summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-06-10vyos.utils: T5248: add util function: dict of list[str]|str -> list of pathsJohn Estabrook
2023-06-10http-api: T5263: add base model for generalizationJohn Estabrook
2023-06-10http-api: T5263: factor out function _configure_op for generalizationJohn Estabrook
2023-06-10http-api: T5263: consistent string formattingJohn Estabrook
2023-06-10http-api: T5263: simplify form errorsJohn Estabrook
2023-06-10http-api: T5263: path validator should provide messageJohn Estabrook
2023-06-10zone-policy: T2199: add VRF completion helper for interfaceChristian Breunig
2023-06-10Merge pull request #2015 from sever-sever/T5231Christian Breunig
T5231: Add op-mode for show reverse-proxy
2023-06-10Merge pull request #2034 from erkin/currentChristian Breunig
T3472: Print warning when commit-confirm is run as regular user
2023-06-10Merge pull request #2035 from indrajitr/ddclient-improvement-round-4Christian Breunig
dns: T5144: Improve dynamic dns monitor and log and miscellaneous updates
2023-06-10dhcpv6-relay: T5277: service does not start on bootJohn
2023-06-09dns: T5144: Explicitly override ddclient global options for reliabilityIndrajit Raychaudhuri
- For option 'web', ddclient defaults to 'dyndns' which doesn't support ssl. This results ddclient process lockup till connection to checkip.dyndns.org:443 times out. - For option 'use', ddclient defaults 'ip'. This results in confusing message "WARNING: '' is not a valid IPv4 or IPv6 address" in log.
2023-06-09dns: T5144: Force systemd daemon-reload on ddclient config changeIndrajit Raychaudhuri
2023-06-09dns: T5144: Adjust DNS related CLI help messages for consistencyIndrajit Raychaudhuri
This should make the help messages more consistent for DNS related CLI subtree.
2023-06-09dns: T5144: Support dynamic dns monitor and log via journalctlIndrajit Raychaudhuri
Add support for monitoring dynamic dns updates via journalctl. Additionally, switch to using journalctl to show dynamic dns updates. Also add/adjust the CLI help messages for consistency.
2023-06-09dns: T5144: Skip clearing 'PIDFile' in ddclient systemd overrideIndrajit Raychaudhuri
'PIDFile' option in 'Service' isn't multi-value and thus doesn't need to be cleared before overriding.
2023-06-09T3472: Print warning when commit-confirm is run as regular usererkin
2023-06-07Merge pull request #2029 from indrajitr/ddclient-improvement-round-3Christian Breunig
dns: T5144: Refactor smoke tests for dynamic dns operation
2023-06-07Merge pull request #2030 from indrajitr/mdns-improvements-3Christian Breunig
mdns: T5227: Refactor smoke tests for mdns-repeater
2023-06-07Merge pull request #2032 from srividya0208/T5253Christian Breunig
T5253: commit priority: commit error received when mpls config executed with WG
2023-06-07Merge pull request #2031 from jestabro/unsaved-commitsJohn Estabrook
op-mode: T5262: move 'unsaved_commits' to module scope and correct false positive
2023-06-07T5253: commit priority: commit error received when mpls config executed with wgsrividya0208
2023-06-06dns: T5144: Update copyright yearIndrajit Raychaudhuri
2023-06-06dns: T5144: Handle partial conf mode CLI gracefullyIndrajit Raychaudhuri
Prevent failure when the user enters a partial CLI command without any address specified. Also, apply some minor formatting changes.
2023-06-06op-mode: T5262: use module function instead of methodJohn Estabrook
2023-06-06config-mgmt: T5262: move function 'unsaved_commits' to module scopeJohn Estabrook
The function 'unsaved_commits' was added in config_mgmt to warn a user of unsaved commits before commit-confirm, as that entails a possible reboot. As it has other uses and no dependence on the object itself, move to module scope. For general use, add simple check for live image to avoid false positive, due to config migration reformatting.
2023-06-06mdns: T5227: Refactor smoke tests for mdns-repeaterIndrajit Raychaudhuri
Changes: - Load generate 'avahi-daemon.conf' and validate basic configs - Add tests for browsing domains and reflect-filter services
2023-06-06mdns: T5227: Add meaningful constraint messageIndrajit Raychaudhuri
Add meaningful constraint message for service name format
2023-06-06dns: T5144: Refactor smoke tests for dynamic dns operationIndrajit Raychaudhuri
- config_value extraction is more flexible in handling different variation of line endings - more parameter assertions - reduce different mixes of assertEqual and assertTrue were possible
2023-06-06Merge pull request #2028 from dmbaturin/T5262-reboot-warningDaniil Baturin
op mode: T5262: add a warning message about unsaved config changes on reboot and shutdown attempts
2023-06-06op mode: T5262: add a warning message about unsaved config changesDaniil Baturin
on reboot and shutdown attempts
2023-06-06dns: T5144: update conf script nameJohn Estabrook
2023-06-06Merge pull request #2027 from cuongdt1994/patch-1Daniil Baturin
T5260: Do not use deprecated python crypt module
2023-06-06T5260: Do not use deprecated python crypt modulecuongdt1994
Remove the quotes, this will always return the hash for string "password".
2023-06-06Don't use deprecated crypt module.cuongdt1994
2023-06-05Merge pull request #2005 from indrajitr/ddclient-improvement-round-2Christian Breunig
dns: T5144: Modernize dynamic dns operation (round 2)
2023-06-05Merge pull request #2025 from sever-sever/T5258Christian Breunig
T5258: git Actions use ubuntu-22.04 for PR conflicts checker
2023-06-05Merge pull request #2026 from jestabro/openconnect-migration-deleteJohn Estabrook
openconnect: T5259: fix migration logic in delete_value radius|local
2023-06-05openconnect: T5259: fix migration logic in delete_value radius|localJohn Estabrook
Incorrect logic of node deletion now raises error, after T5251.
2023-06-05T5258: git Actions use ubuntu-22.04 for PR conflicts checkerViacheslav Hletenko
git Actions use ubuntu-22.04 instead of deprecated ubuntu-18.04 for PR conflicts checker https://github.com/actions/runner-images/issues/6002
2023-06-04dns: T5144: Streamline ddclient systemd service overrideIndrajit Raychaudhuri
Templatize systemd override for ddclient service and move the generated override files in /run. This ensures that the override files are always generated afresh after boot. Additionally, simplify the systemd override file by removing the redundant/superfluous overrides.
2023-06-04dns: T5144: Add pid and cache config as ddclient globalIndrajit Raychaudhuri
2023-06-04dns: T5144: Relocate ddclient op-mode config files for consistency with ↵Indrajit Raychaudhuri
config path
2023-06-04dns: T5144: Improve old smoketests for dynamic dns operationIndrajit Raychaudhuri
2023-06-04dns: T5144: Update smoketest for dynamic dns operationIndrajit Raychaudhuri
2023-06-04dns: T5144: Relocate ddclient template path for consistency with config pathIndrajit Raychaudhuri
2023-06-04dns: T5144: Apply migration for dynamic dns path updateIndrajit Raychaudhuri
Create migration and bump package version from 0 -> 1 for dynamic dns
2023-06-04dns: T5144: Restrict dualstack for dyndns2 protocol to dyn.comIndrajit Raychaudhuri
ddclient implementation of dualstack for dyndns2 protocol is targeted for dyn.com (dyndns.org) only. Dualstack won't work for other servers supporting dyndns2 protocol (for example, dyn.dns.he.net).
2023-06-03dns: T5144: Modernize dynamic dns operationIndrajit Raychaudhuri
Apply next round of configuration tree updates to 'service dns dynamic' with the following changes: - Migrate `service dns dynamic interface <interface> [use-web]` to `service dns dynamic address <interface>` or `service dns dynamic address web [web-options]` This communicates the intent that dynamic dns IP address is detected in only one way - using the `<interface>` or using an external web request, not both. - When using external web request, (`service dns dynamic address web`), external url is optional (`web-options url`). Ddclient defaults are used when unspecified, - Rename all config `login` to `username` for consistency and also to align better with alternative ddclient backends in consideration. - Apply global 'ipv6-enable' to per service 'ip-version: ipv6'. Selecting usage of IPv4 or IPv6 (or both simultaneously) is now at per service (protocol) level instead of global level. This allows more control on the ability to select IPv4 in some cases and IPv6 in some other cases wherever supported by the underlying ddclient protocol. - While the IP address (and by extension, the detection mechanism) is global, the way it is applied to a particular ddclient protocol depends on whether it supports IPv4 or IPv6 or both. - Related to the above, this also prevents generating incorrect config file (`ddclient.conf`) with multiple global sections leading to an unpredictable behavior of ddclient. - Implement provider (protocol) specific custom tweaks whenever possible (e.g., `zone`, `username`, `server` are not necessary in all cases). - Move service name from a combination of 'protocol' (with protocol config autodetected) and custom (with protocol config specified) to a single 'service' key. This allows for consisent setup of multiple config for the same ddclient protocol (with different options and credentials). This also avoid ambiguity with usual networking term 'protocol' and ddclient specific term 'protocol' (and can change with a move to a different backend). - Apply upfront XML constraints and validations consistently wherever applicable. - RFC2136 specific change: Rename rfc2136 config `record` to `host-name` for consistency. - Cloudflare specific change: While ddclient still supports authenticating with email and global auth key, skipping `username` in config will indicate the intent to use API token authentication (with special 'token' literal as `username`).
2023-06-03T5257: add verify_vrf() check for flow-accountingChristian Breunig