Sebastien Blot
e7505f5b2e
up
2023-11-27 13:14:40 +01:00
Sebastien Blot
b1653aea63
up
2023-11-27 10:43:32 +01:00
mmetc
15542b78fb
refact BulkDeleteDecisions ( #2308 )
...
Code cleanup and de-duplication.
2023-11-26 22:30:03 +01:00
mmetc
b164373997
update dependencies: k8s apiserver, docker and related ( #2476 )
2023-11-24 16:20:39 +01:00
Sebastien Blot
946fbbb8a2
up
2023-11-24 15:57:49 +01:00
mmetc
ffcab0b2bc
Refactor hub management and cscli commands ( #2545 )
2023-11-24 15:57:32 +01:00
mmetc
32e9eb4be4
Minor dependency updates ( #2505 )
...
* update AlecAivazis/survey
* update Masterminds/semver
* update Masterminds/sprig
* update alexliesenfeld/health
* update golang.org/x/net
2023-11-24 15:30:54 +01:00
mmetc
76d4bc7788
cscli bouncers: increase key size, deprecate and ignore --length option ( #2531 )
...
the switch to base64 made the keys shorter (24 characters), this PR increases their size to 32 bytes, 42 chars once encoded
Also deprecate the --length option, users can already provide a key
2023-11-24 15:01:13 +01:00
mmetc
ec199162dc
iso8601: use yyyy-mm-dd in log timestamps instead of dd-mm-yyyy ( #2564 )
...
Co-authored-by: Thibault "bui" Koechlin <thibault@crowdsec.net>
2023-11-24 14:59:28 +01:00
Thibault "bui" Koechlin
1dcf9d1ae1
Improved expr debugger ( #2495 )
...
* new expr debugger
---------
Co-authored-by: mmetc <92726601+mmetc@users.noreply.github.com>
2023-11-24 11:10:54 +01:00
Sebastien Blot
f77d9e043a
up
2023-11-23 14:51:05 +01:00
mmetc
7ffa0cc787
docker: replace cp -an with rsync to allow bind-mount of files in /etc/crowdsec ( #2611 )
...
fix for https://github.com/crowdsecurity/crowdsec/issues/2480
2023-11-23 11:08:14 +01:00
blotus
ec53c672dc
Kafka acquisition: warn if no consumer group id and allow to read from a specific partition ( #2612 )
2023-11-23 10:02:53 +01:00
Sebastien Blot
118da5b423
up
2023-11-23 09:56:58 +01:00
alteredCoder
710d8a438a
oups
2023-11-22 16:27:22 +01:00
alteredCoder
b6899e0c10
add more debug when unauthorized
2023-11-22 16:25:20 +01:00
alteredCoder
dd6e539717
fix hubtest coverage and some opti
2023-11-22 15:41:26 +01:00
Sebastien Blot
56c616f70d
delete cscli/waap_configs.go
2023-11-22 15:00:15 +01:00
lperdereau
92f923cfa8
Loki integration #2 ( #2306 )
...
* Add support for loki datasource
---------
Co-authored-by: Mathieu Lecarme <mathieu@garambrogne.net>
Co-authored-by: Sebastien Blot <sebastien@crowdsec.net>
Co-authored-by: Thibault "bui" Koechlin <thibault@crowdsec.net>
2023-11-22 13:31:39 +01:00
Sebastien Blot
ef9b6acbf8
use generic implem for cscli waap-configs
2023-11-22 10:54:48 +01:00
he2ss
947b247a40
kafkaAcquisition: add more debug ( #2609 )
...
* kafkaAcquisition: add more debug
2023-11-22 09:35:58 +01:00
blotus
d7ef51e6ba
properly update the cs_syslogsource_parsed_total metric ( #2608 )
2023-11-22 09:04:23 +01:00
Sebastien Blot
5abc8e0e14
merge hub-1.5.6
2023-11-21 17:46:54 +01:00
mmetc
2c652ef92f
pkg/cwhub documentation ( #2607 )
...
* pkg/cwhub: package documentation
* Don't repeat local state in "cscli... inspect"
* lint
* use proper name of the hub item instead of the filename for local items
* hub update: avoid reporting local items as tainted
2023-11-21 17:43:10 +01:00
Sebastien Blot
9580f8e14d
merge hub-1.5.6
2023-11-21 17:28:10 +01:00
bui
e4b92af78c
support dedicated waap rules testing in cscli hubtest
2023-11-21 15:24:51 +01:00
mmetc
1509c2d97c
pkg/cwhub refact ( #2606 )
...
* Separate Item and ItemState; fill BelongsToCollections with all ancestors and for uninstalled items too
* fix "installed parents" check when removing an item
* keep BelongsToCollections in order (case insensitive)
2023-11-21 11:06:59 +01:00
mmetc
7b1074f0cb
Refact cwhub ( #2603 )
...
* Split RemoteHub.downloadIndex() = Hub.updateIndex() + RemoteHub.fetchIndex()
* Functions safePath(), Item.installPath(), item.downloadPath()
2023-11-20 15:58:42 +01:00
bui
2d01e4680f
do not error if no waap rules are present
2023-11-20 14:25:33 +01:00
Sebastien Blot
4a265ca4af
up
2023-11-20 13:27:46 +01:00
dependabot[bot]
a51bce8f8d
Bump google.golang.org/grpc from 1.56.1 to 1.56.3 ( #2566 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.56.1 to 1.56.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.56.1...v1.56.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-20 11:55:29 +01:00
mmetc
6b317f0723
Refact cwhub: simplify tree scan and dependency checks ( #2600 )
...
* method rename: GetInstalledItemsAsString() -> GetInstalledItemNames()
* use path package
* Comments and method names
* Extract method Item.setVersionState() from Hub.itemVisit()
* refact localSync(), itemVisit() etc.
* fix check for cyclic dependencies, with test
2023-11-20 11:41:31 +01:00
alteredCoder
8173e1ba42
add timeout to auth request
2023-11-20 10:48:21 +01:00
Sebastien Blot
94a378d230
up
2023-11-17 18:07:03 +01:00
bui
017331ca7f
nuclei runner
2023-11-17 15:37:32 +01:00
bui
6718d82765
allow testing of waap rules
2023-11-17 15:37:12 +01:00
bui
9af30e2a3d
simplify a bit
2023-11-17 15:15:29 +01:00
bui
55491be528
typo
2023-11-17 15:14:15 +01:00
Sebastien Blot
0e717cb558
up
2023-11-17 13:47:05 +01:00
Sebastien Blot
d40e9fb760
do not use filepath.Match
2023-11-17 13:45:43 +01:00
alteredCoder
9864d2c459
Add authentication between bouncers and waf
2023-11-16 18:19:45 +01:00
Sebastien Blot
9db48e2110
fix collections install/inspect with waap-{rules,configs}
2023-11-16 17:17:33 +01:00
Sebastien Blot
db40ba7b3b
Merge branch 'hub-1.5.6' into coraza_poc_acquis
2023-11-16 17:12:23 +01:00
mmetc
56ad2bbf98
Refact cwhub: item removal with shared dependencies ( #2598 )
...
* Iterate over sub-items in Remove(), not in disable() -- fix shared dependency issue
* Increase hub download timeout to 2 minutes
2023-11-16 17:00:51 +01:00
mmetc
65473d4e05
Refact cwhub: simplify enable/disable/download ( #2597 )
...
* Extract methods createInstallLink(), removeInstallLink(), simplify
- the result of filepath.Join is already Cleaned
- no need to log the creation of parentDir
- filepath.Abs() only returns error if the current working directory has been removed
* Extract method Item.fetch()
* Replace Create() + Write() -> WriteFile()
2023-11-16 13:05:55 +01:00
mmetc
d9b0d440bf
Refact cwhub ( #2596 )
...
* unused param
* (slightly) simpler ListItems() -> listItems()
* listItems(): always showHeader, deduce showType
ref. https://github.com/crowdsecurity/crowdsec/issues/1068
* simplify Item.disable()
also, .tainted and .installed do not need a default since they are always in the json output now
* Drop unused parameters
2023-11-16 11:09:49 +01:00
mmetc
47eb2e240d
Use go 1.21.4 ( #2595 )
2023-11-16 11:09:13 +01:00
bui
c8af58d1bf
ensure we're sending lapi/capi alert if the request matched some inband rules
2023-11-15 17:46:31 +01:00
mmetc
79d019f9a2
Refact cwhub / sort cscli output, case insensitive ( #2593 )
...
* dead code: unknown localVersion now defaults to "?"
* skip type declaration; whitespace
* sync: next item if invalid cpath
* func tests for install --force and --ignore
* shorter test names
* sort cscli <itemtype> output, with tests
* cscli: refact hub sort code
2023-11-15 16:59:30 +01:00
bui
056c979455
add support for labels to waap rules
2023-11-15 15:08:57 +01:00