vyos-1x.git/src/conf_mode, branch current

T973: add basic frr_exporter implementation (#4150)

2024-10-17T06:35:47+00:00

T6712: Add nonproduction banner (#4149)

2024-10-11T05:23:46+00:00

(cherry picked from commit 3abe7c72c95c3d9b825db08b092c555786e9fbcf) Co-authored-by: Viacheslav Hletenko

haproxy: T6745: Rename `reverse-proxy` to `haproxy`

2024-10-09T13:55:15+00:00

Merge pull request #4128 from jestabro/commit-confirm-soft-rollback

2024-10-08T21:57:25+00:00

config-mgmt: T5976: add option for commit-confirm to use 'soft' rollback

config-mgmt: T5976: move commit-confirm revert action to subnode

2024-10-07T17:15:44+00:00

Merge pull request #3938 from talmakion/feature/T6430-local-pbr

2024-10-07T15:22:17+00:00

pbr: T6430: Local IP rules targeting VRFs by name as well as route table IDs

pbr: T6430: Local IP rules routing into VRFs by name

2024-10-07T15:15:58+00:00

* This is the `policy local-route*` part of T6430, manipulating ip rules, another PR covers firewall-backed `policy route*` for similar functionality * Local PBR (policy local-route*) can only target table IDs up to 200 and the previous PR to extend the range was rejected * PBR with this PR can now also target VRFs directly by name, working around targeting problems for VRF table IDs outside the overlapping 100-200 range * Validation ensures rules can't target both a table ID and a VRF name (internally they are handled the same) * Relocated TestPolicyRoute.verify_rules() into VyOSUnitTestSHIM.TestCase, extended to allow lookups in other address families (IPv6 in the new tests). verify_rules() is used by original pbr and new lpbr smoketests in this PR.

Merge pull request #4118 from c-po/acme-ca-cert

2024-10-07T15:07:52+00:00

pki: T6481: auto import ACME certificate chain into CLI

2024-10-06T18:13:56+00:00

When using an ACME based certificate with VyOS we provide the necessary PEM files opaque in the background when using the internal tools. This however will not properly work with the CA chain portion, as the system is based on the "pki certificate acme" CLI node of a certificate but CA chains reside under "pki ca". This adds support for importing the PEM data of a CA chain issued via ACME into the "pki ca AUTOCHAIN_ certificate" subsystem so it can be queried by other daemons. Importing the chain only happens, when the chain was not already added manually by the user. ACME certificate chains that are automatically added to the CLI are all prefixed using AUTOCHAIN_certname so they can be consumed by any daemon. This also adds a safeguard when the intermediate CA changes, the referenced name on the CLI stays consitent for any pending daemon updates.

static: T4283: fix missing f'ormat string

2024-10-05T18:34:43+00:00

This fixes the error message: Can not use both blackhole and reject for prefix "{prefix}"! Added in commit bb78f3a9ad28 ("static: T4283: support "reject" routes - emit an ICMP unreachable when matched")