors on failover valid checks
2024-06-04 15:07:35 +05:30
Abhishek K
7ff30599ed
NET-1252: Restrict inetGws, Relays from getting failedOver (#2937)
* add additional checks to avoid failovers

* add failover defence check on signal handler

* only add check for victim node

* avoid failover reset on pull

* add relayed for failoverme

* misc changes for failover

* remove resetfailoverpeers for InetNode

* add egress route back to allowedip list if relayed is egressGW

* add extclient back to allowedip list if peer is ingressGW

* reset failover on pull

---------

Co-authored-by: Max Ma <mayabin@gmail.com>
2024-06-03 10:49:02 +04:00
Max Ma
5ea2c9f9ed
ipv6 only inetClient works on ipv10 inetGW (#2944) 2024-06-03 10:27:38 +04:00
Aceix
d9237da2f6
feat(NET-1207): show network info on RAC (#2949) 2024-06-03 10:25:07 +04:00
abhishek9686
3adb0a3e32 rm additional scopes url 2024-05-27 14:50:55 +05:30
abhishek9686
55601d4d80 add additional scopes url 2024-05-27 14:07:52 +05:30
abhishek9686
68758c8f76 add additional scopes url 2024-05-27 13:48:36 +05:30
abhishek9686
5eb87dc327 add additional scopes 2024-05-27 13:41:56 +05:30
abhishek9686
f70e27b64f print oauth token in debug log 2024-05-24 16:54:47 +05:30
abhishek9686
50c7de1608 oauth debug log 2024-05-24 16:16:48 +05:30
Abhishek K
4a355ee9f3
add gw listen port (#2931) 2024-05-09 13:00:21 +05:30
Aceix
abf3f4f55d
feat(NET-1106): support additional RAG endpoint IPs (#2907) 2024-05-08 14:45:05 +05:30
Max Ma
da11dc8a87
NET-1134:move oauth from CE build block to pro (#2919)
* move oauth from CE build block to pro

* move oauth code and api handler under pro

* move common func back to auth from pro/auth

* change log level to Info for information logs

* fix import issue
2024-05-08 12:44:39 +05:30
momantech
7e2b5b196a
chore: fix some comments (#2918) 2024-05-08 12:17:23 +05:30
Abhishek K
2c38d1e8b1
Merge pull request #2923 from gravitl/hotfix/telemetry-trial-end-date
update develop with v0.24.0 hotfixes
2024-05-07 16:14:17 +05:30
the_aceix
5d02109252 fix(NET-1175): use default trial end date
this "more recent" arbitrary date is needed for hubspot to consume exported data without throwing out of date range exeptions
2024-05-03 12:52:55 +00:00
Max Ma
1ad837ad72
NET-1164:PublishDeletedClientPeerUpdate when deleting user from RAGW (#2912)
* PublishDeletedClientPeerUpdate when deleting user from RAGW

* update ACLs after extClient is removed
2024-05-03 12:25:38 +05:30
abhishek9686
b2361be29b track failover usage 2024-04-17 17:22:47 +05:30
Max Ma
961f8eab6e
NET-1119 (#2886)
* exclude IngressGW in failover

* resetfailoverpeer when adding IngressGw if failover enabled

* exclude InetGW in failover

* get egress ranges of failedover peer

---------

Co-authored-by: abhishek9686 <abhi281342@gmail.com>
2024-04-12 18:22:03 +05:30
Abhishek K
66069fbc34
NET-1082: Scale Testing Fixes (#2894)
* add additional mutex lock on node acls func

* increase verbosity

* disable acls on cloud emqx

* add emqx creds creation to go routine

* add debug log of mq client id

* comment port check

* uncomment port check

* check for connection mq connection open

* use username for client id

* add write mutex on acl is allowed

* add mq connection lost handler on server

* spin off zombie init as go routine

* get whole api path from config

* Revert "get whole api path from config"

This reverts commit 392f5f4c5f.

* update extclient acls async

* add additional mutex lock on node acls func

(cherry picked from commit 5325f0e7d7)

* increase verbosity

(cherry picked from commit 705b3cf0bf)

* add emqx creds creation to go routine

(cherry picked from commit c8e65f4820)

* add debug log of mq client id

(cherry picked from commit 29c5d6ceca)

* comment port check

(cherry picked from commit db8d6d95ea)

* check for connection mq connection open

(cherry picked from commit 13b11033b0)

* use username for client id

(cherry picked from commit e90c7386de)

* add write mutex on acl is allowed

(cherry picked from commit 4cae1b0bb4)

* add mq connection lost handler on server

(cherry picked from commit c82918ad35)

* spin off zombie init as go routine

(cherry picked from commit 6d65c44c43)

* update extclient acls async

(cherry picked from commit 6557ef1ebe)

* additionl logs for oauth user flow

(cherry picked from commit 61703038ae)

* add more debug logs

(cherry picked from commit 5980beacd1)

* add more debug logs

(cherry picked from commit 4d001f0d27)

* add set auth secret

(cherry picked from commit f41cef5da5)

* fix fetch pass

(cherry picked from commit 825caf4b60)

* make sure auth secret is set only once

(cherry picked from commit ba33ed02aa)

* make sure auth secret is set only once

(cherry picked from commit 920ac4c507)

* comment usage of emqx acls

* replace  read lock with write lock on acls

* replace  read lock with write lock on acls

(cherry picked from commit 808d2135c8)

* use deadlock pkg for visibility

* add additional mutex locks

* remove race flag

* on mq re-connecting donot exit if failed

* on mq re-connecting donot exit if failed

* revert mutex package change

* set mq clean session

* remove debug log

* go mod tidy

* revert on prem emqx acls del
2024-04-11 21:18:57 +05:30
Max Ma
8404523c6d
fix relay ipv6 mask issue (#2889) 2024-04-11 17:38:13 +05:30
Max Ma
e0bde5b67f
Net 1088 (#2872)
* fix ipv6 only issue

* fix InetGw ipv6 issue

* refactor constants for NET1088

* fix extClient IPv6 empty issue
2024-04-09 11:50:07 +05:30
Abhishek K
b7c8b738d7
NET-1064: Improved Oauth SignUp message prompts (#2875)
* add pending users api

* insert user to pending users on first time oauth login

* add pending user check on headless login

* fix conflicting apis

* no records error

* add allowed emails domains for oauth singup to config

* check if user is allowed to signup

* improve oauth message prompts

* handle trial enddate  error logs
2024-04-03 23:59:44 +05:30
Abhishek K
3152c678e0
Merge pull request #2869 from gravitl/master
Master
2024-03-22 09:53:42 +07:00
abhishek9686
19a2784b7f ignore bad gateway, retry later on license validation 2024-03-22 09:50:09 +07:00
Aceix
4871a0dd1c
fix(NET-1009): fix client connectivity metrics data (#2858) 2024-03-20 15:11:11 +07:00
Abhishek K
76a6ee7434
Merge pull request #2867 from gravitl/master
Master
2024-03-20 15:04:50 +07:00
Abhishek K
c7e673fb9f
ACC-532: set mq clean session to true (#2865)
* set clean session

* delete emqx hosts creds api

* add emqx hosts del api to limited middleware controller

* add emqx hosts del api to limited middleware controller

* remove server creds from emqx
2024-03-20 15:03:41 +07:00
abhishek9686
ddff30793d ignore error 2024-03-20 13:27:38 +07:00
abhishek9686
8ac864fec8 add update check for validate relay 2024-03-04 13:39:33 +07:00
abhishek9686
d69d0ed2e2 validate relay req for inet gws 2024-03-02 12:42:04 +07:00