crn4
f357db6ffa
Merge branch 'main' into nmap/compaction-deploy
2026-01-22 19:01:58 +01:00
crn4
0297976875
compaction of components
2026-01-22 19:01:18 +01:00
Bethuel Mmbaga
a1de2b8a98
[management] Move activity store encryption to shared crypt package ( #5111 )
2026-01-22 15:01:13 +03:00
Bethuel Mmbaga
8da23daae3
[management] Fix activity event initiator for user group changes ( #5152 )
2026-01-22 14:18:46 +03:00
crn4
b32cf57ed1
minor fixes on diffs
2026-01-21 17:12:34 +01:00
crn4
b533c173a4
minor fixes on diffs
2026-01-21 16:13:52 +01:00
crn4
9ccae8447b
Merge branch 'main' into nmap/compaction-deploy
2026-01-20 19:50:51 +01:00
crn4
7941a91fcb
diff fixes
2026-01-20 19:50:23 +01:00
crn4
88dde22f07
small log
2026-01-20 15:20:34 +01:00
crn4
a23d538d09
opt over ssh users
2026-01-20 15:11:49 +01:00
Misha Bragin
a0b0b664b6
Local user password change (embedded IdP) ( #5132 )
2026-01-20 14:16:42 +01:00
crn4
7598efe320
components network map for deploy - comparison with legacy
2026-01-20 14:12:13 +01:00
Zoltan Papp
58daa674ef
[Management/Client] Trigger debug bundle runs from API/Dashboard ( #4592 ) ( #4832 )
...
This PR adds the ability to trigger debug bundle generation remotely from the Management API/Dashboard.
2026-01-19 11:22:16 +01:00
ressys1978
3ce5d6a4f8
[management] Add idp timeout env variable ( #4647 )
...
Introduced the NETBIRD_IDP_TIMEOUT environment variable to the management service. This allows configuring a timeout for supported IDPs. If the variable is unset or contains an invalid value, a default timeout of 10 seconds is used as a fallback.
This is needed for larger IDP environments where 10s is just not enough time.
2026-01-16 16:23:37 +01:00
Bethuel Mmbaga
067c77e49e
[management] Add custom dns zones ( #4849 )
2026-01-16 12:12:05 +03:00
Pascal Fischer
efb954b7d6
[management] adapt ratelimiting ( #5080 )
2026-01-15 16:39:14 +01:00
Vlad
cac9326d3d
[management] fetch all users data from external cache in one request ( #5104 )
...
---------
Co-authored-by: pascal <pascal@netbird.io >
2026-01-14 17:09:17 +01:00
Misha Bragin
37abab8b69
[management] Check config compatibility ( #5087 )
...
* Enforce HttpConfig overwrite when embeddedIdp is enabled
* Disable offline_access scope in dashboard by default
* Add group propagation foundation to embedded idp
* Require groups scope in dex config for okt and pocket
* remove offline_access from device default scopes
2026-01-12 17:09:03 +01:00
Misha Bragin
614e7d5b90
Validate OIDC issuer when creating or updating ( #5074 )
2026-01-09 09:45:43 -05:00
Misha Bragin
f7967f9ae3
Feature/resolve local jwks keys ( #5073 )
2026-01-09 09:41:27 -05:00
Vlad
684fc0d2a2
[management] fix the issue with duplicated peers with the same key ( #5053 )
2026-01-09 11:49:26 +01:00
Zoltan Papp
9c9d8e17d7
Revert "Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )" ( #5071 )
...
This reverts commit 24df442198
2026-01-08 18:58:22 +01:00
Maycon Santos
9c5b2575e3
[misc] add embedded provider support metrics
...
count local vs idp users if embedded
2026-01-08 12:12:19 +01:00
Bethuel Mmbaga
00e2689ffb
[management] Fix race condition in experimental network map when deleting account ( #5064 )
2026-01-08 14:10:09 +03:00
Misha Bragin
cf535f8c61
[management] Fix role change in transaction and update readme ( #5060 )
2026-01-08 12:07:59 +01:00
Maycon Santos
24df442198
Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )
...
This reverts commit 8722b79799
2026-01-07 19:02:20 +01:00
Zoltan Papp
8722b79799
[relay] Update GO version and QUIC version ( #4736 )
...
- Go 1.25.5
- QUIC 0.55.0
2026-01-07 16:30:29 +01:00
Vlad
afcdef6121
[management] add ssh authorized users to network map cache ( #5048 )
2026-01-07 15:53:18 +01:00
Misha Bragin
e586c20e36
[management, infrastructure, idp] Simplified IdP Management - Embedded IdP ( #5008 )
...
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
2026-01-07 14:52:32 +01:00
Pascal Fischer
5393ad948f
[management] fix nil handling for extra settings ( #5049 )
2026-01-07 13:05:39 +01:00
Bethuel Mmbaga
20d6beff1b
[management] Increment network serial on peer update ( #5051 )
...
Increment the serial on peer update and prevent double serial increments and account updates when updating a user while there are peers set to expire
2026-01-07 14:59:49 +03:00
Bethuel Mmbaga
d35b7d675c
[management] Refactor integrated peer deletion ( #5042 )
2026-01-07 14:00:39 +03:00
Vlad
7142d45ef3
[management] network map builder concurrent batch processing for peer updates ( #5040 )
2026-01-06 19:25:55 +01:00
Bethuel Mmbaga
7bb4fc3450
[management] Refactor integrated peer validator ( #5035 )
2026-01-05 20:55:22 +03:00
Pascal Fischer
7ac65bf1ad
[management] Fix/delete groups without lock ( #5012 )
2025-12-31 11:53:20 +01:00
Misha Bragin
9ed1437442
Add DEX IdP Support ( #4949 )
2025-12-30 07:42:34 -05:00
Pascal Fischer
a8604ef51c
[management] filter own peer when having a group to peer policy to themself ( #4956 )
2025-12-30 10:49:43 +01:00
Pascal Fischer
1d2c7776fd
[management] apply login filter only for setup key peers ( #4943 )
2025-12-30 10:46:00 +01:00
Pascal Fischer
b6a327e0c9
[management] fix scanning authorized user on policy rule ( #5002 )
2025-12-29 15:03:16 +01:00
Zoltan Papp
67f7b2404e
[client, management] Feature/ssh fine grained access ( #4969 )
...
Add fine-grained SSH access control with authorized users/groups
2025-12-29 12:50:41 +01:00
Zoltan Papp
011cc81678
[client, management] auto-update ( #4732 )
2025-12-19 19:57:39 +01:00
Pascal Fischer
c29bb1a289
[management] use xid as request id for logging ( #4955 )
2025-12-16 14:02:37 +01:00
Bethuel Mmbaga
932c02eaab
[management] Approve all pending peers when peer approval is disabled ( #4806 )
2025-12-12 18:49:57 +03:00
Pascal Fischer
abcbde26f9
[management] remove context from store methods ( #4940 )
2025-12-11 21:45:47 +01:00
Pascal Fischer
90e3b8009f
[management] Fix sync metrics ( #4939 )
2025-12-11 20:11:12 +01:00
Pascal Fischer
94d34dc0c5
[management] monitoring updates ( #4937 )
2025-12-11 18:29:15 +01:00
Pascal Fischer
44851e06fb
[management] cleanup logs ( #4933 )
2025-12-10 19:26:51 +01:00
Pascal Fischer
a232cf614c
[management] record pat usage metrics ( #4888 )
2025-12-02 18:31:59 +01:00
Pascal Fischer
7193bd2da7
[management] Refactor network map controller ( #4789 )
2025-12-02 12:34:28 +01:00
Bethuel Mmbaga
52948ccd61
[management] Add user created activity event ( #4893 )
2025-12-02 14:17:59 +03:00
