Kyle Carberry
22e781eced
chore: add /v2 to import module path ( #9072 )
...
* chore: add /v2 to import module path
go mod requires semantic versioning with versions greater than 1.x
This was a mechanical update by running:
```
go install github.com/marwan-at-work/mod/cmd/mod@latest
mod upgrade
```
Migrate generated files to import /v2
* Fix gen
2023-08-18 18:55:43 +00:00
Spike Curtis
2f46f2315c
fix: fix race in PGCoord at startup ( #9144 )
...
Signed-off-by: Spike Curtis <spike@coder.com >
2023-08-18 09:53:03 +04:00
Jon Ayers
2f6687a475
feat: expose Everyone group through UI ( #9117 )
...
- Allows setting quota allowances on the 'Everyone' group.
2023-08-17 13:25:16 -05:00
Steven Masley
8910f05172
fix: /workspaces should work even if missing template perms ( #9152 )
...
If a user is missing template perms to a workspace, just block reading
that workspace. This is to keep the api consistent, it is not a rbac
enforcement.
This should ublock users reporting this bug that /workspaces returns
nothing when 1 workspace cannot be fully read. We might want to be
able to return missing or unknown fields in our api to account
for this.
2023-08-17 13:22:03 -05:00
Spike Curtis
c7a6d626b4
fix: make PGCoordinator close connections when unhealthy ( #9125 )
...
Signed-off-by: Spike Curtis <spike@coder.com >
2023-08-17 09:36:47 +04:00
Mathias Fredriksson
6fd9975aed
feat(coderd): add coder_app usage stats ( #9001 )
...
Updates #8658
2023-08-16 15:22:00 +03:00
Eric Paulsen
e4c24e05f8
fix: rename group GET request ( #9097 )
...
* fix: group GET req naming
* make: gen
2023-08-15 14:47:08 -04:00
Colin Adler
9d9b330b16
chore: add request body to patch groups openapi spec ( #9101 )
2023-08-15 15:29:15 +00:00
Spike Curtis
41433cd1ec
feat: add terminationGracePeriodSeconds to provisioner chart ( #9048 )
...
* feat: add terminationGracePeriodSeconds to provisioner chart
Signed-off-by: Spike Curtis <spike@coder.com >
* Remove hardcoded 1 minute graceful timeout
Signed-off-by: Spike Curtis <spike@coder.com >
---------
Signed-off-by: Spike Curtis <spike@coder.com >
2023-08-15 08:38:58 +00:00
Colin Adler
344d32b2f1
feat(coderd): expire agents from server tailnet ( #9092 )
2023-08-14 20:38:37 -05:00
Steven Masley
25ce30df36
feat: add azure oidc PKI auth instead of client secret ( #9054 )
...
* feat: add azure oidc PKI auth instead of client secret
* add client cert and key as deployment options
* Custom token refresher to handle pki auth
2023-08-14 17:33:13 -05:00
Dean Sheather
47b8bf6585
feat: update workspace deadline when template policy changes ( #8964 )
2023-08-14 21:16:47 +00:00
Asher
37f9d4b783
feat: add --header-command flag ( #9059 )
...
This allows specifying a command to run that can output headers for
cases where users require dynamic headers (like to authenticate to their
VPN).
The primary use case is to add this flag in SSH configs created by the
VS Code plugin, although maybe config-ssh should do the same.
2023-08-14 12:12:17 -08:00
Dean Sheather
d2f22b063a
fix: move STUN servers into their own regions ( #9030 )
2023-08-11 05:04:17 +10:00
Colin Adler
bc862fa493
chore: upgrade tailscale to v1.46.1 ( #8913 )
2023-08-09 19:50:26 +00:00
Dean Sheather
9941f49056
fix: remove stun nodes from workspace proxy regions ( #8990 )
2023-08-09 09:31:25 +00:00
Dean Sheather
f7a35e0559
chore: add workspace proxies to telemetry ( #8963 )
2023-08-08 18:29:35 +00:00
Steven Masley
f4122fa9f5
feat: add auto group create from OIDC ( #8884 )
...
* add flag for auto create groups
* fixup! add flag for auto create groups
* sync missing groups
Also added a regex filter to filter out groups that are not
important
2023-08-08 11:37:49 -05:00
Steven Masley
5339a31532
fix: remove refresh oauth logic on OIDC login ( #8950 )
...
* fix: do not do oauth refresh logic on oidc login
2023-08-08 10:05:12 -05:00
Colin Adler
0c7ff4fb8a
fix(enterprise): ensure SCIM create user can unsuspend ( #8916 )
2023-08-04 22:03:21 +00:00
Cian Johnston
7224ff2af8
fix(enterprise/replicasync): fix data race in Manager.Regional ( #8910 )
2023-08-04 17:33:05 +01:00
Spike Curtis
cb4989cd8d
feat: add PSK for external provisionerd auth ( #8877 )
...
Signed-off-by: Spike Curtis <spike@coder.com >
2023-08-04 12:32:28 +04:00
Steven Masley
4c1e63aae8
feat: add display_name field to groups ( #8740 )
...
* feat: add display_name field to groups
This is a non-unique human friendly group name for display
purposes. This means a display name can be used instead of
using an environment var to remap groups with OIDC names to
Coder names. Now groups can retain the OIDC name for mapping,
and use a display name for display purposes.
2023-08-02 10:53:06 -05:00
Dean Sheather
cd1e088f7c
feat: add --derp-only flag to wsproxy ( #8850 )
2023-08-03 00:35:06 +10:00
Marcin Tojek
d6e9870209
feat: add "dormant" user state ( #8644 )
2023-08-02 16:31:25 +02:00
Dean Sheather
6b69970d7c
fix: avoid infinite loop in agent derp-map ( #8848 )
2023-08-02 13:18:46 +10:00
Dean Sheather
c575292ba6
fix: fix tailnet netcheck issues ( #8802 )
2023-08-02 01:50:43 +10:00
Marcin Tojek
ddabe9cc7f
feat: improve RBAC preconditions for Insights endpoint ( #8794 )
2023-07-31 13:44:32 +00:00
Colin Adler
4cc270b12b
revert(enterprise): make pgcoord experimental again ( #8797 )
2023-07-28 18:38:32 -05:00
Colin Adler
0b4f333a6f
chore: add http debug support to pgcoord ( #8795 )
2023-07-28 17:59:31 -05:00
Colin Adler
2811ab62d0
chore: fix workspace proxy flake ( #8755 )
2023-07-26 23:50:25 +00:00
Colin Adler
dd2f79995b
chore(tailnet): rewrite coordinator debug using html/template ( #8752 )
2023-07-26 22:54:21 +00:00
Ammar Bandukwala
25e30c6f41
feat(cli): support fine-grained server log filtering ( #8748 )
2023-07-26 16:46:22 -05:00
Colin Adler
6b92abebb9
fix(tailnet): track agent names for http debug ( #8744 )
2023-07-26 18:44:10 +00:00
Dean Sheather
9ffbdc6696
hotfix: fix failed 32-bit builds ( #8741 )
2023-07-26 17:30:47 +00:00
Dean Sheather
2f0a9996e7
chore: add derpserver to wsproxy, add proxies to derpmap ( #7311 )
2023-07-27 02:21:04 +10:00
Steven Masley
2089006fbc
feat!: drop reading other 'user' permission ( #8650 )
...
* feat: drop reading other 'user' permission
Members of the platform can no longer read or list other users.
Resources that have "created_by" or "initiated_by" still retain
user context, but only include username and avatar url.
Attempting to read a user found via those means will result in
a 404.
* Hide /users page for regular users
* make groups a privledged endpoint
* Permissions page for template perms
* Admin for a given template enables an endpoint for listing users/groups.
2023-07-26 10:33:48 -04:00
Colin Adler
f07d2ff68d
fix(enterprise): ensure creating a SCIM user is idempotent ( #8730 )
2023-07-25 17:49:52 -05:00
Steven Masley
de1a7a9210
chore: join user information to workspace_build and template_version ( #8625 )
...
* include minimial user on template version and build
* Add unit test to ensure join is superset
2023-07-25 09:14:38 -04:00
Steven Masley
ac559f101e
fix: handle omitted role sync claim ( #8697 )
...
* fix: handle omitted role sync claim
2023-07-24 15:50:23 -04:00
Steven Masley
f827829afe
feat: synchronize oidc user roles ( #8595 )
...
* feat: oidc user role sync
User roles come from oidc claims. Prevent manual user role changes
if set.
* allow mapping 1:many
2023-07-24 08:34:24 -04:00
Jon Ayers
b47d076756
feat: add deleting_at column to workspaces ( #8333 )
2023-07-20 22:01:11 -05:00
Colin Adler
1cb39fc65d
test: ignore more spurious pgcoord errors ( #8628 )
2023-07-20 19:55:25 +00:00
Dean Sheather
dc8b73168e
feat: add user quiet hours schedule and restart requirement feature flag ( #8115 )
2023-07-20 23:35:41 +10:00
Colin Adler
00b9a3ce58
fix: prevent error log when pgcoord query is canceled ( #8609 )
2023-07-19 16:40:57 -05:00
Steven Masley
aceedefce3
chore: add template_with_user view to include user contextual data ( #8568 )
...
* chore: Refactor template sql queries to use new view
* TemplateWithUser -> Template
* Add unit test to enforce good view
2023-07-19 16:07:33 -04:00
Colin Adler
f8a2bd0f4d
chore: remove duplicate logger name in wsproxy ServerTailnet ( #8604 )
2023-07-19 18:06:26 +00:00
Colin Adler
517fb19474
feat: add single tailnet support to moons ( #8587 )
2023-07-19 11:11:11 -05:00
Colin Adler
cc8d0af027
fix(enterprise): avoid initial license reconfig if feature isn't enabled ( #8586 )
2023-07-19 10:32:29 -05:00
Marcin Tojek
4232a2eb96
feat: add custom docs URL to deployment config ( #8590 )
2023-07-19 08:31:17 -03:00