sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-17 12:19:07 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,758 Commits 581 Branches 370 Tags
ffd3cd66f404bc4ecea3fcdf8dd9e034a0012357
Commit Graph
1758 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
pascal-fischer b79c1d64cc [management] Make max open db conns configurable (#2713) 2024-10-09 20:17:25 +02:00
bcmmbaga 9ee08fc441 fix nameserver tests 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-09 17:04:20 +03:00
bcmmbaga 271bed5f73 upgrade diff package 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-09 17:01:40 +03:00
bcmmbaga 2a751645f9 fix group tests 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-09 17:00:29 +03:00
Misha Bragin b1eda43f4b Add Link to the Lawrence Systems video (#2711) 2024-10-09 14:56:25 +02:00
pascal-fischer d4ef84fe6e [management] Propagate error in store errors (#2709) 2024-10-09 14:33:58 +02:00
bcmmbaga d4edde90c2 fix routes tests 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-09 13:52:43 +03:00
bcmmbaga 5cc07ba42a fix nameserver tests 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-08 19:39:12 +03:00
bcmmbaga 70f1c394c1 fix typo 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-08 17:15:06 +03:00
bcmmbaga c74a13e1a9 fix account and route tests 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-08 17:11:50 +03:00
bcmmbaga 1ed44b810c fix user and setup key tests 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-08 16:51:00 +03:00
bcmmbaga 41acacfba5 add posture checks tests 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-08 15:50:13 +03:00
Viktor Liu 44e8107383 [client] Limit P2P attempts and restart on specific events (#2657) 2024-10-08 11:21:11 +02:00
bcmmbaga fc7157f82f add policy tests 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-08 11:59:03 +03:00
Bethuel Mmbaga 2c1f5e46d5 [management] Validate peer ownership during login (#2704) 
* check peer ownership in login

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* update error message

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

---------

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-07 19:06:26 +03:00
bcmmbaga 63c510e80d fix merge 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-06 20:34:50 +03:00
pascal-fischer dbec24b520 [management] Remove admin check on getAccountByID (#2699) 2024-10-06 17:01:13 +02:00
Carlos Hernandez f603cd9202 [client] Check wginterface instead of engine ctx (#2676) 
Moving code to ensure wgInterface is gone right after context is
cancelled/stop in the off chance that on next retry the backoff
operation is permanently cancelled and interface is abandoned without
destroying.
v0.30.0 		2024-10-04 19:15:16 +02:00
Bethuel Mmbaga 5897a48e29 fix wrong reference (#2695) 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-04 18:55:25 +03:00
Bethuel Mmbaga 8bf729c7b4 [management] Add AccountExists to AccountManager (#2694) 
* Add AccountExists method to account manager interface

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* remove unused code

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

---------

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-04 18:09:40 +03:00
Bethuel Mmbaga 7f09b39769 [management] Refactor User JWT group sync (#2690) 
* Refactor GetAccountIDByUserOrAccountID

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* sync user jwt group changes

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* propagate jwt group changes to peers

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix no jwt groups synced

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix tests and lint

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* Move the account peer update outside the transaction

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* move updateUserPeersInGroups to account manager

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* move event store outside of transaction

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* get user with update lock

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* Run jwt sync in transaction

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

---------

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-04 17:17:01 +03:00
bcmmbaga 716009b791 Merge branch 'feature/optimize-network-map-updates' into feature/validate-group-association 
# Conflicts:
#	management/server/account.go
#	management/server/peer.go
#	management/server/peer_test.go
#	management/server/policy.go
#	management/server/route.go
#	management/server/route_test.go
 2024-10-04 10:46:41 +03:00
pascal-fischer 158936fb15 [management] Remove file store (#2689) 2024-10-03 15:50:35 +02:00
bcmmbaga a915707d13 fix merge 
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-10-03 14:12:53 +03:00
bcmmbaga 5108888163 Merge branch 'main' into feature/optimize-network-map-updates 
# Conflicts:
#	management/server/account_test.go
#	management/server/peer.go
 2024-10-03 14:10:46 +03:00
Maycon Santos 8934453b30 Update management base docker image (#2687) 2024-10-02 19:29:51 +03:00
Zoltan Papp fd67892cb4 [client] Refactor/iface pkg (#2646) 
Refactor the flat code structure
 2024-10-02 18:24:22 +02:00
pascal-fischer 7e5d3bdfe2 [signal] Move dummy signal message handling into dispatcher (#2686) 2024-10-02 15:33:38 +02:00
Maycon Santos b7b0828133 [client] Adjust relay worker log level and message (#2683) 2024-10-02 15:14:09 +02:00
Bethuel Mmbaga ff7863785f [management, client] Add access control support to network routes (#2100) 2024-10-02 13:41:00 +02:00
Maycon Santos a3a479429e Use the pkgs to get the latest version (#2682) 
* Use the pkgs to get the latest version

* disable fail fast
 2024-10-02 11:48:42 +02:00
Maycon Santos 5932298ce0 Add log setting to Caddy container (#2684) 
This avoids full disk on busy systems
 2024-10-02 11:48:09 +02:00
Zoltan Papp ee0ea86a0a [relay-client] Fix Relay disconnection handling (#2680) 
* Fix Relay disconnection handling

If has an active P2P connection meanwhile the Relay connection broken with the server then we removed the WireGuard peer configuration.

* Change logs
 2024-10-01 16:22:18 +02:00
Simen 24c0aaa745 Install sh alpine fixes (#2678) 
* Made changes to the peer install script that makes it work on alpine linux without changes

* fix small oversight with doas fix

* use try catch approach when curling binaries
 2024-10-01 13:32:58 +02:00
pascal-fischer 16179db599 [management] Propagate metrics (#2667) 2024-09-30 22:18:10 +02:00
Maycon Santos e27f85b317 Update docker creds (#2677) 2024-09-30 20:07:21 +02:00
Gianluca Boiano 2fd60b2cb4 Specify goreleaser version and update to 2 (#2673) 2024-09-30 16:43:34 +02:00
Zoltan Papp 3dca6099d4 Fix ebpf close function (#2672) 2024-09-30 10:34:57 +02:00
pascal-fischer cfbcf507fb propagate meter (#2668) 2024-09-29 20:23:34 +02:00
pascal-fischer 52ae693c9e [signal] add context to signal-dispatcher (#2662) 2024-09-29 00:22:47 +02:00
adasauceandbcmmbaga 58ff7ab797 [management] improve zitadel idp error response detail by decoding errors (#2634) 
* [management] improve zitadel idp error response detail by decoding errors

* [management] extend readZitadelError to be used for requestJWTToken

more generically parse the error returned by zitadel.

* fix lint

---------

Co-authored-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-09-27 22:21:34 +03:00
Bethuel Mmbaga acb73bd64a [management] Remove redundant get account calls in GetAccountFromToken (#2615) 
* refactor access control middleware and user access by JWT groups

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* refactor jwt groups extractor

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* refactor handlers to get account when necessary

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* refactor getAccountFromToken

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* refactor getAccountWithAuthorizationClaims

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix merge

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* revert handles change

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* remove GetUserByID from account manager

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix tests

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* refactor getAccountWithAuthorizationClaims to return account id

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* refactor handlers to use GetAccountIDFromToken

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix tests

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* remove locks

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* refactor

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* add GetGroupByName from store

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* add GetGroupByID from store and refactor

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* Refactor retrieval of policy and posture checks

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* Refactor user permissions and retrieves PAT

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* Refactor route, setupkey, nameserver and dns to get record(s) from store

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* Refactor store

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix lint

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix tests

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix add missing policy source posture checks

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* add store lock

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* fix tests

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* add get account

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

---------

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-09-27 17:10:50 +03:00
Zoltan Papp 4ebf6e1c4c [client] Close the remote conn in proxy (#2626) 
Port the conn close call to eBPF proxy
 2024-09-25 18:50:10 +02:00
pascal-fischer 1e4a0f77e2 Add get DB method to store (#2650) 2024-09-25 18:22:27 +02:00
Viktor Liu b51d75204b [client] Anonymize relay address in status peers view (#2640) 2024-09-24 20:58:18 +02:00
Viktor Liu e7d52c8c95 [client] Fix error count formatting (#2641) 2024-09-24 20:57:56 +02:00
Viktor Liu ab82302c95 [client] Remove usage of custom dialer for localhost (#2639) 
* Downgrade error log level for network monitor warnings

* Do not use custom dialer for localhost
 2024-09-24 12:29:15 +02:00
pascal-fischer d47be154ea [misc] Fix ip range posture check example (#2628) 2024-09-23 10:02:03 +02:00
Bethuel Mmbaga 35c892aea3 [management] Restrict accessible peers to user-owned peers for non-admins (#2618) 
* Restrict accessible peers to user-owned peers for non-admin users

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* add tests

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* add service user test

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* reuse account from token

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

* return error when peer not found

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>

---------

Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com>
 2024-09-20 12:36:58 +03:00
Zoltan Papp fc4b37f7bc Exit from processConnResults after all tries (#2621) 
* Exit from processConnResults after all tries

If all server is unavailable then the server picker never return
because we never close the result channel.
Count the number of the results and exit when we reached the
expected size
v0.29.4 		2024-09-19 13:49:28 +02:00