Commit Graph

  • e46ea895c1 Merge branch 'main' into refactor/permissions-manager pascal 2026-04-16 14:52:46 +02:00
  • 7e4542adde fix(client): populate NetworkAddresses on iOS for posture checks (#5900) Michael Uray 2026-04-16 14:25:55 +02:00
  • d4c61ed38b [client] Add mangle FORWARD guard to prevent Docker DNAT bypass of ACL rules (#5697) Viktor Liu 2026-04-16 21:02:52 +09:00
  • 6b540d145c [client] Add --disable-networks flag to block network selection (#5896) Viktor Liu 2026-04-16 21:02:31 +09:00
  • 08f624507d [management] Enforce peer or peer groups requirement for network routers (#5894) Bethuel Mmbaga 2026-04-16 13:12:19 +03:00
  • 95bc01e48f [client] Allow clearing saved service env vars with --service-env "" (#5893) Viktor Liu 2026-04-16 02:22:08 +09:00
  • 0d86de47df [client] Add PCP support (#5219) Viktor Liu 2026-04-15 18:43:16 +09:00
  • e804a705b7 [infrastructure] Update sign pipeline version to v0.1.2 (#5884) Viktor Liu 2026-04-15 00:08:35 +09:00
  • 46fc8c9f65 [proxy] direct redirect to SSO (#5874) Pascal Fischer 2026-04-14 13:47:02 +02:00
  • d7ad908962 [misc] Add CI check for proto version string changes (#5854) Viktor Liu 2026-04-14 20:36:26 +09:00
  • 3dd34c920e [management] add context cancel monitoring (#5879) v0.68.3 release/0.68.3 Pascal Fischer 2026-04-14 12:49:18 +02:00
  • 7989bbff3b [management] revert ctx dependency in get account with backpressure (#5878) Vlad 2026-04-14 12:16:03 +02:00
  • c5623307cc [management] add context cancel monitoring (#5879) Pascal Fischer 2026-04-14 12:49:18 +02:00
  • 7f666b8022 [management] revert ctx dependency in get account with backpressure (#5878) Vlad 2026-04-14 12:16:03 +02:00
  • 0a30b9b275 [management, proxy] Add CrowdSec IP reputation integration for reverse proxy (#5722) Viktor Liu 2026-04-14 19:14:58 +09:00
  • 91a6577182 Add support for Slack as a notification channel type add-slack-channel bcmmbaga 2026-04-13 17:39:32 +03:00
  • 4eed459f27 [client] Fix DNS resolution with userspace WireGuard and kernel firewall (#5873) v0.68.2 Viktor Liu 2026-04-13 23:23:57 +09:00
  • 13539543af [client] Fix/grpc retry (#5750) Zoltan Papp 2026-04-13 10:42:24 +02:00
  • 7483fec048 Fix Android internet blackhole caused by stale route re-injection on TUN rebuild (#5865) Zoltan Papp 2026-04-13 09:38:38 +02:00
  • b621a2628b [client] Use port 22338 for RDP sideband auth server claude/rdp-token-passthrough-eNcqW Claude 2026-04-11 18:21:22 +00:00
  • 4949ca6194 [client] Add opt-in --allow-server-rdp flag, reuse SSH ACL, dynamic DLL registration Claude 2026-04-11 17:48:53 +00:00
  • c5186f1483 [client] Add RDP token passthrough for passwordless Windows Remote Desktop Claude 2026-04-11 17:15:42 +00:00
  • afbddae472 Add transparent proxy inspection engine with envoy sidecar support transparent-proxy Viktor Liu 2026-04-11 18:07:46 +02:00
  • 5259e5df51 [management] add domain and service cleanup migration (#5850) Pascal Fischer 2026-04-11 12:00:40 +02:00
  • ebd78e0122 [client] Update RaceDial to accept context for improved cancellation handling (#5849) Zoltan Papp 2026-04-10 20:51:04 +02:00
  • cf86b9a528 [management] enable access log cleanup by default (#5842) Pascal Fischer 2026-04-10 17:07:27 +02:00
  • ee588e1536 Revert "[management] allow local routing peer resource (#5814)" (#5847) Pascal Fischer 2026-04-10 14:53:47 +02:00
  • 2a8aacc5c9 [management] allow local routing peer resource (#5814) Pascal Fischer 2026-04-10 13:08:21 +02:00
  • 15709bc666 [management] update account delete with proper proxy domain and service cleanup (#5817) Pascal Fischer 2026-04-10 13:08:04 +02:00
  • 789b4113fe [misc] update dashboards (#5840) Pascal Fischer 2026-04-10 12:15:58 +02:00
  • d2cdc0efec [client] Use native firewall for peer ACLs in userspace WireGuard mode (#5668) Viktor Liu 2026-04-10 09:12:13 +08:00
  • ee343d5d77 [management] use sql null vars (#5844) Pascal Fischer 2026-04-09 18:12:38 +02:00
  • 8f6e916517 [client] Improve error reporting for route socket operations fix/macos-stale-route-eexist Zoltán Papp 2026-04-09 17:30:58 +02:00
  • 7a1c2f08b8 [client] Handle EEXIST when adding routes on macOS/BSD Zoltán Papp 2026-04-09 17:19:29 +02:00
  • 20a79c5c55 Add CrowdSec LAPI container to self-hosted setup script crowdsec-selfhosted Viktor Liu 2026-04-09 16:36:24 +02:00
  • 4d103036f7 Revert "Add trusted_cidrs field to bypass all restriction layers" Viktor Liu 2026-04-09 16:20:04 +02:00
  • 4b5e39c574 use alternative translator fix/remove-otel-units pascal 2026-04-09 13:25:27 +02:00
  • fd28178cc6 remove proxy auth changes pascal 2026-04-09 13:00:05 +02:00
  • 7f98cf30cf export metrics without units pascal 2026-04-09 12:46:45 +02:00
  • 49757e99e2 reseller openapi spec crn4 2026-04-09 10:38:24 +02:00
  • 099c493b18 [management] network map tests (#5795) Maycon Santos 2026-04-08 21:28:29 +02:00
  • c1d1229ae0 [management] use NullBool for terminated flag (#5829) v0.68.1 Pascal Fischer 2026-04-08 21:08:43 +02:00
  • 94a36cb53e [client] Handle UPnP routers that only support permanent leases (#5826) Viktor Liu 2026-04-08 23:59:59 +08:00
  • a9bca879ae Merge main into crowdsec-integration Viktor Liu 2026-04-08 17:16:17 +02:00
  • c7ba931466 [client] Populate network addresses in FreeBSD system info (#5827) Viktor Liu 2026-04-08 23:14:16 +08:00
  • 413d95b740 [client] Include service.json in debug bundle (#5825) Viktor Liu 2026-04-08 21:10:31 +08:00
  • 31d901c4b0 update role permissions for admins pascal 2026-04-08 12:15:01 +02:00
  • a5bfd3496c Checkpoint: c16e1ac9e2f9 entire/checkpoints/v1 braginini 2026-04-08 11:04:43 +02:00
  • cc901af819 Checkpoint: c16e1ac9e2f9 braginini 2026-04-08 11:04:42 +02:00
  • 332c624c55 [client] Don't abort UI debug bundle when up/down fails (#5780) v0.68.0 Viktor Liu 2026-04-08 16:33:46 +08:00
  • dc160aff36 [client] Fix SSH proxy stripping shell quoting from forwarded commands (#5669) Viktor Liu 2026-04-08 16:25:57 +08:00
  • 96806bf55f [relay] Replace net.Conn with context-aware Conn interface (#5770) Zoltan Papp 2026-04-08 09:38:31 +02:00
  • d33cd4c95b [client] Add NAT-PMP/UPnP support (#5202) Viktor Liu 2026-04-08 15:29:32 +08:00
  • e2c2f64be7 [client] Fix iOS DNS upstream routing for deselected exit nodes (#5803) Maycon Santos 2026-04-08 08:43:48 +02:00
  • 45b30067cb Merge remote-tracking branch 'origin/main' into crowdsec-integration Viktor Liu 2026-04-08 07:50:26 +02:00
  • cb73b94ffb [client] Add TCP DNS support for local listener (#5758) Viktor Liu 2026-04-08 13:40:36 +08:00
  • 6f51f1316c Upgrade crowdsec to v1.7.7 stable Viktor Liu 2026-04-07 18:27:03 +02:00
  • c202cecaf7 Remove duplicate mock methods after merge Viktor Liu 2026-04-07 18:26:25 +02:00
  • 97d739547e Merge remote-tracking branch 'origin/main' into crowdsec-integration Viktor Liu 2026-04-07 18:25:19 +02:00
  • 1d920d700c [client] Fix SSH server Stop() deadlock when sessions are active (#5717) Viktor Liu 2026-04-07 23:56:54 +08:00
  • bb85eee40a [client] Skip down interfaces in network address collection for posture checks (#5768) Viktor Liu 2026-04-07 23:56:48 +08:00
  • aba5d6f0d2 [client] Error out on netbird expose when block inbound is enabled (#5818) Viktor Liu 2026-04-07 23:55:35 +08:00
  • 20e6dff507 Merge branch 'main' into refactor/permissions-manager pascal 2026-04-07 17:35:39 +02:00
  • 0588d2dbe1 [management] Load missing service columns in pgx account loader (#5816) Viktor Liu 2026-04-07 20:56:56 +08:00
  • 14b3b77bda [management] validate permissions on groups read with name (#5749) Pascal Fischer 2026-04-07 14:13:09 +02:00
  • 6da34e483c [client] Fix mgmProber interface to match unexported GetServerPublicKey (#5815) Zoltan Papp 2026-04-07 13:13:38 +02:00
  • 0efef671d7 [client] Unexport GetServerPublicKey, add HealthCheck method (#5735) Zoltan Papp 2026-04-07 12:18:21 +02:00
  • 435203b13b [proxy] Update proxy web packages (#5661) Eduard Gert 2026-04-07 10:35:09 +02:00
  • decb5dd3af [client] Add GetSelectedClientRoutes to route manager and update DNS route check (#5802) v0.67.4 Maycon Santos 2026-04-05 13:44:53 +02:00
  • 28fbf96b2a [client] Fix flaky TestServiceLifecycle/Restart on FreeBSD (#5786) Viktor Liu 2026-04-03 03:45:49 +08:00
  • e32ad68f98 getting started changes for l4 proxy fix/getting-started crn4 2026-04-02 19:38:01 +02:00
  • 9d1a37c644 [management,client] Revert gRPC client secret removal (#5781) v0.67.3 Bethuel Mmbaga 2026-04-02 19:21:00 +03:00
  • 5bf2372c4d [management] Fix L4 service creation deadlock on single-connection databases (#5779) Viktor Liu 2026-04-02 20:46:14 +08:00
  • c2c6396a04 [management] Allow updating embedded IdP user name and email (#5721) Bethuel Mmbaga 2026-04-02 13:02:10 +03:00
  • 4c6d4a131b Merge branch 'main' into crowdsec-integration Viktor Liu 2026-04-01 19:59:14 +02:00
  • aaf813fc0c Add selfhosted scaling note (#5769) v0.67.2 Misha Bragin 2026-04-01 19:23:39 +02:00
  • 5e3dd25b24 Checkpoint: 7d03435efeeb braginini 2026-04-01 19:13:00 +02:00
  • d97fe84296 [management] fix race condition in the setup flow that enables creation of multiple owner users (#5754) Vlad 2026-04-01 16:25:35 +02:00
  • 81f45dab21 [client] Support embed.Client on Android with netstack mode (#5623) tham-le 2026-04-01 16:19:34 +02:00
  • e6898a2e0e added static connectors to combined config yaml feat/static-connectors-combined-server jnfrati 2026-04-01 15:55:52 +02:00
  • d670e7382a [client] Fix ipv6 address in quic server (#5763) Zoltan Papp 2026-04-01 15:11:23 +02:00
  • cd8c686339 [misc] add path traversal and file size protections (#5755) Pascal Fischer 2026-04-01 14:23:24 +02:00
  • f5c41e3018 [misc] set permissions on env file for getting started scripts (#5761) Pascal Fischer 2026-04-01 14:13:53 +02:00
  • 2477f99d89 [proxy] Add pprof (#5764) Pascal Fischer 2026-04-01 14:10:41 +02:00
  • 940f530ac2 [management] Legacy to embedded IdP migration tool (#5586) shuuri-labs 2026-04-01 12:53:19 +01:00
  • 4d3e2f8ad3 Fix path join (#5762) Zoltan Papp 2026-04-01 13:21:19 +02:00
  • 5ae986e1c4 [management] fix panic on management reboot (#5759) Vlad 2026-04-01 12:31:30 +02:00
  • e5914e4e8b [management,client] Remove client secret from gRPC auth flow (#5751) Bethuel Mmbaga 2026-03-31 18:50:49 +03:00
  • 8d3e5f508c Fix nil jwt nil feature/use-local-keys-embedded braginini 2026-03-31 17:36:08 +02:00
  • 19fab7993d Checkpoint: cfd28dfcf51a braginini 2026-03-31 17:36:08 +02:00
  • c238f5425f [management] proper module permission validation for posture check delete (#5742) Pascal Fischer 2026-03-31 16:43:49 +02:00
  • 3c3097ea74 [management] add target user account validation (#5741) Pascal Fischer 2026-03-31 16:43:16 +02:00
  • 7affb05af4 Merge branch 'main' into feature/fleetdm feature/fleetdm mlsmaycon 2026-03-31 14:05:17 +02:00
  • 405c3f4003 [management] Feature/fleetdm api spec (#5597) Maycon Santos 2026-03-31 14:03:34 +02:00
  • 50c1a608a7 remove obsolete network map test data file mlsmaycon 2026-03-31 13:27:41 +02:00
  • 2c6ec31d35 remove comparison test data fixtures from repository mlsmaycon 2026-03-31 13:27:00 +02:00
  • d90992250d Merge origin/main into feature/fleetdm mlsmaycon 2026-03-31 12:26:24 +02:00
  • 6553ce4cea [client] Mock management client in TestUpdateOldManagementURL to fix CI flakiness (#5703) Viktor Liu 2026-03-31 16:49:06 +08:00
  • a62d472bc4 [client] Include fake IP block routes in Android TUN rebuilds (#5739) Viktor Liu 2026-03-31 16:36:27 +08:00
  • 434ac7f0f5 [docs] Update CONTRIBUTOR_LICENSE_AGREEMENT.md (#5131) Eduard Gert 2026-03-31 09:31:03 +02:00