gravitl/netmaker
1
0
Fork 0
mirror of https://github.com/gravitl/netmaker.git synced 2026-10-12 11:10:00 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,894 Commits 1,844 Branches 91 Tags
develop
Commit Graph
7894 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Vishal Dalwadi c83ee636e2 Merge pull request #4148 from gravitl/NM-387 
NM-387: Managed SSH
 2026-10-09 14:54:57 +05:30
Abhishek Kondur 401953a121 Merge pull request #4156 from gravitl/master 
Master
 2026-09-23 15:52:49 +05:30
Abhishek Kondur e82365b8b1 Merge pull request #4155 from gravitl/release-v1.7.0 
Release v1.7.0
 2026-09-23 14:12:28 +05:30
Abhishek Kondur 2c0eb4f7fa Merge pull request #4152 from gravitl/patch/release-v1.7.0 
Patch: License Validation and Management
 2026-09-23 14:06:12 +05:30
Vishal Dalwadi 9c4fcfcad3 feat(go): add get auth methods api; 2026-09-23 13:47:09 +05:30
Vishal Dalwadi 03e0bd2b64 fix(go): handle create-org-owner allowed post create-super-admin call; 2026-09-21 23:04:48 +05:30
Vishal Dalwadi cf1acff10b fix(go): resync tenant id on license change; show license error on any error while license validation; 2026-09-21 12:59:49 +05:30
Abhishek Kondur ab0b063d2c Merge pull request #4150 from gravitl/master 
Master
 2026-09-17 17:24:15 +05:30
Abhishek Kondur fa1416b6bb Merge pull request #4149 from gravitl/release-v1.7.0 
Release v1.7.0
 2026-09-17 17:23:00 +05:30
Abhishek Kondur 58a0a12d15 Merge pull request #4142 from gravitl/NM-386 
NM-386: allow Windows internet egress and reject virtual NAT on Windows
 2026-09-17 17:07:20 +05:30
Abhishek Kondur 358d6737bf Merge pull request #4147 from gravitl/security-fixes 
Security Fixes
 2026-09-15 14:27:01 +05:30
Vishal Dalwadi c6e3ea19d1 fix(go): remove tag from network auto remove tags on delete; 2026-09-13 14:34:52 +05:30
Vishal Dalwadi aa458197a9 fix(go): guard jwt secret key with mutex; 2026-09-11 11:26:59 +05:30
Vishal Dalwadi bb37877f8e fix(go): join when search query provided; 2026-09-11 11:22:25 +05:30
Vishal Dalwadi ba2d7b46ef fix(go): attempt reload jwt secret in worker pods if not set; prevent jwt signing if jwt secret not set; 2026-09-10 13:44:29 +05:30
Vishal Dalwadi e58d8d6c93 fix(go): populate sender identity from auth token; check if hosts share network; 2026-09-10 13:44:28 +05:30
Abhishek Kondur 8d5a10cb26 Merge pull request #4146 from gravitl/v1.7.0-exitnode-acl-fix 
v1.7.0: fix: do not auto-assign exit node from ACL access
 2026-09-09 18:55:46 +05:30
Abhishek Kondur a42e76320e v1.7.0: fix: require ACL access for assigned exit nodes 
Only apply full-tunnel when a node is assigned an exit and policy allows
it (default all-resources, dst '*', or the exit egress in dst).
 2026-09-09 17:07:09 +04:00
Abhishek Kondur 9a25b06d7f v1.7.0: fix: do not auto-assign exit node from ACL access 
ACL/gateway policies may allow reachability to an internet egress, but
full-tunnel (0.0.0.0/0) must only apply when the user explicitly selects
an exit node.
 2026-09-09 16:46:53 +04:00
Abhishek Kondur 284c3778e4 Merge pull request #4144 from gravitl/master 
Master
 2026-09-09 16:44:32 +05:30
Abhishek Kondur 65e9638722 Merge pull request #4140 from gravitl/release-v1.7.0 
Release v1.7.0
 2026-09-09 16:12:45 +05:30
Abhishek Kondur 5988bac5d6 v1.7.0: streamline posture check updates 2026-09-09 14:11:00 +04:00
Abhishek Kondur 7130624dfd v1.7.0:getHostPostureStatus to use logic.GetHostNodes(host) instead of loading every node 2026-09-09 12:56:57 +04:00
Abhishek Kondur 487c4e869a v1.7.0: HasPostureFailureForSubjectType now uses CAST(source AS TEXT) LIKE ?, so the subject-type check works on Postgres jsonb and SQLite, and posture-failure backfill can run on Postgres again. 2026-09-09 12:28:19 +04:00
Abhishek Kondur ccf6a41198 Merge pull request #4139 from gravitl/v1.7.0-scale-fixes 
v1.7.0:  speed up /api/nodes on SQLite and harden DB under load
 2026-09-08 16:36:03 +05:30
Abhishek Kondur 66cb8226ec fix(posture): audit user violations and drop run sync noise 
Emit POSTURE_CHECK_FAILED for Active Users with USER source, backfill
user failures separately from devices, and stop logging SYNC on manual run.
 2026-09-08 14:53:35 +04:00
Abhishek Kondur 57b8a8238e Merge branch 'release-v1.7.0' into v1.7.0-scale-fixes 2026-09-08 14:28:31 +05:30
Abhishek Kondur 641f991f9c fix(posture): keep violation cycles consistent and audit new failures 
Skip violation details on GetAllNodes, replace cycles transactionally, and
emit POSTURE_CHECK_FAILED for new CheckIDs (with one-time backfill).
 2026-09-08 12:21:33 +04:00
Abhishek Kondur 8be392318d Merge pull request #4138 from gravitl/fixes-release-v1.7.0 
Fixes release v1.7.0
 2026-09-04 17:39:55 +05:30
Abhishek Kondur 8234ec09cb v1.7.0: fix static check 2026-09-04 16:05:24 +04:00
Abhishek Kondur 874dc22ece v1.7.0:fix(go): speed up /api/nodes on SQLite and harden DB under load 
Batch posture violation loads and drop redundant host fetches on node
list APIs. Also batch check-in flushes, avoid false db_connected flaps
when the SQLite pool is busy, tune SQLite DSN, and add optional SQL_DEBUG.
 2026-09-04 15:58:47 +04:00
Vishal Dalwadi 59e56e1b60 feat(go): add feature flags for mdm and edr integrations; 2026-09-04 16:47:42 +05:30
Vishal Dalwadi a4161d6f5d feat(go): add error message to clearly show clickhouse not configured; 2026-09-04 14:43:29 +05:30
Vishal Dalwadi 51e602a2e2 feat(go): add error message to clearly show clickhouse not configured; 2026-09-04 14:24:41 +05:30
Vishal Dalwadi e31456c747 feat(go): add membership alias for account disabled and mfa status; 2026-09-04 14:15:08 +05:30
Vishal Dalwadi 8bcc9985ba feat(go): separate join and preload; 2026-09-04 11:34:35 +05:30
Vishal Dalwadi 86d8ea4d17 feat(go): rekey tenant settings record; 2026-09-03 23:55:37 +05:30
Vishal Dalwadi 4557a95def feat(go): add debug logs for unauthorized error; 2026-09-03 23:54:36 +05:30
Abhishek Kondur 959c5b01cb Merge pull request #4136 from gravitl/release-v1.7.0 
Release v1.7.0
 2026-09-03 15:10:30 +05:30
Abhishek Kondur 6654b37997 Merge pull request #4135 from gravitl/fixes-release-v1.7.0 
Delete host on nm-quick.sh cleanup
 2026-09-03 11:36:20 +05:30
Vishal Dalwadi 6f78c2394a Merge branch 'release-v1.7.0' of https://github.com/gravitl/netmaker into fixes-release-v1.7.0 2026-09-03 11:27:03 +05:30
Vishal Dalwadi 1392bd76d6 feat(sh): delete host instead of delete node; 2026-09-03 11:26:50 +05:30
Abhishek Kondur 8392e28697 Merge pull request #4133 from gravitl/release-v1.7.0 
v1.7.0
 2026-09-03 09:27:36 +05:30
Abhishek Kondur fbae52e0cb Release v1.7.0 Fixes (#4134) 
* feat(sh): assign global admin group to all superadmin/admins on ce upgrade;

* feat(sh): check if api read instead of test_connection;

* feat(sh): ensure domain is set;

* feat(sh): use correct fields;

* feat(sh): rekey tenant scoped keys as well;

* feat(go): set grpc endpoint;

* feat(go): set grpc endpoint;

* feat(go): reset default tenant id cache;
 2026-09-02 16:30:55 +05:30
Vishal Dalwadi 66baa98d8b feat(go): reset default tenant id cache; 2026-09-02 16:15:48 +05:30
Vishal Dalwadi 172c0cce88 feat(go): set grpc endpoint; 2026-09-02 15:49:58 +05:30
Vishal Dalwadi 5c3d627f25 feat(go): set grpc endpoint; 2026-09-02 15:41:37 +05:30
Vishal Dalwadi bf5489105f feat(sh): rekey tenant scoped keys as well; 2026-09-01 23:27:36 +05:30
Vishal Dalwadi 91d22350f3 feat(sh): use correct fields; 2026-09-01 23:09:45 +05:30
Vishal Dalwadi 6ad1260ca8 feat(sh): ensure domain is set; 2026-09-01 22:50:48 +05:30