pascal
18c7917c6d
Merge remote-tracking branch 'origin/main' into refactor/permissions-manager
2026-09-11 13:55:02 +02:00
Maycon Santos
ebc259e30b
[management,client] Gate remote jobs behind an admin opt-in with MDM support ( #7153 )
...
This introduces a disabled-by-default allow-remote-jobs setting that
controls whether the management server may run jobs (such as debug
bundles) on a peer. The flag propagates end to end: through client
configuration, the daemon SetConfig and Login requests, authentication,
and system info, up to management, where it is stored on the peer and
exposed on the peers API as remote_jobs_allowed. The client refuses any
management-requested job unless the peer has opted in. Because enabling
remote jobs crosses the user-to-root boundary, turning it on requires
privilege, mirroring the SSH-server gate. Administrators can enforce the
setting through MDM policy on both macOS and Windows, and MDM can also
override the debug-bundle upload URL. The change ships policy
documentation and generated profile templates, and adds configuration,
conflict, and enforcement tests covering the opt-in, privilege, and MDM
paths.
2026-09-01 17:53:41 +02:00
Pascal Fischer and Dmitri Dolguikh
e06c17cf59
[management] network map from nmap data type ( #6919 )
...
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
Co-authored-by: Dmitri Dolguikh <dmitri.external@netbird.io >
2026-08-27 11:28:05 +02:00
dmitri-netbird
a144e8c144
[client, management] switch to go.uber.org/mock ( #7253 )
...
* switch to go.uber.org/mock/gomock
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
* updated go:generate commands + regenerated mocks
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
* update go:generate mockgen commands
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
* removed duplicate import
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
* fix go:generate
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
---------
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
2026-08-20 11:53:19 +02:00
Pascal Fischer
31ed241a1a
[management] component types ( #6866 )
2026-07-23 11:37:09 +02:00
Pascal Fischer
e4397d4d46
[management] remove nmap calc from login ( #6449 )
2026-06-17 16:37:24 +02:00
Pascal Fischer
9189625487
[management] enrich context in permissions manager ( #6286 )
2026-05-29 16:36:38 +02:00
Viktor Liu
205ebcfda2
[management, client] Add IPv6 overlay support ( #5631 )
2026-05-07 11:33:37 +02:00
Vlad
154b81645a
[management] removed legacy network map code ( #5565 )
2026-04-27 16:02:54 +02:00
pascal
b65a8bcb9c
update sql test data files and auth wrappers
2026-04-20 13:44:38 +02:00
pascal
e0063731f2
update tests
2026-04-17 16:44:57 +02:00
pascal
53e47da7bd
fix tests
2026-04-16 18:24:47 +02:00
pascal
9406de9610
add exception handler and add exception for users
2026-04-16 17:42:59 +02:00
pascal
3741eb46dd
Merge remote-tracking branch 'origin/main' into refactor/permissions-manager
...
# Conflicts:
# management/internals/modules/reverseproxy/domain/manager/manager.go
# management/internals/modules/reverseproxy/service/manager/api.go
# management/internals/server/modules.go
# management/server/http/testing/testing_tools/channel/channel.go
2026-03-17 12:38:08 +01:00
pascal
d85ee0b5a2
remove old permissions management
2026-03-06 18:19:33 +01:00
pascal
32730af33f
use api wrapper for permissions management
2026-02-24 00:39:54 +01:00
f53155562f
[management, reverse proxy] Add reverse proxy feature ( #5291 )
...
* implement reverse proxy
---------
Co-authored-by: Alisdair MacLeod <git@alisdairmacleod.co.uk >
Co-authored-by: mlsmaycon <mlsmaycon@gmail.com >
Co-authored-by: Eduard Gert <kontakt@eduardgert.de >
Co-authored-by: Viktor Liu <viktor@netbird.io >
Co-authored-by: Diego Noguês <diego.sure@gmail.com >
Co-authored-by: Diego Noguês <49420+diegocn@users.noreply.github.com >
Co-authored-by: Bethuel Mmbaga <bethuelmbaga12@gmail.com >
Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com >
Co-authored-by: Ashley Mensah <ashleyamo982@gmail.com >
2026-02-13 19:37:43 +01:00
Bethuel Mmbaga
7ebf37ef20
[management] Enforce access control on accessible peers ( #5301 )
2026-02-13 12:46:43 +03:00
Pascal Fischer
6fdc00ff41
[management] adding account id validation to accessible peers handler ( #5246 )
2026-02-03 17:30:02 +01:00
Zoltan Papp
58daa674ef
[Management/Client] Trigger debug bundle runs from API/Dashboard ( #4592 ) ( #4832 )
...
This PR adds the ability to trigger debug bundle generation remotely from the Management API/Dashboard.
2026-01-19 11:22:16 +01:00
Bethuel Mmbaga
067c77e49e
[management] Add custom dns zones ( #4849 )
2026-01-16 12:12:05 +03:00
Misha Bragin
e586c20e36
[management, infrastructure, idp] Simplified IdP Management - Embedded IdP ( #5008 )
...
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
2026-01-07 14:52:32 +01:00
Zoltan Papp
67f7b2404e
[client, management] Feature/ssh fine grained access ( #4969 )
...
Add fine-grained SSH access control with authorized users/groups
2025-12-29 12:50:41 +01:00
Pascal Fischer
7193bd2da7
[management] Refactor network map controller ( #4789 )
2025-12-02 12:34:28 +01:00
Viktor Liu
d71a82769c
[client,management] Rewrite the SSH feature ( #4015 )
2025-11-17 17:10:41 +01:00
Pascal Fischer
cc97cffff1
[management] move network map logic into new design ( #4774 )
2025-11-13 12:09:46 +01:00
Bethuel Mmbaga
d80d47a469
[management] Add peer disapproval reason ( #4468 )
2025-10-22 12:46:22 +03:00
Viktor Liu
b5daec3b51
[client,signal,management] Add browser client support ( #4415 )
2025-10-01 20:10:11 +02:00
Pascal Fischer
e14c6de203
[management] fix ephemeral flag on peer batch response ( #4420 )
2025-08-29 17:41:20 +02:00
hakansa
d00a226556
[management] Add CreatedAt field to Peer and PeerBatch models ( #4371 )
...
[management] Add CreatedAt field to Peer and PeerBatch models (#4371 )
2025-08-19 16:02:11 +03:00
Viktor Liu
abd152ee5a
[misc] Separate shared code dependencies ( #4288 )
...
* Separate shared code dependencies
* Fix import
* Test respective shared code
* Update openapi ref
* Fix test
* Fix test path
2025-08-05 18:34:41 +02:00
Viktor Liu
beb66208a0
[management, client] Add API to change the network range ( #4177 )
2025-08-04 16:45:49 +02:00
Pascal Fischer
b45284f086
[management] export ephemeral peer flag on api ( #4004 )
2025-06-19 16:46:56 +02:00
Pascal Fischer
312bfd9bd7
[management] support custom domains per account ( #3726 )
2025-04-23 19:36:53 +02:00
Pascal Fischer
5ea2806663
[management] use permission modules ( #3622 )
2025-04-10 11:06:52 +02:00
Pedro Maia Costa
cbec7bda80
[management] permission manager validate account access ( #3444 )
2025-03-30 17:08:22 +02:00
Maycon Santos
c02e236196
[client,management] add netflow support to client and update management ( #3414 )
...
adds NetFlow functionality to track and log network traffic information between peers, with features including:
- Flow logging for TCP, UDP, and ICMP traffic
- Integration with connection tracking system
- Resource ID tracking in NetFlow events
- DNS and exit node collection configuration
- Flow API and Redis cache in management
- Memory-based flow storage implementation
- Kernel conntrack counters and userspace counters
- TCP state machine improvements for more accurate tracking
- Migration from net.IP to netip.Addr in the userspace firewall
2025-03-20 17:05:48 +01:00
Viktor Liu
fc1da94520
[client, management] Add port forwarding ( #3275 )
...
Add initial support to ingress ports on the client code.
- new types where added
- new protocol messages and controller
2025-03-09 16:06:43 +01:00
Pedro Maia Costa
77e40f41f2
[management] refactor auth ( #3296 )
2025-02-20 20:24:40 +00:00
hakansa and Viktor Liu
39986b0e97
[client, management] Support DNS Labels for Peer Addressing ( #3252 )
...
* [client] Support Extra DNS Labels for Peer Addressing
* [management] Support Extra DNS Labels for Peer Addressing
---------
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com >
2025-02-20 13:43:20 +03:00
Bethuel Mmbaga
1ad2cb5582
[management] Refactor peers to use store methods ( #2893 )
2025-01-20 18:41:46 +01:00
Bethuel Mmbaga
02a3feddb8
[management] Add MySQL Support ( #3108 )
...
* Add mysql store support
* Add support to disable activity events recording
2025-01-06 13:38:30 +01:00
ddc365f7a0
[client, management] Add new network concept ( #3047 )
...
---------
Co-authored-by: Pascal Fischer <32096965+pascal-fischer@users.noreply.github.com >
Co-authored-by: bcmmbaga <bethuelmbaga12@gmail.com >
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com >
Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com >
2024-12-20 11:30:28 +01:00
Pascal Fischer
6142828a9c
[management] restructure api files ( #3013 )
2024-12-10 15:59:25 +01:00
pascal