trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
6,019 Commits 95 Branches 330 Tags 336 MiB
Commit Graph

178 Commits

Author SHA1 Message Date
Jens Langhammer fceab788d2 outposts: fix error during outpost disconnect 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-06 19:25:09 +02:00
Jens Langhammer cefe3fa6dd outposts: fix docker controller always replacing beta images 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-05 16:08:20 +02:00
Jens Langhammer 5e3628bea6 core: add fallback URLs for websocket to cleanup test logs 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 17:26:18 +02:00
Jens Langhammer 48e68d6852 core: fix token identifier not being set to unique 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-03 11:45:48 +02:00
Jens Langhammer 6d0e0cbe5a outposts: improve validation of providers (must match outpost type) 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 16:04:41 +02:00
Jens Langhammer 644ff4a90c outposts: fix error when validating kubeconfig 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-06-02 10:25:59 +02:00
Jens Langhammer 72f5a4c460 outposts: fix possible recursion error in docker controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-30 16:22:02 +02:00
Jens Langhammer 5990b8d4de outposts: fix docker container not being stopped correctly 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-29 19:16:39 +02:00
Jens Langhammer a1b6e09e8a outposts: set restart-policy on docker container 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-28 17:18:11 +02:00
Jens Langhammer 58a4b20297 outposts: handle disconnects without outpost better 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-25 12:06:55 +02:00
Jens L 53e2b2c784
Prometheus metrics (#914) 
* admin: add worker metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* admin: add version metrics

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add gauge for system tasks

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* outposts: add gauge for last hello and connection status

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: re-add prometheus metrics to database

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: allow access to metrics without credentials when debug is on

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* root: add UpdatingGauge to auto-set value on load

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* flows: add metrics for cache and building

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* policies: add metrics for policy engine

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add histogram for task durations

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: revert to gauge because values are updated on export view

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* core: add gauge to count all models

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>

* events: add metrics for events

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 20:29:34 +02:00
Jens Langhammer a5cd9fa141 outposts: improve logging for docker controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-23 19:27:24 +02:00
Jens Langhammer 9a48c2fd9a outposts: fix error on outpost disconnect 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 18:07:07 +02:00
Jens Langhammer f6f93640c5 outposts: fix update signal not being sent to correct instances 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-20 15:23:18 +02:00
Jens Langhammer 7152d7ee01 outposts: fix schema for outposts health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-16 18:10:11 +02:00
Jens Langhammer 1324d03815 *: initial migration to openapi v3 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 23:57:28 +02:00
Jens Langhammer a30b32fbbf outposts: fix missing default for OutpostState.for_channel 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:46:53 +02:00
Jens Langhammer 1745306cc6 outposts: fix error when controller loads from cache but cache has expired 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-15 17:45:33 +02:00
Jens Langhammer 9939db13c3 outposts: fix reload notification not working due to wrong ID being saved 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-14 11:13:04 +02:00
Jens Langhammer a3fccbdaff outposts: add build_hash for docker image 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 20:36:18 +02:00
Jens Langhammer bdf9f26d07 outposts: compare build hash in outdated check 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 19:05:29 +02:00
Jens Langhammer 8e5d03cb86 outposts: remove legacy API 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 16:41:54 +02:00
Jens Langhammer 0620324702 root: bump version of psf black 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-12 00:42:46 +02:00
Jens Langhammer 5a0e78c698 outposts: fix issue with duplicate outpost health 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 21:46:30 +02:00
Jens Langhammer 788fd00390 outposts: use noop flag in each reconciler instead of raising Disabled and force use of get_referecen_object 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-11 00:27:29 +02:00
Jens Langhammer a293a14f2a outposts: re-add _config for backwards compat 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 22:28:46 +02:00
Jens Langhammer 219b8d1a57 outposts: allow individual components of managed outposts to be disabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:27:48 +02:00
Jens Langhammer c7d4e69669 root: make database port configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:25:15 +02:00
Jens Langhammer cd629dfbaa outposts: improve API validation for config attribute, ensure all required attributes are set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 19:24:42 +02:00
Jens Langhammer c2f8ff55cf outposts: fix outpost delete hanging thread, run cleanup in async task with info from cache with ability to retry 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-10 17:11:31 +02:00
Jens Langhammer f072c600cc lifecycle: use URl for redis on startup to prevent errors with no paswords 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 20:13:58 +02:00
Jens Langhammer 72836ecd9d outposts: default to currently running namespace if possible 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 18:44:32 +02:00
Jens Langhammer 7f7046f0e4 outposts: lowercase k8s object names 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 18:13:21 +02:00
Jens Langhammer 8c0a87b710 outposts: improve logging for outpost controller 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-09 12:34:44 +02:00
Jens Langhammer 5ac6a6910e outposts: check if traefik CRD exists before attempting to delete 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 21:59:13 +02:00
Jens Langhammer d751a7fc4c lib: add user attribute "goauthentik.io/user/override-ips" to allow overriding of client ips 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 21:42:31 +02:00
Jens Langhammer 6868b7722c outposts: delete old outpost deployment when name or namespace is changed 
closes #845

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 16:11:38 +02:00
Jens Langhammer 7a1935b4e2 outposts: fix error on k8s when name has spaces 
closes #846

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-08 14:09:21 +02:00
Jens Langhammer 9fc072e4df outposts: fix lint 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:56:44 +02:00
Jens Langhammer 9485f0b8cc outpost/ldap: make users and groups OU instead of CN 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 11:46:26 +02:00
Jens Langhammer e5a5a5c603 outposts: fix k8s controller not handing Disabled() in static deployment 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 09:52:43 +02:00
Jens Langhammer ea7f9f291f outposts: create traefikmiddleware if forwardAuth is enabled 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-07 00:01:35 +02:00
Jens Langhammer ef63e35ad2 outposts: improve messaging from controller on k8s 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 20:07:29 +02:00
Jens Langhammer 4e9176ed2e outposts: support different port on container vs exposed port 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:59:49 +02:00
Jens Langhammer d1296e9cc7 outposts: fix deployments referencing the wrong secret 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 19:51:14 +02:00
Jens Langhammer 73b87a5e3d events: fix error in API when specifying max_n 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-06 13:15:54 +02:00
Jens Langhammer ac9cac302c outposts: fix outpost state showing last time without version 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 20:49:13 +02:00
Jens Langhammer be8b2bf6f6 providers/proxy: don't create ingress for domains which use forwardAuth, don't create ingress at all if all providers are forward auth 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 17:53:12 +02:00
Jens Langhammer b266a2cdfb outposts: make k8s service type configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 15:37:56 +02:00
Jens Langhammer 9a15a66d85 outposts: make k8s object naming configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 15:36:27 +02:00
Jens Langhammer 1a02049104 core: show users and groups when user has overall user permissions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 01:02:47 +02:00
Jens Langhammer 32934fcd38 outpost/ldap: check access based on Group Membership 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-05 00:03:19 +02:00
Jens Langhammer 08451c15f4 outposts/ldap: save user DN to determine who can search 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-05-04 21:49:15 +02:00
Jens Langhammer c317efa14c Merge branch 'master' into outpost-ldap 2021-05-01 00:26:55 +02:00
Jens Langhammer 3e666de91d outposts: fix formatting of image name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-30 16:52:28 +02:00
Jens Langhammer b55cb2b40c Merge branch 'master' into outpost-ldap 2021-04-29 20:13:47 +02:00
Jens Langhammer 25c001f2cd outposts: allow better configuration of outpost image name 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-29 20:07:53 +02:00
Jens Langhammer 9b70aaa717 outposts: only kill docker container if its running 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-28 18:32:16 +02:00
Jens Langhammer 4d858c64e0 Merge branch 'master' into outpost-ldap 2021-04-27 17:08:26 +02:00
Jens Langhammer ccef7b4233 *: make logger not use .error 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-27 15:43:26 +02:00
Jens Langhammer 3ce8b836dc outposts: allow outposts to have non-object specific permissions 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 23:28:26 +02:00
Jens Langhammer b35d9ae8b0 outposts: fix type not being configurable 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 14:45:14 +02:00
Jens Langhammer 302b047f1a outposts/ldap: add controllers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 14:26:31 +02:00
Jens Langhammer f89479caf3 providers/ldap: add LDAP provider 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-26 11:52:42 +02:00
Jens Langhammer 820c9e7d06 Merge branch 'master' into outpost-ldap 2021-04-24 22:22:01 +02:00
Jens Langhammer b8a566f4a0 outposts: move local connection check to task, run every 60 minutes 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-21 11:34:48 +02:00
Jens Langhammer aa0e8edb8b *: make tasks run every 60 minutes not :00 every hour 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-21 11:26:17 +02:00
Jens Langhammer 4f5e1fb86b outposts: initial ldap outpost implementation 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-20 00:30:27 +02:00
Jens Langhammer b75feab709 outposts: don't run outpost_controller when no service connection is set 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-19 19:23:26 +02:00
Jens Langhammer 32c5bf04b8 *: fix linting errors 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 20:08:49 +02:00
Jens Langhammer 67240fb9ad *: add model_name to TypeCreate API to pass to forms 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-17 19:12:00 +02:00
Jens Langhammer 11b09c4ebd outposts: fix errors when creating multiple outposts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-16 22:43:35 +02:00
Jens Langhammer 4f27a97e10 *: add validator to ensure JSON Fields only receive dicts 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-11 23:05:19 +02:00
Jens Langhammer 4054e6da8c helm: don't automount Service token when integration is not enabled, improve k8s detection 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-07 16:16:17 +02:00
Jens Langhammer eeb9449c11 lib: remove templatetags 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 12:37:32 +02:00
Jens Langhammer 42cb55d78a *: rename objectType to component to get rid of lookup tables 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-03 11:32:17 +02:00
Jens Langhammer 1dc01ef857 *: add API tests for types endpoints 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 23:11:53 +02:00
Jens Langhammer 83fc22005c *: remove swagger parameters from functions that don't accept them 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-04-02 13:39:22 +02:00
Jens Langhammer 656fe00302 outposts: migrate service connections to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-31 22:47:41 +02:00
Jens Langhammer 78a4a167ac outposts: remove outpost form 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 18:45:26 +02:00
Jens Langhammer 23d7ef36d2 core: remove provider and outpostserviceconnection base model create operations 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 18:35:06 +02:00
Jens Langhammer b1214f6c35 *: add new base class for non-model serializers 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-30 15:50:00 +02:00
Jens Langhammer 09aa5d6350 web/admin: migrate outposts to web 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 23:12:31 +02:00
Jens Langhammer e5ff416c2d outposts: add API for default config 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 22:52:08 +02:00
Jens Langhammer 7d74e1d2c4 *: revert to drf-yasg upstream 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-29 21:04:54 +02:00
Jens Langhammer e202fd988b root: update to isort 5 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-22 19:53:10 +01:00
Jens Langhammer a8d411a77b outposts: fix integration test failing occasionally 
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
 2021-03-17 22:02:13 +01:00
Jens Langhammer d99451b45c outposts: improve logs for outpost connection 2021-03-11 17:50:57 +01:00
Jens Langhammer 3319547a0e outposts: improve error handling for kubernetes outpost 2021-03-03 20:27:38 +01:00
Jens Langhammer 7f65ae3f92 Merge branch 'master' into stage-challenge 
# Conflicts:
#	web/package-lock.json
 2021-02-28 00:47:18 +01:00
Jens Langhammer bdb86d7119 *: replace shortcuts.reverse with urls.reverse 2021-02-20 19:13:50 +01:00
Jens Langhammer 6597d5bd28 web: migrate Token List to web 2021-02-19 19:09:30 +01:00
Jens Langhammer 865f652476 web: migrate Outpost Service Connection to web 2021-02-19 17:49:34 +01:00
Jens Langhammer e4f0613fab *: replace tuple and set from typing with normal 2021-02-18 13:53:57 +01:00
Jens Langhammer ecff810021 *: replace List from typing with normal list 2021-02-18 13:45:46 +01:00
Jens Langhammer fdde97cbbf *: replace Dict from typing with normal dict 2021-02-18 13:41:03 +01:00
Jens Langhammer 5417d0a90c *: bump pyright version 2021-02-12 10:19:38 +01:00
Jens Langhammer 02dc112f8f outposts: fix ProxyProvider update not triggering outpost update 2021-02-09 20:59:39 +01:00
Jens Langhammer 78bcb90a1e outposts: ensure Outpost API is backwards compatible 2021-02-08 19:51:46 +01:00
Jens Langhammer 820f658b49 web: add outpost list page 2021-02-08 19:04:19 +01:00