Commit graph

1052 commits

Author SHA1 Message Date
abhishek9686
f3b0bb60f0 fix acl update 2024-09-28 19:40:26 +04:00
abhishek9686
6e032c7d67 resolve merge conflicts 2024-09-28 18:39:55 +04:00
abhishek9686
025167f115 add regex check for tag name 2024-09-28 18:38:49 +04:00
abhishek9686
928bbbfc42 resolve merge conflicts 2024-09-28 18:13:28 +04:00
abhishek9686
9f921beb60 Merge branch 'NET-1613' of https://github.com/gravitl/netmaker into NET-1613 2024-09-28 18:09:05 +04:00
abhishek9686
e521393d3e add validation checks on tag name 2024-09-28 18:08:45 +04:00
abhishek9686
6f12dde94b check id syntax 2024-09-28 18:02:28 +04:00
abhishek9686
5a7e1f3aff upsert acl on tag deletion 2024-09-28 17:20:17 +04:00
abhishek9686
9deac0ad2d sync tag updates with acl policies 2024-09-28 17:19:01 +04:00
abhishek9686
5b49872d5d fix update acl policy 2024-09-26 21:00:04 +04:00
abhishek9686
940ed8b2f0 remove uuid on id type 2024-09-26 18:45:54 +04:00
abhishek9686
dfed77906a create default acl policies on network creation 2024-09-25 20:24:04 +04:00
abhishek9686
3d327bb89e fetch user gw via access policy 2024-09-25 18:18:23 +04:00
abhishek9686
fcd3325173 enforce new acl policy access check 2024-09-25 16:06:08 +04:00
abhishek9686
00b082d11c add validation check for tags 2024-09-25 13:01:40 +04:00
abhishek9686
630928b4f7 add acl policy checker 2024-09-25 10:37:44 +04:00
abhishek9686
6bc59adb2c add acls api handlers 2024-09-24 19:45:45 +04:00
abhishek9686
e258f12ecb set Acl DB crud 2024-09-24 19:09:15 +04:00
abhishek9686
6c10724622 add mutex to tag operations 2024-09-22 18:24:48 +04:00
abhishek9686
ad4c663612 fix tag udpate with new ID 2024-09-22 15:22:36 +04:00
abhishek9686
7dffa98884 associate enrollment key tags to node 2024-09-22 14:06:17 +04:00
abhishek9686
04b8737a02 move tags to node model 2024-09-22 13:37:58 +04:00
abhishek9686
c64dc852ae associate tags to network level 2024-09-22 12:22:24 +04:00
abhishek9686
db224ba2d9 allow tag name update 2024-09-19 16:49:31 +04:00
abhishek9686
db2550b7bd add tag groups to enrollment key 2024-09-18 12:22:49 +04:00
abhishek9686
3d392ee9b1 add delete tag api 2024-09-18 11:08:47 +04:00
abhishek9686
ee5d87733b guard update tag with mutex 2024-09-18 10:46:42 +04:00
abhishek9686
99220fddd3 fix update tag handler 2024-09-18 00:35:50 +04:00
abhishek9686
d64f098181 Tag CRUD APIs 2024-09-17 19:34:45 +04:00
Max Ma
19d4fbaa24
NET-1497:set node lastcheckin after reboot (#3102)
* set node lastcheckin after reboot

* set node connected after reboot
2024-09-16 18:41:11 +04:00
Max Ma
189ac27527
NET-1509:add ingresspersistentkeepalive and ingressmtu for extClient/RAC config (#3107)
* add ingresspersistentkeepalive and ingressmtu for extClient/RAC config

* add ingressmtu and PKA in api response

* add pka and mtu in api/nodes PUT call

* add default value for PKA and mtu for extClients
2024-09-12 12:19:27 +04:00
Max Ma
bbca20e463
NET-1565:fix extClient ip conflict issue (#3082)
* fix extClient ip conflict issue

* Update users.go

---------

Co-authored-by: Abhishek K <abhishek@netmaker.io>
2024-08-28 18:58:07 +05:30
Abhishek K
0463b17ea5
NET-1227: Add Additional Oauth Scopes to fetch user email (#3079)
* add list roles to pro and ce

* if not pro set user role to admin

* validate update user

* add separate validation check for password on update

* remove validate check

* fix github SSO with invite signup

* add oauth scopes for user email

* remove debug log

* fix azure ad
2024-08-28 14:14:26 +05:30
Abhishek K
0a1558d5ac
NET-1227: fix update password on update user handler (#3077)
* add list roles to pro and ce

* if not pro set user role to admin

* validate update user

* add separate validation check for password on update

* remove validate check
2024-08-27 15:24:18 +05:30
Abhishek K
d532060c50
Net 1227 v2 (#3075)
* add list roles to pro and ce

* if not pro set user role to admin

* validate update user

* add separate validation check for password on update
2024-08-27 13:36:53 +05:30
Abhishek K
a4d528e267
Net 1227 v2 (#3074)
* add list roles to pro and ce

* if not pro set user role to admin

* validate update user
2024-08-27 12:29:32 +05:30
Abhishek K
a39da31fa6
add list roles to pro and ce (#3072) 2024-08-27 11:51:13 +05:30
Abhishek K
5a4d0663da
NET-1227: User Cli cmds Update (#3064)
* generalise smtp config

* copy over smtp vars

* env new line

* fix master key api access

* comment user tests

* fix network and user invite for master key access

* remove email sender type

* user mgmt commands

* check user role on CE

* user role nmtcl cmds

* user groups commands

* fix role and groups command

* fix user create cmd

* add usage info

* rm user role check

* fix user update cmd

* fix static check
2024-08-25 07:25:40 +05:30
Abhishek K
2e8d95e80e
NET-1227: User Mgmt V2 (#3055)
* user mgmt models

* define user roles

* define models for new user mgmt and groups

* oauth debug log

* initialize user role after db conn

* print oauth token in debug log

* user roles CRUD apis

* user groups CRUD Apis

* additional api checks

* add additional scopes

* add additional scopes url

* add additional scopes url

* rm additional scopes url

* setup middlleware permission checks

* integrate permission check into middleware

* integrate permission check into middleware

* check for headers for subjects

* refactor user role models

* refactor user groups models

* add new user to pending user via RAC login

* untracked

* allow multiple groups for an user

* change json tag

* add debug headers

* refer network controls form roles, add debug headers

* refer network controls form roles, add debug headers

* replace auth checks, add network id to role model

* nodes handler

* migration funcs

* invoke sync users migration func

* add debug logs

* comment middleware

* fix get all nodes api

* add debug logs

* fix middleware error nil check

* add new func to get username from jwt

* fix jwt parsing

* abort on error

* allow multiple network roles

* allow multiple network roles

* add migration func

* return err if jwt parsing fails

* set global check to true when accessing user apis

* set netid for acls api calls

* set netid for acls api calls

* update role and groups routes

* add validation checks

* add invite flow apis and magic links

* add invited user via oauth signup automatically

* create invited user on oauth signup, with groups in the invite

* add group validation for user invite

* update create user handler with new role mgmt

* add validation checks

* create user invites tables

* add error logging for email invite

* fix invite singup url

* debug log

* get query params from url

* get query params from url

* add query escape

* debug log

* debug log

* fix user signup via invite api

* set admin field for backward compatbility

* use new role id for user apis

* deprecate use of old admin fields

* deprecate usage of old user fields

* add user role as service user if empty

* setup email sender

* delete invite after user singup

* add plaform user role

* redirect on invite verification link

* fix invite redirect

* temporary redirect

* fix invite redirect

* point invite link to frontend

* fix query params lookup

* add resend support, configure email interface types

* fix groups and user creation

* validate user groups, add check for metrics api in middleware

* add invite url to invite model

* migrate rac apis to new user mgmt

* handle network nodes

* add platform user to default role

* fix user role migration

* add default on rag creation and cleanup after deletion

* fix rac apis

* change to invite code param

* filter nodes and hosts based on user network access

* extend create user group req to accomodate users

* filter network based on user access

* format oauth error

* move user roles and groups

* fix get user v1 api

* move user mgmt func to pro

* add user auth type to user model

* fix roles init

* remove platform role from group object

* list only platform roles

* add network roles to invite req

* create default groups and roles

* fix middleware for global access

* create default role

* fix nodes filter with global network roles

* block selfupdate of groups and network roles

* delete netID if net roles are empty

* validate user roles nd groups on update

* set extclient permission scope when rag vpn access is set

* allow deletion of roles and groups

* replace _ with - in role naming convention

* fix failover middleware mgmt

* format oauth templates

* fetch route temaplate

* return err if user wrong login type

* check user groups on rac apis

* fix rac apis

* fix resp msg

* add validation checks for admin invite

* return oauth type

* format group err msg

* fix html tag

* clean up default groups

* create default rag role

* add UI name to roles

* remove default net group from user when deleted

* reorder migration funcs

* fix duplicacy of hosts

* check old field for migration

* from pro to ce make all secondary users admins

* from pro to ce make all secondary users admins

* revert: from pro to ce make all secondary users admins

* make sure downgrades work

* fix pending users approval

* fix duplicate hosts

* fix duplicate hosts entries

* fix cache reference issue

* feat: configure FRONTEND_URL during installation

* disable user vpn access when network roles are modified

* rm vpn acces when roles or groups are deleted

* add http to frontend url

* revert crypto version

* downgrade crytpo version

* add platform id check on user invites

---------

Co-authored-by: the_aceix <aceixsmartx@gmail.com>
2024-08-20 17:08:56 +05:30
Max Ma
46b8fd21c8
NET-1440: scale test changes (#3014)
* NET-1440 scale test changes

* fix UT error and add error info

* load metric data into cacha in startup

* remove debug info for metric

* add server telemetry and hasSuperAdmin to cache

* fix user UT case

* update sqlite connection string for performance

* update check-in TS in cache only if cache enabled

* update metric data in cache only if cache enabled and write to DB once in stop

* update server status in mq topic

* add failover existed to server status update

* only send mq messsage when there is server status change

* batch peerUpdate

* code changes for scale for review

* update UT case

* update mq client check

* mq connection code change

* revert server status update changes

* revert batch peerUpdate

* remove server status update info

* code changes based on review and setupmqtt in keepalive

* set the mq message order to false for PIN

* remove setupmqtt in keepalive

* recycle ip in node deletion

* update ip allocation logic

* remove ip addr cap

* remove ippool file

* update get extClient func

* remove ip from cache map when extClient is removed
2024-08-15 11:59:00 +05:30
Max Ma
5b9ccb74a9
improve message for create egressGW (#3001) 2024-07-09 18:56:36 +05:30
Max Ma
f63dfaf4b5
NET-1288:add egress range check with netmaker network address (#2978)
* add egress range check with netmaker network address

* add egerssrange check for delete egressGW and extClientGW

* remove egress range check for delete
2024-07-05 15:53:46 +05:30
Abhishek K
aeb76764c4
NET-1357: add endpoint to exisiting peer config (#2973)
* debug logs

* add endpoint to exisiting peer config

* rm debug logs

* don't set port to public port when host is static
2024-06-12 17:32:43 +05:30
Abhishek K
50d8da2dc2
Merge pull request #2958 from gravitl/NET-1268
NET-1268:seperate static port and static endpoint
2024-06-05 12:47:45 +05:30
Max Ma
0180481ddb fix egressing exclient set route issue 2024-06-03 19:41:13 +02:00
Max Ma
c7469c79d0 rename isstaticendpoint to isstatic 2024-06-03 10:37:19 +02:00
Abhishek K
7ff30599ed
NET-1252: Restrict inetGws, Relays from getting failedOver (#2937)
* add additional checks to avoid failovers

* add failover defence check on signal handler

* only add check for victim node

* avoid failover reset on pull

* add relayed for failoverme

* misc changes for failover

* remove resetfailoverpeers for InetNode

* add egress route back to allowedip list if relayed is egressGW

* add extclient back to allowedip list if peer is ingressGW

* reset failover on pull

---------

Co-authored-by: Max Ma <mayabin@gmail.com>
2024-06-03 10:49:02 +04:00
Max Ma
35a8528030
NET-1154:fix stale node issue on multinet when deleting host (#2940)
* fix stale node issue on multinet when deleting host

* fix stale node when deleting host or uninstall
2024-06-03 10:28:21 +04:00
Max Ma
81a6c9cf8a seperate static port and static endpoint 2024-05-28 10:16:11 +02:00
the_aceix
78180c86be fix: add metadata field to create RAG 2024-05-17 10:45:32 +00:00