7550 Commits

Author SHA1 Message Date
dependabot[bot] eb3da979e3 Build(deps): bump docker/setup-buildx-action from 3 to 4 (#3903)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-16 09:14:21 +05:30
dependabot[bot] 986a4cdc30 Build(deps): bump docker/login-action from 3 to 4 (#3904)
Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-16 09:13:33 +05:30
Vishal Dalwadi dd96135e78 fix(go): reset okta-specific settings on remove idp integration; (#3912) 2026-03-13 12:11:47 +05:30
Abhishek Kondur f04e63e910 Merge pull request #3911 from gravitl/master
Master
2026-03-13 10:02:40 +05:30
Abhishek Kondur fac0473997 Release v1.5.0 (#3909)
* fix(go): use database name from config;

* fix(go): check if user platform role is changing;

---------

Co-authored-by: VishalDalwadi <dalwadivishal26@gmail.com>
2026-03-13 10:02:05 +05:30
Vishal Dalwadi fda970bafb Merge pull request #3891 from gravitl/NM-247
NM-247: Users should have only one config across GWs in a network
2026-03-12 20:38:15 +05:30
Abhishek Kondur 22ec6e6e38 Merge pull request #3899 from gravitl/fix/release-v1.5.0-user-update
Fix(v1.5.0): check if user platform role is changing
2026-03-06 16:44:46 +04:00
VishalDalwadi 8422933cfb fix(go): check if user platform role is changing; 2026-03-06 16:09:51 +05:30
Abhishek Kondur e1f0a26c20 Merge pull request #3896 from gravitl/fix/release-v1.5.0-ch-db-name
Fix (v1.5.0): use database name from config
2026-03-05 10:31:48 +04:00
VishalDalwadi 64ef61f711 fix(go): use database name from config; 2026-03-05 11:44:49 +05:30
Abhishek Kondur f5e830b69c Merge pull request #3893 from gravitl/master
Master
2026-03-04 10:26:10 +04:00
Abhishek Kondur 8de81263c0 Merge pull request #3892 from gravitl/release-v1.5.0
Release v1.5.0
2026-03-04 10:18:27 +04:00
Abhishek Kondur 7bcc1613a5 Merge pull request #3890 from gravitl/NM-258
NM-258: separate Ui and client api for delete host, verify client intended calls
2026-03-03 16:45:21 +04:00
abhishek9686 0c4d431df2 NM-258: fix node verification 2026-03-03 16:42:34 +04:00
abhishek9686 56756bdfb5 Merge branch 'NM-258' of https://github.com/gravitl/netmaker into NM-258 2026-03-03 15:55:27 +04:00
abhishek9686 ecda4c1ef6 NM-258: separate Ui and client api for delete host 2026-03-03 15:55:13 +04:00
Abhishek Kondur 0d938931c0 Merge pull request #3887 from gravitl/NM-258
NM-258: resolve SQL injection, insufficient host authorization, and only allow superadmin to shutdown/restart the restart via api
2026-03-03 14:04:23 +04:00
Abhishek Kondur 6552ae8167 Merge branch 'release-v1.5.0' into NM-258 2026-03-03 13:29:41 +04:00
abhishek9686 1d732658aa NM-258: rm usused extclient HA api 2026-03-03 12:05:03 +04:00
abhishek9686 f4c6cecee2 NM-258: rm usused extclient HA api 2026-03-03 12:02:04 +04:00
abhishek9686 c344f54ce1 NM-258: add host claim verfication to token validation 2026-03-03 01:12:29 +04:00
Abhishek Kondur 810699c3e4 Merge pull request #3888 from gravitl/NM-259
v1.5.0: update jit approval link on saas
2026-03-02 15:17:50 +04:00
abhishek9686 8e53267dd0 NM-259: update saas nmui links 2026-03-02 15:15:09 +04:00
abhishek9686 49edfaf94e v1.5.0: update jit approval link on saas 2026-03-02 15:10:49 +04:00
Abhishek Kondur e9675343a1 NM-241: Simplify grafana and Prometheus Setup, install script dir (#3868)
* NM-241: add metrics secret to install script

* NM-241: add install directory, download grafana files

* NM-241: update exporter setup

* NM-241: update exporter env vars

* NM-241: update volume

* NM-241: update promethues and grafana volumes

* NM-241: remove caddy domain for prom

* NM-241: rm graph grafana dashboard

* NM-241: add container name to prom and grafana

* NM-241: avoid creating new sub install folders
2026-03-02 11:23:48 +04:00
Abhishek Kondur b5e6ca3e4c Merge pull request #3878 from gravitl/NM-256-v1.5.0-patch
v1.5.0: DB optimisations, Add Postgresql connection pool limits, add SSO cache cleanup hook
2026-02-27 13:51:16 +04:00
Abhishek Kondur 60fa191fad Merge pull request #3885 from gravitl/fix/remove-query-unescape
Remove query unescape
2026-02-27 10:13:08 +04:00
VishalDalwadi 24bcea4d5a fix(go): remove query unescape; 2026-02-26 22:20:24 +05:30
abhishek9686 5617d97ce6 NM-258: hide extclient private keys in list api 2026-02-26 00:45:24 +04:00
abhishek9686 c23a7b9ea1 NM-258: restrict server shutdown to only superadmin 2026-02-26 00:02:27 +04:00
abhishek9686 168ef57faf NM-258: avoid admin update of superadmin of other user 2026-02-25 23:54:56 +04:00
Abhishek Kondur 4be7f8cff0 Merge pull request #3883 from gravitl/NM-261
NM-261: skip extra allowed ips for disabled extclients
2026-02-25 18:26:52 +04:00
abhishek9686 f5c2d52066 NM-261: skip extra allowed ips for disbaled extclients 2026-02-25 18:25:06 +04:00
Abhishek Kondur 1d59d7d45c Merge pull request #3881 from gravitl/NM-251
NM-251: add host to existing networks when set as default
2026-02-25 11:19:16 +04:00
abhishek9686 6015bc9c9a NM-251: fix default host check 2026-02-25 11:01:46 +04:00
Abhishek Kondur 5b8a5bccb5 Merge pull request #3877 from gravitl/master
Master
2026-02-25 09:49:00 +04:00
VishalDalwadi 0a76d6ce75 feat(go): add check for whether domain is ad domain; 2026-02-24 20:14:40 +05:30
abhishek9686 6f8e60beee NM-251: skip if network has auto join disabled 2026-02-24 15:27:01 +04:00
abhishek9686 a66e00939f NM-251: perform default host operation on update if set 2026-02-24 15:20:00 +04:00
abhishek9686 32478bd6e0 NM-258: passed as a bind parameter to statement.Exec(key) instead of being interpolated into the SQL string, which prevents SQL injection 2026-02-24 01:23:40 +04:00
abhishek9686 99c2d2d8d2 NM-258: fix func comment 2026-02-24 01:08:33 +04:00
abhishek9686 5309aa70d4 NM-258: fix host authrize func, check for token validity 2026-02-24 00:51:15 +04:00
VishalDalwadi 582d9b97da feat(go): pass nameservers to netdesk; 2026-02-23 14:00:47 +04:00
VishalDalwadi 31e804b47a feat(go): pass nameservers to netdesk; 2026-02-23 13:57:03 +04:00
abhishek9686 ad3af6ee7c NM-256: fix DB performance degradation with large user base and Entra IDP
- Replace full table scan in FetchRecord with indexed single-key lookup
      (SELECT WHERE key = ?) for PostgreSQL, SQLite, and RQLite backends
    - Add in-memory user cache (gated behind CACHING_ENABLED) to eliminate
      DB round-trips on the auth hot path (GetUser called per API request)
    - Configure PostgreSQL connection pool limits (max open/idle conns,
      conn lifetime) to prevent connection churn under load
    - Add periodic cleanup of expired SSO state entries to prevent
      unbounded table growth
    - Route GitHub OAuth user rename through standard logic functions
      to keep user cache consistent
2026-02-23 13:56:50 +04:00
Abhishek Kondur d64f1c1638 Merge pull request #3871 from gravitl/release-v1.5.0
Release v1.5.0
2026-02-23 13:54:28 +04:00
Abhishek Kondur a3fde5ab2f Merge pull request #3870 from gravitl/NM-244-auto-relay
NM-244: reset auto relay on disconnect
2026-02-19 18:55:13 +04:00
Abhishek Kondur 2ed7fbdea7 Merge pull request #3869 from gravitl/NM-238
v1.5.0: fix jit email duplication
2026-02-18 17:50:51 +04:00
abhishek9686 cc0982e456 v1.5.0: remove duration field 2026-02-18 16:00:54 +04:00
abhishek9686 1f340641cb v1.5.0: allow network admins to approve/deny jit reqs 2026-02-18 15:59:19 +04:00