WEBDIENSTE/NLnetLabs-krill
1
0
Fork 0
mirror of https://github.com/NLnetLabs/krill.git synced 2026-09-20 08:27:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,574 Commits 30 Branches 93 Tags
bb10f00d0e6d34d859e9da2de182a44bb4ca8fbc
Commit Graph
816 Commits
Author SHA1 Message Date
Tim Bruijnzeels bb10f00d0e Force re-issuance of ROAs on upgrade from before 0.9.3-rc2 (#704) 2021-11-05 15:59:17 +01:00
Tim Bruijnzeels 59810f14fa Report correct next update times (#701) 2021-11-05 15:59:17 +01:00
Tim BruijnzeelsGitHubXimon Eighteen
 		61e7fc01e4 Add random jitter to ca publish next update times (#692) 
Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2021-10-20 10:34:27 +02:00
Ximon EighteenandGitHub faf6bd2549 HSM: Support multiple signers (#539) (#674) 
Support multiple signers of different types behind a HSM feature flag, and support in principle selecting which signer to use for which purpose. (#539)
 2021-10-05 14:50:58 +02:00
Tim BruijnzeelsandGitHub 79791c119f Add CLI options for suspend/unsuspend. (#669) 2021-09-23 16:57:19 +02:00
Tim BruijnzeelsandGitHub 30772b6f36 Suspend krill 092 higher only (#670) (PR #672) 2021-09-23 15:57:05 +02:00
Tim Bruijnzeels d21dc2fa0f Simplify map+flatten to use filter instead. 2021-09-16 10:49:24 +02:00
Tim Bruijnzeels 2d82b0d15f Do not allow 0 (or negative) hours for suspend_child_after_inactive_hours 2021-09-16 10:49:24 +02:00
Tim Bruijnzeels 038e66a6b5 Wait after (re)start before suspending children (#665) 2021-09-16 10:49:24 +02:00
Tim Bruijnzeels ce4a140be9 Fix comment. 2021-09-16 10:49:24 +02:00
Tim Bruijnzeels f87fdb3df3 Also suspend children with no known last connection #664 2021-09-16 10:49:24 +02:00
Tim Bruijnzeels af99fcfda3 Synchronize CaStatus and CAs on startup (#662) 2021-09-16 10:49:24 +02:00
Tim Bruijnzeels 8af6398b47 When a CA is removed, remove it from CaStatus as well (#661) 2021-09-16 10:49:24 +02:00
Tim Bruijnzeels b9f9952ac5 Fix (inverse logic) krill_ca_child_state metric. 2021-09-15 13:17:01 +02:00
Tim BruijnzeelsandGitHub 5f4189c6eb Reorganise use statements (#647) 2021-09-13 14:01:40 +02:00
Tim Bruijnzeels 00b97e7377 Remove copied comment. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels cc844c712c Remove redundant clippy allow. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 3cc9547e1e Hide ca-child metrics if there are no CAs with children. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 4eae590e99 Keep child state (active/pending) in status and show in CLI and metrics. (#656) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 5ff136b6fb Show suspended/active state for child CAs. (#656) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 3d0df004ba Reorganise metrics and allow disabling details. (#654) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 3cb3cec512 Use pub Arc<Comfig> in KrillServer for easier access to configuration. (#654) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 6c30c0e24d Postpone cloning CaStatus bits as long as possible. (#655) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels dd02a89b8a Use cache for CaStatus. (#655) 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 656f45518b Change 'repo' to 'ps' in metric - i.e. use 'Publication Server' rather than repo. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 1ebe63e4bc Clarify next planned connection for publication. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 9eaa921720 Consistent capitalisation of CA in metrics help. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels c92dd1869c Clarify unix timestamp in metrics 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels d39d38dd32 Use explicit Timestamp type. 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 7e4467f87a Monitor ca to publication server connections with prometheus. (#650) (#652) 
* Monitor ca to publication server connections with prometheus. (#650)

* Monitor child cas (#653)

* Move BGP announcement metrics into its own scoped section.

* Add comments for metrics

* Monitor child connections using prometheus (#651)

* Fix help text for metric
 2021-09-13 13:32:22 +02:00
Tim Bruijnzeels 56dca5e864 Monitor ca-parent connections with prometheus. (#648) 2021-09-13 13:32:22 +02:00
Tim BruijnzeelsGitHubXimon Eighteen
 		27fd25dcb2 Use async reqwest for openid connect checks (#645) 
PR #646

* cargo update
* Use an enum instead of a trait (prepare to allow async)
* Use async reqwest client for openid connect checks.
* Move extract bearer token function to util::httpclient.

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2021-09-06 13:38:17 +02:00
Tim Bruijnzeels 055b817881 Cargo clippy - rust 1.54 2021-08-30 13:13:20 +02:00
Tim Bruijnzeels 8584efe429 Cargo fmt - rust 1.54 2021-08-30 11:31:35 +02:00
Tim BruijnzeelsandGitHub 12d802a9fc Add unguessable subdir to RRDP snapshot and delta paths. (#515) (#641) 2021-08-30 10:48:08 +02:00
Tim Bruijnzeels 6953fe917f Use explicit functions for 'suspend' and 'unsuspend' rather than a boolean. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 5c90624ffd Restrict ca_refresh_seconds to 10-60 minutes. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 4c554fb78f Change ca_refresh in config to ca_refresh_seconds to be explicit. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 925020f7d6 Formatting 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 40c06a4f9e Remove a child from the child stats when it is removed from the parent ca. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 8c9da393c4 Track 'unsuspended' in its own field for ChildCertificateUpdates. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 3101cf9622 Improved variant documentation. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 412a9eab37 Rename 'inner' to 'issued' for clarity. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels ecbac2d19b Improve clarity of terms. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels b7258e7462 Rename command label for consitency. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels e2bd486d88 Document funtion. 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 4dc54f3a8c Automatically suspend inactive child CAs *if* configured to do so. (#623) 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 48c6557bd3 Unsuspend child CA when it sends a valid RFC 6492 request. (#623) 
(also make tests more deterministic wrt ca refresh)
 2021-08-30 10:47:28 +02:00
Tim Bruijnzeels 319f00081a Add support (and API) for suspending/unsuspending child CAs. (#623) 2021-08-30 10:47:28 +02:00
Tim BruijnzeelsandGitHub 2301c1645e Perform RRDP session reset on startup (if repo is initialized) (#533) (#637) 2021-08-28 08:46:43 +02:00