bcmmbaga
9dcaa51b68
Merge branch 'main' into add-process-posture-check
2024-03-18 18:41:38 +03:00
Maycon Santos
f0672b87bc
Add missing dns domain to tests to avoid verbose test logs ( #1724 )
2024-03-18 12:25:01 +01:00
Maycon Santos
9b0fe2c8e5
Validate authentik issuer url ( #1723 )
...
* Validate authentik issuer url
* test issuer
* adjust test times on windows
2024-03-18 10:12:46 +01:00
Misha Bragin
abd57d1191
Avoid creating duplicate groups with the same name ( #1579 )
...
Avoid creating groups with the same name via API calls.
JWT and integrations still allowed to register groups with duplicated names
2024-03-17 11:13:39 +01:00
Maycon Santos
416f04c27a
Unblock ACL apply filtering because of dns probes ( #1711 )
...
moved the e.dnsServer.ProbeAvailability() to run after ACL apply filtering
run the probes in parallel
2024-03-15 18:57:18 +01:00
Maycon Santos
fc7c1e397f
Disable force jsonfile variable ( #1611 )
...
This enables windows management tests
Added another DNS server to the dns server tests
2024-03-15 10:50:02 +01:00
Aaron Turner
52a3ac6b06
Add support for inviting/deleting users via Zitadel ( #1572 )
...
This fixes the "Invite User" button in Dashboard v2.0.0
and enables the usage of the --user-delete-from-idp flag for Zitadel.
Unlike the NetBird SaaS solution, we rely on Zitadel to send
the emails on our behalf.
2024-03-15 10:32:51 +01:00
Yury Gargay
0b3b50c705
Remove deprecated Rules API endpoints ( #1523 )
2024-03-14 21:31:21 +01:00
Bethuel Mmbaga
180f5a122e
Refactor posture check validations ( #1705 )
...
* Add posture checks validation
* Refactor code to incorporate posture checks validation directly into management.
* Add posture checks validation for geolocation, OS version, network, process, and NB-version
* Fix tests
2024-03-14 20:16:50 +00:00
Maycon Santos
042141db06
Update account attributes only when there is a domain ( #1701 )
...
add log for when a domain is not present
2024-03-14 14:17:22 +01:00
bcmmbaga
90ab2f7c89
Fix linters
2024-03-14 16:06:50 +03:00
bcmmbaga
4ab993c933
Fix tests
2024-03-14 15:52:15 +03:00
bcmmbaga
1a5d59be1d
Refactor
2024-03-14 14:35:21 +03:00
bcmmbaga
9db450d599
Add single Unix/Windows path check in process tests
2024-03-14 14:32:55 +03:00
bcmmbaga
cc60df7805
Allow set of single unix or windows path check
2024-03-14 14:32:40 +03:00
bcmmbaga
60f9f08ecb
fix tests
2024-03-13 11:02:47 +03:00
Viktor Liu
4a1aee1ae0
Add routes and dns servers to status command ( #1680 )
...
* Add routes (client and server) to status command
* Add DNS servers to status output
v0.26.3
2024-03-12 19:06:16 +01:00
Krzysztof Nazarewski
ba33572ec9
add --service/-s flag for specifying system service name ( #1691 )
2024-03-12 18:29:19 +01:00
Maycon Santos
9d213e0b54
Add fallback retry to daemon ( #1690 )
...
This change adds a fallback retry to the daemon service.
this retry has a larger interval with a shorter max retry run time
then others retries
2024-03-12 18:05:41 +01:00
bcmmbaga
41348bb39b
Add process validation for peer metadata
2024-03-12 19:24:08 +03:00
bcmmbaga
e66e39cc70
Extend peer metadata with processes
2024-03-12 19:23:57 +03:00
bcmmbaga
9f41a1f20f
add process posture check to posture checks handlers
2024-03-12 15:20:00 +03:00
bcmmbaga
5f0eec0add
wip: add process check posture
2024-03-12 15:19:22 +03:00
Maycon Santos
5dde044fa5
Check for record not found when searching the store ( #1686 )
...
This change returns status.NotFound only on gorm.ErrRecordNotFound and status.Internal on every other DB error
2024-03-10 19:09:45 +01:00
Bethuel Mmbaga
5a3d9e401f
Send terminal notification on peer session expiry ( #1660 )
...
Send notification through terminal on user session expiration in Linux and macOS,
unless UI application is installed to handle it instead.
2024-03-08 18:28:13 +01:00
Maycon Santos
fde1a2196c
add ansible collections contributions ( #1675 )
2024-03-06 23:30:16 +01:00
Maycon Santos
0aeb87742a
Return 1s when next expiration is too low ( #1672 )
...
using the login expired issue could cause problems with ticker used in the scheduler
This change makes 1s the minimum number returned when rescheduling the peer expiration task
2024-03-06 15:18:53 +01:00
Deniz Adrian
6d747b2f83
Do not fail on virtualized windows systems ( #1669 )
...
this handles virtualized systems without Win32_ComputerSystemProduct entries by returning 'unknown' for system product name
Co-authored-by: Bjoern Brauer <zaubernerd@zaubernerd.de >
2024-03-06 14:32:34 +01:00
Viktor Liu
199bf73103
Remove usage stats ( #1665 )
2024-03-05 09:45:32 +01:00
Maycon Santos
17f5abc653
Handle canceling schedule and avoid recursive call ( #1636 )
...
Using time.Ticker allows us to avoid recursive calls that may end up in schedule running and possible deadlock if no routine is listening for cancel calls
2024-03-03 10:35:01 +01:00
Maycon Santos
aa935bdae3
Register creation time for peer, user and account ( #1654 )
...
This change register creation time for new peers, users and accounts
2024-03-02 13:49:40 +01:00
Bethuel Mmbaga
452419c4c3
Send UI notification on peer connection session expiry ( #1646 )
...
notify the user when the peer connection session expires after it switches from connected
to disconnected and the status is login required
2024-03-01 17:57:17 +01:00
Viktor Liu
17b1099032
Enhance DNS failover reliability ( #1637 )
...
* Fix using wrong array index in log to avoid potential panic
* Increase gRPC connection timeout and add the timeout resolv.conf option
This makes sure the dns client is able to failover to a second
configured nameserver, if present. That is the case then when using the
dns `file` manager and a resolv.conf file generated for netbird.
* On file backup restore, remove the first NS if it's the netbird NS
* Bump dns mangager discovery message from debug to info to ease debugging
2024-03-01 15:17:35 +01:00
pascal-fischer
a4b9e93217
add environment meta from grpc to store ( #1651 )
2024-03-01 15:15:56 +01:00
Maycon Santos
63d7957140
Log version when starting management and signal ( #1649 )
...
Output log version at service startup
2024-02-29 16:05:47 +01:00
Maycon Santos
9a6814deff
Enable review linter with exported docs check ( #1647 )
...
Exported function and methods should have comments. This warns on undocumented exported functions and methods.
2024-02-29 16:05:31 +01:00
Misha Bragin
190698bcf2
Add open-source network security image ( #1643 )
2024-02-29 14:04:32 +00:00
pascal-fischer
468fa2940b
add quotes to all timestamps in openapi spec ( #1642 )
2024-02-29 13:09:43 +01:00
Maycon Santos
79a0647a26
Update bug-issue-report.md label ( #1640 )
2024-02-29 10:21:00 +01:00
Maycon Santos
17ceb3bde8
Add reverse proxy settings to management.json template ( #1639 )
...
Add grpc_set_header to the nginx example template
2024-02-28 20:24:28 +01:00
Yury Gargay
5a8f1763a6
Implement Auth0 IdP get all connections method ( #1613 )
2024-02-28 16:57:35 +01:00
Bethuel Mmbaga
f64e73ca70
Fix invalid cross-device link when moving geolocation databases ( #1638 )
...
* Fix invalid cross-device link when move geonames db
* Add test for geolocation databases in workflow
This step checks the existence and proper functioning of geolocation databases, including GeoLite2-City.mmdb and Geonames.db. It will help us ensure that geolocation databases are loaded correctly in the management.
* Enable debug mode
* Increase sleep duration in geolocation tests
v0.26.2
2024-02-28 16:42:33 +03:00
pascal-fischer
b085419ab8
FIx order when validating account settings ( #1632 )
...
* moved extraSettings validation to the end
* moved extraSettings validation directly after permission check
v0.26.1
2024-02-27 14:17:22 +01:00
Bethuel Mmbaga
d78b652ff7
Rename PrivateNetworkCheck to PeerNetworkRangeCheck ( #1629 )
...
* Rename PrivateNetworkCheck to PeerNetworkRangeCheck
* update description and example
---------
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com >
2024-02-27 11:59:48 +01:00
Viktor Liu
7251150c1c
Combine update-available and connected/disconnected tray icon states ( #1615 )
...
This PR updates the system tray icons to reflect both connection status and availability of updates. Now, the tray will show distinct icons for the following states: connected, disconnected, update available while connected, and update available while disconnected. This change improves user experience by providing a clear visual status indicator.
- Add new icons for connected and disconnected states with update available.
- Implement logic to switch icons based on connection status and update availability.
- Remove old icon references for default and update states.
2024-02-26 23:28:33 +01:00
Bethuel Mmbaga
b65c2f69b0
Add support for downloading Geo databases to the management service ( #1626 )
...
Adds support for downloading Geo databases to the management service. If the Geo databases are not found, the service will automatically attempt to download them during startup.
2024-02-26 22:49:28 +01:00
Yury Gargay
d8ce08d898
Extend bypass middleware with support of wildcard paths ( #1628 )
...
---------
Co-authored-by: Viktor Liu <viktor@netbird.io >
2024-02-26 17:54:58 +01:00
Maycon Santos
e1c50248d9
Add support for device flow on getting started with zitadel ( #1616 )
2024-02-26 12:33:16 +01:00
Maycon Santos
ce2d14c08e
Update download-geolite2.sh to use packages URLs ( #1624 )
...
makes use of our hosted download URLs for geolocation DBs
2024-02-26 10:29:54 +01:00
Misha Bragin
52fd9a575a
Add quantum resistance status output ( #1608 )
2024-02-24 11:41:13 +00:00