Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-11-07 | Merge pull request #4151 from natali-rs1985/T6695HEADcurrent | Daniil Baturin | |
T6695: Machine-readable operational mode support for traceroute | |||
2024-10-24 | Merge pull request #4155 from HollyGurza/T4583 | Christian Breunig | |
T4583: Rewrite VRRP op-mode to vyos.opmode format | |||
2024-10-21 | Merge branch 'current' into T6695 | Nataliia S. | |
2024-10-19 | Merge pull request #4165 from natali-rs1985/T4914-current | Christian Breunig | |
pki: T4914: Rewrite the PKI op mode in the new style | |||
2024-10-18 | pki: T4914: reformat file by linter rules | Nataliia Solomko | |
2024-10-18 | pki: T4914: Rewrite the PKI op mode in the new style | Nataliia Solomko | |
2024-10-17 | T4583: Rewrite VRRP op-mode to vyos.opmode format | khramshinr | |
2024-10-17 | T973: add basic frr_exporter implementation (#4150) | Robert Göhler | |
2024-10-11 | T6695: normalize formatting | Nataliia Solomko | |
2024-10-11 | T6695: Machine-readable operational mode support for traceroute | Nataliia Solomko | |
2024-10-11 | T6712: Add nonproduction banner (#4149) | mergify[bot] | |
(cherry picked from commit 3abe7c72c95c3d9b825db08b092c555786e9fbcf) Co-authored-by: Viacheslav Hletenko <v.gletenko@vyos.io> | |||
2024-10-09 | haproxy: T6745: Rename `reverse-proxy` to `haproxy` | sarthurdev | |
2024-10-08 | Merge pull request #4128 from jestabro/commit-confirm-soft-rollback | John Estabrook | |
config-mgmt: T5976: add option for commit-confirm to use 'soft' rollback | |||
2024-10-07 | config-mgmt: T5976: move commit-confirm revert action to subnode | John Estabrook | |
2024-10-07 | Merge pull request #4124 from dmbaturin/T6740-set-to-config-converter | John Estabrook | |
cli: T6740: add a converter from set commands to config | |||
2024-10-07 | cli: T6740: set_tag on created paths and add parse step for ordering | John Estabrook | |
Signed-off-by: Daniil Baturin <daniil@baturin.org> | |||
2024-10-07 | Merge pull request #3938 from talmakion/feature/T6430-local-pbr | Christian Breunig | |
pbr: T6430: Local IP rules targeting VRFs by name as well as route table IDs | |||
2024-10-07 | pbr: T6430: Local IP rules routing into VRFs by name | Andrew Topp | |
* This is the `policy local-route*` part of T6430, manipulating ip rules, another PR covers firewall-backed `policy route*` for similar functionality * Local PBR (policy local-route*) can only target table IDs up to 200 and the previous PR to extend the range was rejected * PBR with this PR can now also target VRFs directly by name, working around targeting problems for VRF table IDs outside the overlapping 100-200 range * Validation ensures rules can't target both a table ID and a VRF name (internally they are handled the same) * Relocated TestPolicyRoute.verify_rules() into VyOSUnitTestSHIM.TestCase, extended to allow lookups in other address families (IPv6 in the new tests). verify_rules() is used by original pbr and new lpbr smoketests in this PR. | |||
2024-10-07 | Merge pull request #4118 from c-po/acme-ca-cert | Daniil Baturin | |
pki: T6481: auto import ACME certificate chain into CLI | |||
2024-10-06 | pki: T6481: auto import ACME certificate chain into CLI | Christian Breunig | |
When using an ACME based certificate with VyOS we provide the necessary PEM files opaque in the background when using the internal tools. This however will not properly work with the CA chain portion, as the system is based on the "pki certificate <name> acme" CLI node of a certificate but CA chains reside under "pki ca". This adds support for importing the PEM data of a CA chain issued via ACME into the "pki ca AUTOCHAIN_<name> certificate" subsystem so it can be queried by other daemons. Importing the chain only happens, when the chain was not already added manually by the user. ACME certificate chains that are automatically added to the CLI are all prefixed using AUTOCHAIN_certname so they can be consumed by any daemon. This also adds a safeguard when the intermediate CA changes, the referenced name on the CLI stays consitent for any pending daemon updates. | |||
2024-10-06 | Merge pull request #4131 from c-po/static-error-msg | Christian Breunig | |
static: T4283: fix missing f'ormat string | |||
2024-10-05 | op-mode: T6753: Fix json output for mtr / monitor traceroute (#4122) | Nataliia S. | |
2024-10-05 | static: T4283: fix missing f'ormat string | Christian Breunig | |
This fixes the error message: Can not use both blackhole and reject for prefix "{prefix}"! Added in commit bb78f3a9ad28 ("static: T4283: support "reject" routes - emit an ICMP unreachable when matched") | |||
2024-10-05 | config-mgmt: T5976: add option for commit-confirm to use 'soft' rollback | John Estabrook | |
Commit-confirm will restore a previous configuration if a confirmation is not received in N minutes. Traditionally, this was restored by a reboot into the last configuration on disk; add a configurable option to reload the last completed commit without a reboot. The default setting is to reboot. | |||
2024-10-05 | config-mgmt: T5976: normalize formatting | John Estabrook | |
2024-10-04 | Merge pull request #4110 from jestabro/distinct-api | Christian Breunig | |
http-api: T6736: move REST API to a node distinct from GraphQL API | |||
2024-10-04 | Merge pull request #4121 from natali-rs1985/T6101-current | Christian Breunig | |
ipsec: T6101: Add validation for proposal option used in IKE group | |||
2024-10-04 | Merge pull request #4048 from rebortg/node_exporter | Christian Breunig | |
T973: add basic node_exporter implementation | |||
2024-10-03 | T973: remove irrelevant standard values | rebortg | |
2024-10-03 | cli: T6752: add a wrapper for the show command (#4111) | Daniil Baturin | |
2024-10-03 | cli: T6740: add a converter from set commands to config | Daniil Baturin | |
2024-10-03 | http-api: T6736: sanitize error message containing user input | John Estabrook | |
2024-10-02 | ipsec: T6101: Add validation for proposal option used in IKE group | Nataliia Solomko | |
2024-09-30 | http-api: T6736: normalize formatting | John Estabrook | |
2024-09-30 | Merge pull request #4106 from dmbaturin/T6743-native-range-validators | Daniil Baturin | |
validators: T6743: use native ipaddrcheck validator options for ranges | |||
2024-09-30 | Merge pull request #4024 from nicolas-fort/T6687 | Daniil Baturin | |
T6687: add fqdn support to nat rules. | |||
2024-09-29 | http-api: T6736: add migration script and update version | John Estabrook | |
2024-09-29 | http-api: T6736: regenerate openapi docs | John Estabrook | |
2024-09-29 | http-api: T6736: remove routes on config delete | John Estabrook | |
Avoid duplicate entries in the list of routes when adding/deleting endpoints. | |||
2024-09-29 | http-api: T6736: separate REST API and GraphQL API activation | John Estabrook | |
The GraphQL API was implemented as an addition to the existing REST API. As there is no necessary dependency, separate the initialization of the respective endpoints. Factor out the REST Pydantic models and FastAPI routes for symmetry and clarity. | |||
2024-09-29 | http-api: T6736: update for deprecated/renamed in Pydantic V2 | John Estabrook | |
2024-09-27 | validators: T6743: use native ipaddrcheck validator options for ranges | Daniil Baturin | |
2024-09-27 | validators: T6739: correctly quote ipaddrcheck arguments | Daniil Baturin | |
to avoid ipaddrcheck syntax errors when values include whitespace | |||
2024-09-27 | Revert "validators: T6739: fix ipaddrcheck argument quoting" | Daniil Baturin | |
2024-09-25 | validators: T6739: fix ipaddrcheck argument quoting | Daniil Baturin | |
2024-09-25 | Merge pull request #3876 from jestabro/uncaught-conf-script-err-as-commit-err | Daniil Baturin | |
configd: T6608: report uncaught config script exceptions as commit error | |||
2024-09-24 | syslog: T6719: fix the behavior of "syslog global preserve-fqdn" | Nicolas Vollmar | |
2024-09-24 | Merge pull request #4086 from natali-rs1985/T6675-current | Christian Breunig | |
bridge: T6675: VXLAN Interface configuration lost due to improper bridge detachment | |||
2024-09-22 | configd: T6608: report uncaught config script exceptions as commit error | John Estabrook | |
In the case of config mode script exceptions other than ConfigError, vyos-configd would previously trigger the shim to re-run the script in the CLI context. The use of config dependencies require this case to return a commit error. A traceback is returned as output, consistent with running without vyos-configd support. | |||
2024-09-21 | T6630: ntp: rename ptp-transport to ptp and use defaultValue for port | Christian Breunig | |