Commit graph

5952 commits

Author SHA1 Message Date
Abhishek K 44ee28d4b5
Update Dockerfile-go-builder 2024-01-03 12:18:53 +05:30
Farukh Khan 1f9ef50df7
NET-655 (#2670)
* NET-655

* Updated HostPull structure to include EgressRoutes and FirewallUpdate models.

* added ServerVersion structure to hostpull model

* added ServerVersion structure to hostpull model

* removed ServerVersion structure

* removed ServerVersion structure

* added egressroute and fwupdate to hostpull handler

* add host update fallback handler

* set broker type on server cfg

* use actual host password to create emqx user

---------

Co-authored-by: Christopher Blaha <crispspiceguitar@gmail.com>
Co-authored-by: Abhishek Kondur <abhi281342@gmail.com>
2023-12-21 10:43:06 +04:00
Aceix 61d6b2fa3f
fix(NET-799): fix acl allow/deny subcommands (#2736) 2023-12-20 13:30:45 +04:00
Abhishek K 9fcefd7911
Net 822 (#2745)
* add extclient allowed ips to rac resp

* add gw peer public key

* fix static check

* add param for remote access client id

* don't decode body

* debug

* debug

* change user gws req to POST

* debug

* change api to GET
2023-12-20 13:17:34 +04:00
dependabot[bot] e801c157d1
Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#2739)
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-20 10:37:59 +04:00
dependabot[bot] 56d522ce41
Bump github.com/mattn/go-sqlite3 from 1.14.18 to 1.14.19 (#2740)
Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.18 to 1.14.19.
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.18...v1.14.19)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-20 10:37:42 +04:00
dependabot[bot] 319d7d1a0b
Bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#2741)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.16.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-20 10:37:32 +04:00
dependabot[bot] a6ccf3de3a
Bump dawidd6/action-download-artifact from 2 to 3 (#2742)
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 2 to 3.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/v2...v3)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-20 10:37:19 +04:00
Abhishek K 7e3bf3baea
NET-812: Deprecate Setting /etc/hosts entries (#2733)
* deprecate setting etc host dns entries, set coredns entries at neccessary places

* remove dns mq topics

* only set dns when set on

* add extcleints dns entries to coredns

* fix static checks

* run coredns with host network mode

* add bind address to coredns container
2023-12-20 10:24:53 +04:00
Abhishek K b69bf60160
NET-811: block normal user login from accessing dashboard (#2724)
* block normal user login from accessing dashboard

* header change

* allow from ui header

* allow from ui header

* check for user role after decoding

* block oauth login for normal user

* handle other oauth provider callback funcs for user login
2023-12-20 09:08:55 +04:00
Aceix 72f84c1355
feat(NET-810): add RAC support for admins (#2731)
admins and superadmins can access and connect to any ingress
different users cannot connect to the same ingress with the same remote device
2023-12-20 08:56:30 +04:00
Abhishek K 98c01c4325
NET-814: Deprecating TURN (#2723)
* deprecate turn

* process signals through mq
2023-12-13 22:46:57 +04:00
Abhishek K 9f1b722c19
NET-822: Add extra data for RAC gws resp (#2732)
* add extclient allowed ips to rac resp

* add gw peer public key

* fix static check
2023-12-13 17:30:43 +04:00
Aceix 8aa185d880
feat(NET-678): add saas support to nmctl (#2687)
* feat(NET-678): add saas support to nmctl

* fix(NET-678): fix context endpoint for sso
2023-12-13 14:04:09 +04:00
Aceix c8ae70bd69
fix(NET-760): check for private network range (#2722) 2023-12-13 14:02:57 +04:00
dependabot[bot] 643950f9eb
Bump actions/setup-go from 4 to 5 (#2727)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 14:02:03 +04:00
dependabot[bot] 32b54c5e21
Bump github.com/coreos/go-oidc/v3 from 3.8.0 to 3.9.0 (#2728)
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.8.0 to 3.9.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.8.0...v3.9.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 14:01:42 +04:00
dependabot[bot] e7eecb4ead
Bump filippo.io/edwards25519 from 1.0.0 to 1.1.0 (#2729)
Bumps [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519) from 1.0.0 to 1.1.0.
- [Commits](https://github.com/FiloSottile/edwards25519/compare/v1.0.0...v1.1.0)

---
updated-dependencies:
- dependency-name: filippo.io/edwards25519
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 14:01:15 +04:00
dependabot[bot] 81988aac88
Bump alpine from 3.18.5 to 3.19.0 (#2730)
Bumps alpine from 3.18.5 to 3.19.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 14:00:53 +04:00
Christopher Blaha 6a6c55c21a
update develop (#2725) 2023-12-11 20:01:31 +04:00
Abhishek K 530dbdc65c
NET-710: Internet Gws Re-Design (#2718)
* add internet gateway to client gateway

* migration func to remove internet egress range from egress gateway

* add internet gateways ranges to firewall update

* add internet gw ranges to extcleint conf

* add ipv6 internet address

* remove failover field from ingress req

* only let normal to be created on PRO (#2716)

* feat(NET-805): send internet gw props to rac

* set inet gw field on node update api

* move internet gws to EE

---------

Co-authored-by: the_aceix <aceixsmartx@gmail.com>
2023-12-06 23:57:58 +04:00
dependabot[bot] 03db704436
Bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#2699)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.14.0 to 0.15.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-05 12:04:59 +04:00
dependabot[bot] 37f3773943
Bump golang.org/x/crypto from 0.15.0 to 0.16.0 (#2700)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.15.0 to 0.16.0.
- [Commits](https://github.com/golang/crypto/compare/v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-05 12:02:47 +04:00
dependabot[bot] f365f83fef
Bump alpine from 3.18.4 to 3.18.5 (#2720)
Bumps alpine from 3.18.4 to 3.18.5.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-05 12:02:33 +04:00
dependabot[bot] f0052ac1d8
Bump github.com/coreos/go-oidc/v3 from 3.7.0 to 3.8.0 (#2719)
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.7.0 to 3.8.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.7.0...v3.8.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-05 12:01:57 +04:00
Abhishek K 2c4a27c53b
NET-735: HA Support (#2701)
* cache enabled option, cache hosts data if only enabled

* cache nodes only when enabled

* cache extclients only when enabled

* cache acls only when enabled
2023-12-05 12:01:35 +04:00
Abhishek K 8b659b3d00
only let normal to be created on PRO (#2716) 2023-11-30 22:37:00 +04:00
Aceix a9e3f1ce67
fix: stability patches (#2698)
- avoid panic when deleting other admin users
- improve error handling
2023-11-29 20:12:37 +04:00
Abhishek K b78cc0a8a1
NET-725: Failovers (#2685)
* api to  to get host relayed from client

* add auto relay to api host

* add peer nat type

* set pro field on signal

* rm net check on relay me handler

* return success response

* re-establish failover logic

* set failOver ctx

* failOver with peer pub key

* failovered peer updates

* failover handlers, reset failovered peer on deletion

* rm unused funcs

* initialize failover handler on EE

* ignore failover node on signal

* failover changes

* set host id on signal

* extend signal model to include node ids

* add backwards compatibility

* add failover as node api

* set json response on failover handers

* add failover field to api node

* fix signal data check

* initialize failover peer map

* reset failovered status when relayed or deleted

* add failover info to api node

* reset network failover

* only proceed furtuer if failover exists in the network

* set failOver node defaults

* cannot set failover node as relayed

* debug log

* debug log

* debug changes

* debug changes

* debug changes

* revert debug changes

* don't add peers to idmap when removed

* reset failed Over

* fix static checks

* rm debug log

* add check for linux host
2023-11-29 20:10:07 +04:00
Abhishek K 5efa52279d
Merge pull request #2697 from gravitl/master
master
2023-11-27 20:31:26 +04:00
Abhishek K 54a3afc19a
Merge pull request #2696 from gravitl/release-v0.21.2
Release v0.21.2
2023-11-27 20:30:08 +04:00
Abhishek K 4c35a7101e
Merge pull request #2695 from gravitl/NET-802
set superadmin to user if owner conf is set
2023-11-27 20:28:48 +04:00
Abhishek Kondur 2f76fa577a saas owner email 2023-11-27 20:27:10 +04:00
Abhishek Kondur 89e9a6f34e set superadmin to user if owner conf is set 2023-11-27 20:13:29 +04:00
Abhishek K 45398c21da
Merge pull request #2694 from gravitl/NET-802
NET-802: return user details form db
2023-11-27 17:39:27 +04:00
Abhishek K 0874618aac
Merge pull request #2693 from gravitl/NET-800
NET-800: Extclients ExtraAllowed IPs
2023-11-27 17:35:43 +04:00
Abhishek Kondur 81de838d93 return user details form db 2023-11-27 14:43:12 +04:00
Farukh Khan 99adc96f72
NET-698 (#2671)
* create emqx creds for host on pull if not found

* create emqx creds for host on pull if not found.

* emqx creds creation changed to host authenticate function

* emqx creds creation changed to host authenticate function.

* added node acls update

* added node acls update.
2023-11-27 13:54:21 +04:00
Abhishek Kondur a41fcb5faa initalize extraallowed ips field 2023-11-27 12:24:31 +04:00
Abhishek Kondur cf0b4cbd2b fix extclient route conv 2023-11-27 11:19:46 +04:00
Abhishek Kondur b3ec58a929 add extraclient egress routes 2023-11-27 10:16:18 +04:00
Abhishek Kondur 358bd12297 send peer update for extclient extraAllowedIps update 2023-11-27 10:03:21 +04:00
Abhishek Kondur fceae8f93a move code to extpeers 2023-11-24 19:29:43 +04:00
Abhishek Kondur b6b71c951e add extclient extra allowedIPs and attach them to egress routes 2023-11-24 18:32:43 +04:00
Abhishek Kondur 9a58c1237e extraAllowedIps fix for ext clients 2023-11-24 15:17:27 +04:00
Abhishek K 1d7299cbb3
Merge pull request #2692 from gravitl/master
master
2023-11-24 14:57:46 +04:00
Abhishek K a5249d0208
Merge pull request #2691 from gravitl/release-v0.21.2
Release v0.21.2
2023-11-24 14:56:38 +04:00
Abhishek K 0fc520ff6b
Merge pull request #2688 from gravitl/NET-793
NET-793: skip license validation on timeout error
2023-11-23 09:16:13 +04:00
Abhishek Kondur 5fd0f3c965 disable clear cache hook 2023-11-23 08:53:41 +04:00
Abhishek Kondur 8a0f96fe9c skip license validation on timeout error 2023-11-23 08:40:10 +04:00