Kristoffer Dalby
67f5c32b49
Only allow one connection to sqlite
2022-02-22 19:04:52 +00:00
Kristoffer Dalby
bfbcea35a0
Remove dependency on CGO
...
This commit changes the SQLite dependency to one that does not depend on
CGO. It uses a C-to-Go translated sqlite library that is Pure go.
2022-02-22 16:51:54 +00:00
Kristoffer Dalby
a37339fa54
Merge pull request #348 from restanrm/remove-comment
...
fix(machine): remove comment
2022-02-22 14:06:12 +00:00
Adrien Raffin-Caboisse
f2f8d834e8
fix(machine): remove comment
...
After some more tests in tailscale I couldn't replicate the behavior
described in there.
When adding a rule, allowing A to talk to B the reverse connection was
instantly added to B to allow communication to B.
The previous assumption was probably wrong.
2022-02-22 11:26:21 +01:00
Kristoffer Dalby
69cdfbb56f
Merge pull request #320 from restanrm/feat-improve-acls-usage
...
Improvements on the ACLs and bug fixing
2022-02-21 21:41:15 +00:00
Adrien Raffin-Caboisse
d971f0f0e6
fix(acls_test): fix comment in go code
2022-02-21 21:48:05 +01:00
Adrien Raffin-Caboisse
650108c7c7
chore(fmt): apply fmt
2022-02-21 21:46:40 +01:00
Adrien Raffin-Caboisse
baae266db0
Update acls_test.go
...
Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2022-02-21 20:25:41 +01:00
Adrien Raffin-Caboisse
50af44bc2f
fix: add error checking in acl and poll
...
If aclPolicy is not defined, in updateAclPolicy, return an error.
2022-02-21 20:06:31 +01:00
Adrien Raffin-Caboisse
211fe4034a
chore(linter): ignore tt var as it's generated code (vscode)
2022-02-21 16:10:20 +01:00
Adrien Raffin-Caboisse
25550f8866
chore(format): run prettier on repo
2022-02-21 16:06:20 +01:00
Adrien Raffin-Caboisse
4bbe0051f6
chore(machines): apply lint
2022-02-21 10:02:59 +01:00
Adrien Raffin-Caboisse
5ab62378ae
tests(machines): test all combinations of peer filtering
2022-02-21 09:58:19 +01:00
Adrien Raffin-Caboisse
f006860136
feat(machines): untie dependency with class for filter func
...
The dependency to the `headscale` struct makes tests harder to do.
This change allow to easily add some tests for this quite sensible function.
2022-02-21 09:58:19 +01:00
Adrien Raffin-Caboisse
9c6ce02554
fix(machines): use ListAllMachines function
...
added a simple filter to remove the current node
2022-02-21 09:58:19 +01:00
Adrien Raffin-Caboisse
960412a335
fix(machines): simplify complex if check
...
This should fix the performance issue with computation of `dst` variable. It's also easier to read now.
2022-02-21 09:58:19 +01:00
Kristoffer Dalby
ecb3ee6bfa
Merge branch 'main' into feat-improve-acls-usage
2022-02-21 08:51:21 +00:00
Adrien Raffin-Caboisse
5242025ab3
fix(machines): renaming following review comments
2022-02-20 23:50:08 +01:00
Adrien Raffin-Caboisse
b3d0fb7a93
fix(machine): revert modifications
...
Using h.ListAllMachines also listed the current machine in the result. It's unnecessary (I don't know if it's harmful).
Breaking the check with the `matchSourceAndDestinationWithRule` broke the tests. We have a specificity with the '*' destination that isn't symetrical.
I need to think of a better way to do this. It too hard to read.
2022-02-20 23:47:04 +01:00
Adrien Raffin-Caboisse
5e167cc00a
fix(tests): fix naming issues related to code review
2022-02-20 23:00:31 +01:00
Adrien Raffin-Caboisse
d00251c63e
fix(acls,machines): apply code review suggestions
2022-02-20 21:26:20 +01:00
Adrien Raffin-Caboisse
4f9ece14c5
Apply suggestions from code review on changelog
...
Co-authored-by: Kristoffer Dalby <kradalby@kradalby.no>
2022-02-20 20:47:12 +01:00
Kristoffer Dalby
602291df61
Merge pull request #338 from juanfont/update-contributors
2022-02-19 23:13:08 +00:00
github-actions[bot]
5245f1accc
docs(README): update contributors
2022-02-19 22:48:26 +00:00
Kristoffer Dalby
91babb5130
Merge pull request #336 from ohdearaugustin/topic/fix-contributors-action
2022-02-19 21:08:53 +00:00
ohdearaugustin
8798efd353
contributor: set specific version
2022-02-19 21:36:08 +01:00
Kristoffer Dalby
74621e2750
Merge pull request #332 from e-zk/main
...
Fix spelling error
2022-02-19 19:34:24 +00:00
Kristoffer Dalby
74c3c6bb60
Merge branch 'main' into main
2022-02-19 19:32:34 +00:00
Kristoffer Dalby
84b98e716a
Merge pull request #334 from ohdearaugustin/topic/renovatebot-codeowner
...
CODEOWNER: add renovate config ohdearaugustin
2022-02-19 19:32:21 +00:00
ohdearaugustin
e9f13b6031
CODEOWNER: add renovate config ohdearaugustin
2022-02-19 20:28:08 +01:00
e-zk
a6b7bc5939
Fix spelling error
2022-02-20 03:14:51 +10:00
Kristoffer Dalby
7d5e6d3f0f
Merge pull request #330 from kradalby/codeowners
...
Add ohdearaugustin to CODEOWNERS for config and docs
2022-02-18 20:12:29 +00:00
Kristoffer Dalby
7a90c2fba1
Merge branch 'main' into codeowners
2022-02-18 20:11:33 +00:00
Kristoffer Dalby
5cf215a44b
Merge pull request #325 from juanfont/kradalby-patch-4
...
Update changelog for 0.13.0
2022-02-18 20:11:03 +00:00
Kristoffer Dalby
7916fa8b45
Add ohdearaugustin to CODEOWNERS for config and docs
2022-02-18 19:57:03 +00:00
Kristoffer Dalby
5fbef07627
Update changelog for 0.13.0
2022-02-18 18:54:27 +00:00
Kristoffer Dalby
21df798f07
Merge branch 'main' into feat-improve-acls-usage
2022-02-18 17:19:19 +00:00
Kristoffer Dalby
67bb1fc9dd
Merge pull request #324 from m-tanner-dev0/patch-1
2022-02-18 07:18:22 +00:00
Tanner
61bfa79be2
Update README.md
...
change flippant language
2022-02-17 17:55:40 -08:00
Adrien Raffin-Caboisse
f073d8f43c
chore(lint): ignore linting on test_expandalias
...
This is a false positive on the way the function is built.
Small tests cases are all inside this functions, making it big.
2022-02-17 09:32:55 +01:00
Adrien Raffin-Caboisse
5f642eef76
chore(lint): more lint fixing
2022-02-17 09:32:54 +01:00
Adrien Raffin-Caboisse
d8c4c3163b
chore(fmt): apply make fmt command
2022-02-17 09:32:54 +01:00
Adrien Raffin-Caboisse
9cedbbafd4
chore(all): update some files for linter
2022-02-17 09:32:51 +01:00
Adrien Raffin-Caboisse
aceaba60f1
docs(changelog): bump changelog
2022-02-17 09:30:09 +01:00
Adrien Raffin-Caboisse
7b5ba9f781
docs(acl): add configuration example to explain acls
2022-02-17 09:30:09 +01:00
Adrien Raffin
de59946447
feat(acls): rewrite functions to be testable
...
Rewrite some function to get rid of the dependency on Headscale object. This allows us
to write succinct test that are more easy to review and implement.
The improvements of the tests allowed to write the removal of the tagged hosts
from the namespace as specified here: https://tailscale.com/kb/1068/acl-tags/
2022-02-17 09:30:09 +01:00
Adrien Raffin
97eac3b938
feat(acl): update frequently the aclRules
...
This call should be done quite at each modification of a server resources like RequestTags.
When a server changes it's tag we should rebuild the ACL rules.
When a server is added to headscale we also should update the ACLRules.
2022-02-17 09:30:08 +01:00
Adrien Raffin
fb45138fc1
feat(acls): check acl owners and add bunch of tests
2022-02-17 09:30:08 +01:00
Adrien Raffin
e9949b4c70
feat(acls): simplify updating rules
2022-02-17 09:30:08 +01:00
Adrien Raffin
e482dfeed4
feat(machine): add ACLFilter if ACL's are enabled.
...
This commit change the default behaviour and remove the notion of namespaces between the hosts. It allows all namespaces to be only filtered by the ACLs. This behavior is closer to tailsnet.
2022-02-17 09:30:05 +01:00