| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-10-07 | Merge pull request #3938 from talmakion/feature/T6430-local-pbr | Christian Breunig | |
| pbr: T6430: Local IP rules targeting VRFs by name as well as route table IDs | |||
| 2024-10-07 | xml: T6430: add re-usable vrf CLI node for firewall and pbr | Christian Breunig | |
| 2024-10-07 | pbr: T6430: Local IP rules routing into VRFs by name | Andrew Topp | |
| * This is the `policy local-route*` part of T6430, manipulating ip rules, another PR covers firewall-backed `policy route*` for similar functionality * Local PBR (policy local-route*) can only target table IDs up to 200 and the previous PR to extend the range was rejected * PBR with this PR can now also target VRFs directly by name, working around targeting problems for VRF table IDs outside the overlapping 100-200 range * Validation ensures rules can't target both a table ID and a VRF name (internally they are handled the same) * Relocated TestPolicyRoute.verify_rules() into VyOSUnitTestSHIM.TestCase, extended to allow lookups in other address families (IPv6 in the new tests). verify_rules() is used by original pbr and new lpbr smoketests in this PR. | |||
| 2024-10-07 | Merge pull request #4118 from c-po/acme-ca-cert | Daniil Baturin | |
| pki: T6481: auto import ACME certificate chain into CLI | |||
| 2024-10-07 | Merge pull request #4133 from c-po/parallel-smoketests | Christian Breunig | |
| GitHub: T6494: add parallel step to run interface based smoketests | |||
| 2024-10-06 | pki: T6481: auto import ACME certificate chain into CLI | Christian Breunig | |
| When using an ACME based certificate with VyOS we provide the necessary PEM files opaque in the background when using the internal tools. This however will not properly work with the CA chain portion, as the system is based on the "pki certificate <name> acme" CLI node of a certificate but CA chains reside under "pki ca". This adds support for importing the PEM data of a CA chain issued via ACME into the "pki ca AUTOCHAIN_<name> certificate" subsystem so it can be queried by other daemons. Importing the chain only happens, when the chain was not already added manually by the user. ACME certificate chains that are automatically added to the CLI are all prefixed using AUTOCHAIN_certname so they can be consumed by any daemon. This also adds a safeguard when the intermediate CA changes, the referenced name on the CLI stays consitent for any pending daemon updates. | |||
| 2024-10-06 | Merge pull request #4132 from c-po/keyboard-layout | Christian Breunig | |
| T6759: add support for italian keymap | |||
| 2024-10-06 | Merge pull request #4131 from c-po/static-error-msg | Christian Breunig | |
| static: T4283: fix missing f'ormat string | |||
| 2024-10-06 | GitHub: T6494: add parallel step to run interface based smoketests | Christian Breunig | |
| 2024-10-06 | T6759: add support for italian keymap | Christian Breunig | |
| set system option keyboard-layout it | |||
| 2024-10-05 | op-mode: T6753: Fix json output for mtr / monitor traceroute (#4122) | Nataliia S. | |
| 2024-10-05 | static: T4283: fix missing f'ormat string | Christian Breunig | |
| This fixes the error message: Can not use both blackhole and reject for prefix "{prefix}"! Added in commit bb78f3a9ad28 ("static: T4283: support "reject" routes - emit an ICMP unreachable when matched") | |||
| 2024-10-05 | Merge pull request #4130 from c-po/node-exporter-fix | Christian Breunig | |
| Debian: T973: add missing dependency on node-exporter package | |||
| 2024-10-05 | Debian: T973: add missing dependency on node-exporter package | Christian Breunig | |
| Extend commit a0c15a159 ("T973: add basic node_exporter implementation") by adding the required dependency to install node-exporter binary. | |||
| 2024-10-04 | Merge pull request #4110 from jestabro/distinct-api | Christian Breunig | |
| http-api: T6736: move REST API to a node distinct from GraphQL API | |||
| 2024-10-04 | Merge pull request #4121 from natali-rs1985/T6101-current | Christian Breunig | |
| ipsec: T6101: Add validation for proposal option used in IKE group | |||
| 2024-10-04 | Merge pull request #4119 from sever-sever/T6755 | Christian Breunig | |
| T6755: Change vyos mirror URL for smoketest | |||
| 2024-10-04 | Merge pull request #4048 from rebortg/node_exporter | Christian Breunig | |
| T973: add basic node_exporter implementation | |||
| 2024-10-04 | Merge pull request #4123 from nicolas-fort/fwall_set_commands | Daniil Baturin | |
| T6760: firewall: add packet modifications existing in policy route to regular firewall ruleset. | |||
| 2024-10-04 | Merge pull request #4126 from sever-sever/T6763 | Daniil Baturin | |
| T6763: Delete Jenkins file | |||
| 2024-10-04 | T6763: Delete Jenkins file | Viacheslav Hletenko | |
| 2024-10-04 | Merge pull request #4125 from sever-sever/T6761 | Christian Breunig | |
| T6761: Add timeout for OSPF smoketest fail | |||
| 2024-10-03 | T973: remove irrelevant standard values | rebortg | |
| 2024-10-03 | cli: T6752: add a wrapper for the show command (#4111) | Daniil Baturin | |
| 2024-10-03 | T6761: Add timeout for OSPF smoketest fail | Viacheslav Hletenko | |
| From time to time the smoektest script checks frrconfig to early. I.e. FRR does not fully load the config during checking or the OSPF daemon is not started at the time of checking. | |||
| 2024-10-03 | T6760: firewall: add packet modifications existing in policy route to ↵ | Nicolas Fort | |
| regular firewall ruleset. | |||
| 2024-10-03 | http-api: T6736: sanitize error message containing user input | John Estabrook | |
| 2024-10-03 | vyos.configtree: T6742: add bindings for create_node and is_leaf/set_leaf ↵ | Daniil Baturin | |
| (#4109) | |||
| 2024-10-03 | Merge pull request #4120 from nicolas-fort/T6757-ocserv-radius | Daniil Baturin | |
| T6757: Openconnect: fix template for correct config parsing while configuring source address for radius authentication. | |||
| 2024-10-02 | ipsec: T6101: Add validation for proposal option used in IKE group | Nataliia Solomko | |
| 2024-10-02 | T6757: Openconnect: fix template for correct config parsing while ↵ | Nicolas Fort | |
| configuring source address for radius authentication. | |||
| 2024-10-02 | T6755: Change vyos mirror URL | Viacheslav Hletenko | |
| Change vyos mirror URL | |||
| 2024-09-30 | http-api: T6736: normalize formatting | John Estabrook | |
| 2024-09-30 | Merge pull request #4106 from dmbaturin/T6743-native-range-validators | Daniil Baturin | |
| validators: T6743: use native ipaddrcheck validator options for ranges | |||
| 2024-09-30 | Merge pull request #4112 from c-po/policy-T6751 | Daniil Baturin | |
| policy: T6751: add missing completion helpers for community-list | |||
| 2024-09-30 | Merge pull request #4024 from nicolas-fort/T6687 | Daniil Baturin | |
| T6687: add fqdn support to nat rules. | |||
| 2024-09-30 | policy: T6751: add missing completion helpers for community-list | Christian Breunig | |
| Add all missing, well-known values for the community-list regex. | |||
| 2024-09-30 | Merge pull request #4107 from kumvijaya/current | Christian Breunig | |
| T6749: fix PR commenting permission issue with integration test workflow | |||
| 2024-09-29 | http-api: T6736: add migration script and update version | John Estabrook | |
| 2024-09-29 | http-api: T6736: update smoketest for syntax change | John Estabrook | |
| 2024-09-29 | http-api: T6736: add distinct XML path for REST API | John Estabrook | |
| 2024-09-29 | http-api: T6736: regenerate openapi docs | John Estabrook | |
| 2024-09-29 | http-api: T6736: remove routes on config delete | John Estabrook | |
| Avoid duplicate entries in the list of routes when adding/deleting endpoints. | |||
| 2024-09-29 | http-api: T6736: separate REST API and GraphQL API activation | John Estabrook | |
| The GraphQL API was implemented as an addition to the existing REST API. As there is no necessary dependency, separate the initialization of the respective endpoints. Factor out the REST Pydantic models and FastAPI routes for symmetry and clarity. | |||
| 2024-09-29 | http-api: T6736: update for deprecated/renamed in Pydantic V2 | John Estabrook | |
| 2024-09-28 | T6749: fix PR commenting permission issue with integration test worflow | Vijayakumar A | |
| 2024-09-27 | Merge pull request #4105 from dmbaturin/T6739-quote-ipaddrcheck-args-correctly | Christian Breunig | |
| validators: T6739: correctly quote ipaddrcheck arguments to avoid ipaddrcheck syntax errors when values include whitespace | |||
| 2024-09-27 | validators: T6743: use native ipaddrcheck validator options for ranges | Daniil Baturin | |
| 2024-09-27 | validators: T6739: correctly quote ipaddrcheck arguments | Daniil Baturin | |
| to avoid ipaddrcheck syntax errors when values include whitespace | |||
| 2024-09-27 | Merge pull request #4104 from vyos/revert-4099-T6739-quote-ipaddrcheck-args | Christian Breunig | |
| validators: T6738: Revert "validators: T6739: fix ipaddrcheck argument quoting" | |||
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git) |
| summaryrefslogtreecommitdiff |