10b45d954e
outposts: allow disabling of docker controller port mapping
...
closes #1474
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-09-30 00:11:50 +02:00
941bc61b31
release: 2021.9.3
2021-09-27 17:31:50 +02:00
b248f450dd
outposts: make AUTHENTIK_HOST_BROWSER configurable from central config
...
closes #1471
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-09-26 12:00:51 +02:00
ba44fbdac8
website/docs: fix typos and grammar ( #1459 )
2021-09-24 15:37:54 +02:00
eddca478dc
release: 2021.9.2
2021-09-23 12:34:02 +02:00
2fe6de0505
release: 2021.9.1
2021-09-22 19:11:20 +02:00
0aec504170
website/docs: add ssl port for ldap
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-09-21 15:44:05 +02:00
ac52667327
release: 2021.9.1-rc3
2021-09-19 21:52:49 +02:00
fcbcfbc3c0
website/docs: Minor LDAP and NGINX Documentation Updates ( #1406 )
...
* update LDAP documentation
* include domain level nginx forward auth example
* wrap in banner
* update placeholder
2021-09-17 09:47:27 +02:00
28189bdddf
release: 2021.9.1-rc2
2021-09-16 23:23:36 +02:00
bdd5e16db1
release: 2021.9.1-rc1
2021-09-15 20:20:54 +02:00
128b582dd6
website/docs: fix inconsistent version number
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-09-13 22:05:35 +02:00
e59ede5422
website/docs: fix ports for current outpost
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-09-13 22:03:02 +02:00
bf771f8b6c
release: 2021.8.5
2021-09-11 19:20:13 +02:00
7158c9d2ea
core: metrics v2 ( #1370 )
...
* outposts: add ldap metrics, move ping to 9100
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost: add flow_executor metrics
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* use port 9300 for metrics, add core metrics port
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts/controllers/k8s: add service monitor creation support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-09-09 15:52:24 +02:00
3c1b70c355
outposts/proxyv2 ( #1365 )
...
* outposts/proxyv2: initial commit
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
add rs256
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
more stuff
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
add forward auth an sign_out
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
match cookie name
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
re-add support for rs256 for backwards compat
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
add error handler
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
ensure unique user-agent is used
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
set cookie duration based on id_token expiry
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
build proxy v2
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
add ssl
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
add basic auth and custom header support
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
add application cert loading
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
implement whitelist
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
add redis
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
migrate embedded outpost to v2
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
remove old proxy
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
providers/proxy: make token expiration configurable
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
add metrics
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
fix tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: only allow one redirect URI
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix docker build for proxy
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* remove default port offset
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add AUTHENTIK_HOST_BROWSER
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* tests: fix e2e/integration tests not using proper tags
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* remove references of old port
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* fix user_attributes not being loaded correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* cleanup dependencies
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* cleanup
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-09-08 18:04:56 +00:00
276d8fe5cf
release: 2021.8.4
2021-09-02 20:21:21 +02:00
d9a6ec2ac0
webiste/docs: update extensionvs/v1beta ingress
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-31 21:11:01 +02:00
e872371970
website/docs: add embedded outpost docs
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-29 14:43:13 +02:00
160139813d
release: 2021.8.3
2021-08-28 16:58:44 +02:00
dc41d0af27
outposts: add configurable docker_network for outpost
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-08-27 19:26:11 +02:00
c4f72c2bc1
release: 2021.8.2
2021-08-26 17:58:20 +02:00
897f6f3473
release: 2021.8.1
2021-08-26 16:03:45 +02:00
4d27694706
release: 2021.8.1-rc2
2021-08-24 21:29:29 +02:00
7639cdad0a
release: 2021.8.1-rc1
2021-08-22 20:17:35 +02:00
18211a2033
release: 2021.7.3
2021-08-05 19:23:03 +02:00
add7a80fdc
release: 2021.7.2
2021-08-01 19:11:50 +02:00
e6b515e3f7
release: 2021.7.1
2021-07-27 10:35:45 +02:00
3041a30193
release: 2021.7.1-rc2
2021-07-24 18:32:05 +02:00
285a9b8b1d
website/docs: remove duplicate proxy docs
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-22 10:48:10 +02:00
39ad9d7c9d
release: 2021.7.1-rc1
2021-07-21 10:44:40 +02:00
efa09d5e1d
providers/ldap: fix: Return user DN with virtual group ( #1142 )
...
* fix: incorrect ldap virtual group member DN
Signed-off-by: Toboshii Nakama <toboshii@gmail.com>
* fix: imports
Signed-off-by: Toboshii Nakama <toboshii@gmail.com>
2021-07-14 10:59:40 +00:00
7f39399c32
providers/ldap: Added auto-generated uidNumber and guidNumber generated attributes for use with SSSD and similar software. ( #1138 )
...
* Added auto-generated uidNumber and guidNumber generated attributes for
use with SSSD and similar software.
The starting number for uid/gid can be configured iva environtment
variables and is by default 2000 which should work fine for most instances unless there are more than
999 local accounts on the server/computer.
The uidNumber is just the users Pk + the starting number.
The guidNumber is calculated by the last couple of bytes in the uuid of
the group + the starting number, this should have a low enough chance
for collisions that it's going to be fine for most use cases.
I have not added any interface stuff for configuring the environment variables as I couldn't really find my way around all the places I'd have to edit to add it and the default values should in my opinion be fine for 99% use cases.
* Add a 'fake' primary group for each user
* First attempt att adding config to interface
* Updated API to support new fields
* Refactor code, update documentation and remove obsolete comment
Simplify `GetRIDForGroup`, was a bit overcomplicated before.
Add an additional class/struct `LDAPGroup` which is the new argument
for `pi.GroupEntry` and util functions to create `LDAPGroup` from api.Group and api.User
Add proper support in the interface for changing gidNumber and uidNumber starting points
* make lint-fix for the migration files
2021-07-14 09:17:01 +02:00
7dfc621ae4
LDAP Provider: TLS support ( #1137 )
2021-07-13 18:24:18 +02:00
5e03b27348
website/docs: add note about logging out
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#1113
2021-07-06 14:26:11 +02:00
adc4cd9c0d
release: 2021.6.4
2021-07-05 16:59:29 +02:00
ade8644da6
outposts/ldap: add support for boolean fields in ldap
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-07-01 11:51:07 +02:00
1e6c081e5c
website/docs: update forward_auth for nginx config
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-29 20:32:49 +02:00
680b182d95
release: 2021.6.3
2021-06-29 16:19:07 +02:00
fe069c5e55
website/docs: fix use of escaped_request_uri in standalone nginx
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-28 19:51:55 +02:00
31a58e2c25
release: 2021.6.2
2021-06-22 23:35:10 +02:00
fe6963c428
release: 2021.6.1
2021-06-17 22:14:52 +02:00
e0f48a30b7
release: 2021.6.1-rc6
2021-06-15 21:18:33 +02:00
4e9be85353
website/docs: add docs for outpost configuration
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-14 09:21:35 +02:00
d78fda990a
release: 2021.6.1-rc5
2021-06-12 15:19:24 +02:00
e25f6aea8c
release: 2021.6.1-rc4
2021-06-10 18:59:00 +02:00
2c15ab9995
release: 2021.6.1-rc3
2021-06-10 18:04:59 +02:00
6c985acb36
release: 2021.6.1-rc2
2021-06-10 14:10:47 +02:00
f4a53c89ef
release: 2021.6.1-rc1
2021-06-09 11:01:14 +02:00
dad24c03ff
outposts: set cookies for a domain to authenticate an entire domain ( #971 )
...
* outposts: initial cookie domain implementation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: add cookie domain setting
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: replace forward_auth_mode with general mode
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: rebuild proxy provider form
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: re-add forward_auth_mode for backwards compat
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: fix data.mode not being set
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* root: always set log level to debug when testing
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: use new mode attribute
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: only ingress /akprox on forward_domain
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* providers/proxy: fix lint error
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: fix error on ProxyProviderForm when not using proxy mode
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: fix default for outpost form's type missing
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/admin: add additional desc for proxy modes
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts: fix service account permissions not always being updated
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost/proxy: fix redirecting to incorrect host for domain mode
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: improve error handling for network errors
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outpost: fix image naming not matching main imaeg
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts/proxy: fix redirects for domain mode and traefik
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web: fix colour for paragraphs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/flows: fix consent stage not showing permissions correctly
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* website/docs: add domain-level docs
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* website/docs: fix broken links
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* outposts/proxy: remove dead code
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* web/flows: fix missing id for #header-text
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-06-08 23:10:17 +02:00
ebfa7c8dce
website/docs: fix docs for outpost annotations
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-31 23:32:17 +02:00
c98e4196bd
website/docs: ingress nginx auth headers ( #916 )
...
Extend example how to pass through auth headers from authentik if using ingress nginx as forward auth.
2021-05-23 22:49:31 +02:00
2d5c45543b
release: 2021.5.4
2021-05-22 20:15:23 +02:00
bf4cbb25fe
release: 2021.5.3
2021-05-20 20:17:39 +02:00
5a465fbc36
release: 2021.5.2
2021-05-17 19:54:10 +02:00
176360fdd7
website/docs: fix $auth_cookie not being defined in outpost docs
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-16 22:18:31 +02:00
36b694fc41
website/docs: add example ldapsearch command
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-14 11:47:38 +02:00
8d7bb7da17
providers/proxy: connect ingress to https instead of http
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
#882
2021-05-14 11:42:03 +02:00
9bdd6f23a4
website/docs: add ldap example, use ghcr
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-14 11:19:09 +02:00
0b7ebf0e07
release: 2021.5.1
2021-05-13 20:50:31 +02:00
8f99891a9d
release: 2021.5.1-rc10
2021-05-12 21:25:18 +02:00
97a3c2d88b
release: 2021.5.1-rc9
2021-05-12 20:50:29 +02:00
3665e2fefa
release: 2021.5.1-rc8
2021-05-12 14:52:34 +02:00
80fae44f47
release: 2021.5.1-rc7
2021-05-10 12:13:10 +02:00
73eb97ca6e
release: 2021.5.1-rc6
2021-05-10 11:44:23 +02:00
a1a1b113b1
release: 2021.5.1-rc5
2021-05-10 11:34:00 +02:00
f7fd31cc84
release: 2021.5.1-rc4
2021-05-09 21:43:38 +02:00
cd3f02fd3b
release: 2021.5.1-rc3
2021-05-09 17:25:48 +02:00
d3feab9463
release: 2021.5.1-rc2
2021-05-09 16:43:36 +02:00
70c25692eb
release: 2021.5.1-rc1
2021-05-09 16:07:50 +02:00
7b0cda3a6a
website/docs: fix tabs not rendering correctly
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-07 14:08:30 +02:00
9485f0b8cc
outpost/ldap: make users and groups OU instead of CN
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-07 11:46:26 +02:00
2cad9a3d07
website/docs: add LDAP Outpost docs
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-05-05 11:48:07 +02:00
bf7d110af3
Merge branch 'version-2021.4'
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# .github/workflows/release.yml
# helm/README.md
# helm/values.yaml
# website/docs/installation/kubernetes.md
2021-04-29 23:50:52 +02:00
4e5eeacf0a
release: 2021.4.5
2021-04-29 23:03:09 +02:00
2a409215d3
outpost: forwardAuth mode ( #790 )
2021-04-29 18:17:10 +02:00
5f58a4566c
release: 2021.4.4
2021-04-24 21:03:29 +02:00
e20bb7d636
release: 2021.4.3
2021-04-20 09:15:07 +02:00
60615c9f3e
release: 2021.4.2
2021-04-17 15:26:59 +02:00
bd8447d5a7
release: 2021.4.1
2021-04-14 09:46:16 +02:00
fd0ad20031
release: 2021.4.1-rc2
2021-04-12 20:03:21 +02:00
e7626d0716
Revert "release: 2021.4.1-rc1"
...
This reverts commit 2397cb162a
2021-04-11 21:04:25 +02:00
2397cb162a
release: 2021.4.1-rc1
2021-04-11 16:18:20 +02:00
80bcd09cec
docs: add headers set by proxy outpost
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-04-11 14:08:05 +02:00
4b33971155
release: 2021.3.4
2021-03-16 19:17:50 +01:00
f05d5973af
root: fix typo in bumpversion
...
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2021-03-16 17:38:34 +01:00
0e9e378bdf
docs: update manual k8s outpost deployment
2021-03-05 15:30:41 +01:00
56f75aecc7
docs: bump version of outpost in docs
2021-03-05 14:14:37 +01:00
d3f8d7120f
docs: cleanup, add 2021.3 to sidebar
2021-03-02 22:10:54 +01:00
1cfe1aff13
wip: rename to authentik ( #361 )
...
* root: initial rename
* web: rename custom element prefix
* root: rename external functions with pb_ prefix
* root: fix formatting
* root: replace domain with goauthentik.io
* proxy: update path
* root: rename remaining prefixes
* flows: rename file extension
* root: pbadmin -> akadmin
* docs: fix image filenames
* lifecycle: ignore migration files
* ci: copy default config from current source before loading last tagged
* *: new sentry dsn
* tests: fix missing python3.9-dev package
* root: add additional migrations for service accounts created by outposts
* core: mark system-created service accounts with attribute
* policies/expression: fix pb_ replacement not working
* web: fix last linting errors, add lit-analyse
* policies/expressions: fix lint errors
* web: fix sidebar display on screens where not all items fit
* proxy: attempt to fix proxy pipeline
* proxy: use go env GOPATH to get gopath
* lib: fix user_default naming inconsistency
* docs: add upgrade docs
* docs: update screenshots to use authentik
* admin: fix create button on empty-state of outpost
* web: fix modal submit not refreshing SiteShell and Table
* web: fix height of app-card and height of generic icon
* web: fix rendering of subtext
* admin: fix version check error not being caught
* web: fix worker count not being shown
* docs: update screenshots
* root: new icon
* web: fix lint error
* admin: fix linting error
* root: migrate coverage config to pyproject
2020-12-05 22:08:42 +01:00
7be680cbe5
Migrate to Docusaurus ( #329 )
...
* docs: initial migration to docusaurus
* website: add custom font, update blurbs and icons
* website: update splash
* root: update links to docs
* flows: use .pbflow extension so docusaurus doesn't mangle the files
* e2e: workaround prospector
* Squashed commit of the following:
commit 1248585dca1319c480c4
2020-11-15 22:42:02 +01:00
Jens Langhammer
Anthony Kremor
Jeremy Willans
Toboshii Nakama
Lukas Söder
CuBiC
Jens L