openziti / ziti

The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network @OpenZiti
https://openziti.io
Apache License 2.0
2.85k stars 159 forks source link

refinements to ops verify-traffic to integrate and work with ziti edge login #2513

Closed dovholuknf closed 3 weeks ago

dovholuknf commented 3 weeks ago

the existing ziti ops verify-traffic were not integrated with the ziti edge login functionality. Jens needs/wants an example of how to integrate better with ziti login but apparently we haven't done that yet when using the edge-apis library.

This should provide a mechanism to obtain a new management client from the edge-apis library while integrating with ziti edge login as well. This will allow not only for updb style login but also enables cert/key/file-based login:

ziti ops verify-traffic --cleanup --file testadmin.json

Using an identity file greatly simplifies the command and is more secure than shipping a user/pwd. example: image