Commit graph

23 commits

Author SHA1 Message Date
abhishek9686
292c0744d5 add tags to static node model 2024-10-18 12:27:34 +04:00
abhishek9686
aea26dfdf6 check acl policy on ext client 2024-10-18 11:21:32 +04:00
abhishek9686
de7cabacba update tags on extclient update call 2024-10-17 19:55:58 +04:00
abhishek9686
1596060d4b add tags to extclient 2024-10-17 14:13:33 +04:00
Aceix
39fbb45cfe
feat(NET-817): add postup/down scripts for clients (#2810) 2024-02-08 23:29:43 +05:30
Aceix
72f84c1355
feat(NET-810): add RAC support for admins (#2731)
admins and superadmins can access and connect to any ingress
different users cannot connect to the same ingress with the same remote device
2023-12-20 08:56:30 +04:00
Abhishek K
9f1b722c19
NET-822: Add extra data for RAC gws resp (#2732)
* add extclient allowed ips to rac resp

* add gw peer public key

* fix static check
2023-12-13 17:30:43 +04:00
Abhishek K
719e0c254d
NET-551: User Mgmt Re-Design (#2547)
* add superadmin role, apis to create superadmin user

* apis to attach and remove user from remote access gateways

* add api to list user's remote client has gateway clients

* remove code related user groups

* remove networks and groups from user model

* refactor user CRUD operations

* fix network permission test

* add superadmin to authorize func

* remove user network and groups from cli

* api to transfer superadmin role

* add api to list users on a ingress gw

* restrict user access to resources on server

* deny request from remote access client if extclient is already created

* fix user tests

* fix static checks

* fix static checks

* add limits to extclient create handler

* set username to superadmin on if masterkey is used

* allow creation of extclients using masterkey

* add migration func to assign superadmin role for existing admin user

* check for superadmin on migration if users are present

* allowe masterkey to extcleint apis

* check ownerid

* format error, on jwt token verification failure return unauthorized rather than forbidden

* user update fix

* move user remote functionality to ee

* fix update user api

* security patch

* initalise ee user handlers

* allow user to use master key to update any user

* use slog

* fix auth user test

* table headers

* remove user role, it's covered in middleware

* setuser defaults fix
2023-09-01 14:27:08 +05:30
Aceix
f4a5520f86
Kwesi/net 326 bug client ac ls (#2462)
* feat(NET-326): return 200 [] instead of 500 when there are not network acls

* fix(NET-326): implement allow/deny client acl functions

* fix(NET-326): implement extclient acl update

* fix(NET-326): kame fixes, send peer updates
2023-07-26 10:32:54 +05:30
Matthew R Kasun
78640f1342
Extclient NET-63x (#2286)
* model changes

* additional fields for extclient create

* add DNS to extclient config

* extclient name checks

* update extclient

* nmctl extclient

* final tweaks

* review comments

* add extclientdns to node on ingress creation

* fix to add ingress dns to api (#2296)

---------

Co-authored-by: Aceix <aceixsmartX@gmail.com>
2023-05-17 10:58:03 -04:00
0xdcarns
0f3faceb93 added logic for ext client ACLs 2023-03-14 13:39:33 -04:00
Abhishek Kondur
051f60343b reset ingress to older way 2023-01-25 15:35:45 +04:00
Abhishek Kondur
07dd20734d extclients internal ips 2022-12-12 22:49:35 +05:30
Abhishek Kondur
d8075e69c6 add alias internal ip to ext clients 2022-12-08 19:48:47 +05:30
0xdcarns
88cd0a6497 initial commit 2022-09-13 15:25:56 -04:00
0xdcarns
01484eec7b added ability to disable ext clients 2022-03-11 09:41:14 -05:00
John Sahhar
0cfa197500 models/extclient: Add Address6 to ExtClient
Signed-off-by: John Sahhar <john@gravitl.com>
2022-03-08 16:08:56 -06:00
0xdcarns
8f72ecbaa0 refactored logic 2021-10-26 12:50:34 -04:00
0xdcarns
d7cafbbc4c code linting 2021-10-08 15:07:12 -04:00
worker-9
c2a9007b8c automated ext client egress range addition and ext client dns from network 2021-08-25 09:46:45 -04:00
afeiszli
e333d04e72 removing vulnerability 2021-08-09 17:57:40 -04:00
afeiszli
85af4dd85f set ingress gateway endpoint 2021-05-25 18:05:14 -04:00
afeiszli
29e332edf7 adding extclient functionality 2021-05-19 13:59:10 -04:00