mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-08-29 20:27:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
2,479 Commits 27 Branches 54 Tags
1c3545e2340f856bc4f99cfdcd2147b14da191ce
Commit Graph
2479 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Matt Moyer c27d02a929 Fix a typo on the Project Scope page. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-18 13:48:12 -06:00
Margo CrawfordandAndrew Keesler 4dbd8c9cae Update Concierge-only demo for v0.3.0 release 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-12-18 13:06:09 -05:00
Ryan Richard 1056cef384 Sync garbage collector controller less often by adjusting its filters 
- Only sync on add/update of secrets in the same namespace which
  have the "storage.pinniped.dev/garbage-collect-after" annotation, and
  also during a full resync of the informer whenever secrets in the
  same namespace with that annotation exist.
- Ignore deleted secrets to avoid having this controller trigger itself
  unnecessarily when it deletes a secret. This controller is never
  interested in deleted secrets, since its only job is to delete
  existing secrets.
- No change to the self-imposed rate limit logic. That still applies
  because secrets with this annotation will be created and updated
  regularly while the system is running (not just during rare system
  configuration steps).
 2020-12-18 09:36:28 -08:00
Andrew Keesler 40d93ff33b site/content/docs/architecture.md: another coat of paint with Supervisor updates 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-12-18 09:39:36 -05:00
Andrew Keesler 1af06bbcc9 De-dup markdown docs by deleting them in site/ tree 
I'm not sure if these docs are used anywhere in our website, but I don't think
that they are. I'm assuming someone or something will yell if these should not
be deleted. These docs also live at the root of the repo, and the duplicate
versions are already drifting out of sync from one another.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-12-18 08:11:14 -05:00
Ryan RichardandGitHub 6c210b67d4 Merge pull request #301 from vmware-tanzu/typed-secrets 
Put a Type on all of the Secrets that we create in the supervisor
v0.3.0 		2020-12-17 17:42:20 -08:00
Ryan RichardandGitHub 3a4405659e Merge branch 'main' into typed-secrets 2020-12-17 17:42:04 -08:00
aram priceandRyan Richard 187bd9060c All FederationDomain Secrets have distinct Types 
Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-12-17 17:07:38 -08:00
Margo Crawford 2e191084b0 Miscellaneous wording changes 2020-12-17 16:42:45 -08:00
Matt MoyerandGitHub 7a98900b28 Merge pull request #302 from mattmoyer/switch-registry-references 
Move our main image references to the VMware Harbor registry.
 2020-12-17 18:23:12 -06:00
Margo Crawford 28e23e14b5 Demo landing page 2020-12-17 16:08:51 -08:00
Margo Crawford 5f2807e693 Updates to the architecture page. 2020-12-17 15:55:05 -08:00
Matt Moyer e0b94f4780 Move our main image references to the VMware Harbor registry. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 17:51:09 -06:00
aram price 587cced768 Add extra type info where SecretType is used 2020-12-17 15:43:20 -08:00
Ryan Richardandaram price 50964c6677 Supervisor CSRF Secret has unique Type 
Signed-off-by: aram price <pricear@vmware.com>
 2020-12-17 15:30:26 -08:00
Matt MoyerandGitHub 81eb0735d1 Merge pull request #299 from mattmoyer/update-go-dependencies 
Update dependencies before v0.3.0 release.
 2020-12-17 17:28:40 -06:00
Matt Moyer c7931bc6d5 Remove our main module dependency on golangci-lint. 
We will still pin this in CI via an image dependency.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 17:01:32 -06:00
Ryan RichardandAram Price b27e3e1a89 Put a Type on the Secrets that we create for FederationDomain JWKS 
Signed-off-by: Aram Price <pricear@vmware.com>
 2020-12-17 14:48:49 -08:00
Matt Moyer 8db9331fed Update ExpectedAuthorizeCodeSessionJSONFromFuzzing. 
We stared at this very carefully and we don't think there are any structural changes. Maybe something small happened to get the RNG off by one?

Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 16:31:08 -06:00
Matt Moyer 3e15e184ef Update test assertions related to spf13/cobra. 
It now correctly prints errors to stderr (https://github.com/spf13/cobra/pull/894).

Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 16:31:08 -06:00
Matt Moyer 6a457466df Update generated k8s code for 1.19.5. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 16:31:08 -06:00
Matt Moyer 3a81fbd1b4 Update fosite error usage. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 16:31:08 -06:00
Matt Moyer 421c17c421 Update all modules. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 16:31:08 -06:00
Ryan RichardandGitHub 780d236d89 Merge pull request #300 from vmware-tanzu/even-more-opc-renames 
Even more "op" and "opc" local variable renames
 2020-12-17 13:51:54 -08:00
Aram PriceandRyan Richard 55483b726b More "op" and "opc" local variable renames 
Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-12-17 13:49:53 -08:00
Andrew KeeslerandMargo Crawford 157d041b6a README.md: first draft of Supervisor additions 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2020-12-17 15:36:33 -05:00
Ryan RichardandGitHub 32602f579b Merge pull request #298 from vmware-tanzu/more-opc-rename 
Rename all "op" and "opc" usages
 2020-12-17 12:31:52 -08:00
Ryan RichardandGitHub 65e7df1417 Merge branch 'main' into more-opc-rename 2020-12-17 12:10:19 -08:00
Ryan RichardandAram Price b96d49df0f Rename all "op" and "opc" usages 
Signed-off-by: Aram Price <pricear@vmware.com>
 2020-12-17 11:34:49 -08:00
Margo CrawfordandAndrew Keesler 152838e998 CONTRIBUTING.md: add missing integration test dependencies 
Also alphabetize dependencies because sorting wins.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-12-17 13:59:23 -05:00
Matt MoyerandGitHub 9183c3897f Merge pull request #281 from mattmoyer/upgrade-dex 
Upgrade the Dex we use for local testing to v2.27.0.
 2020-12-17 12:50:36 -06:00
Andrew KeeslerandMargo Crawford b009cee877 Add Margo and Mo as maintainers of Pinniped 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2020-12-17 13:37:20 -05:00
Matt Moyer 41832369fd Upgrade the Dex we use for local testing to v2.27.0. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 12:04:09 -06:00
Matt MoyerandGitHub cc5cb394e0 Merge pull request #143 from enj/enj/i/cache_mutation_detector_unit 
Enable cache mutation detector in unit tests
 2020-12-17 10:09:02 -06:00
Matt Moyer b60542f0d1 Clean this test up a trivial amount using require.Implementsf(). 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-17 08:38:16 -06:00
Monis KhanandMatt Moyer dc8e7a2f39 Enable cache mutation detector in unit tests 
Signed-off-by: Monis Khan <mok@vmware.com>
 2020-12-17 08:38:15 -06:00
Matt MoyerandGitHub 34e6e7567f Merge pull request #295 from ankeesler/fix-secret-status 
Only set single secret status field in FederationDomainSecretsController
 2020-12-17 08:26:23 -06:00
Andrew Keesler 04d54e622a Only set single secret status field in FederationDomainSecretsController 
This implementation is janky because I wanted to make the smallest change
possible to try to get the code back to stable so we can release.

Also deep copy an object so we aren't mutating the cache.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-12-17 07:41:53 -05:00
Ryan Richard 4c6e1e5fb3 supervisor_login_test.go: wait for the /jwks.json endpoint to be ready 
- Also fail in a more obvious way if the token exchanged failed by
  adding an assertion about its status code
 2020-12-16 17:59:39 -08:00
Ryan Richard b2b906f4fe supervisor_discovery_test.go: make test timeouts longer to avoid flakes 2020-12-16 15:13:02 -08:00
Margo CrawfordandGitHub 40586b255c Merge pull request #293 from vmware-tanzu/rename-oidcprovider-and-upstreamoidcprovider 
Rename OIDCProvider -> FederationDomain and UpstreamOIDCProvider -> OIDCIdentityProvider
 2020-12-16 14:58:33 -08:00
Margo CrawfordandRyan Richard 196e43aa48 Rename off of main 
Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-12-16 14:27:09 -08:00
Matt MoyerandGitHub fbe1a202c2 Merge pull request #283 from vmware-tanzu/username-and-subject-claims 
Adjust subject and username claims
 2020-12-16 15:23:34 -06:00
Matt MoyerandGitHub 7dae166a69 Merge branch 'main' into username-and-subject-claims 2020-12-16 15:23:19 -06:00
Matt MoyerandGitHub 72ce69410e Merge pull request #273 from vmware-tanzu/secret-generation 
Generate secrets for Pinniped Supervisor
 2020-12-16 15:22:23 -06:00
Matt MoyerandGitHub 7bb0d649c0 Merge pull request #290 from mattmoyer/rename-token-exchange-scope 
Rename the "pinniped.sts.unrestricted" scope to "pinniped:request-audience".
 2020-12-16 15:22:05 -06:00
Matt MoyerandGitHub c110e173ac Merge pull request #286 from mattmoyer/upgrade-debian-base-image 
Upgrade base images to Debian 10.7-slim.
 2020-12-16 15:21:31 -06:00
Matt Moyer 111f6513ac Upgrade base images to Debian 10.7-slim. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-16 15:16:31 -06:00
Matt Moyer 5367fd9fcb Trigger CI 2020-12-16 15:13:28 -06:00
Andrew Keesler 095ba14cc8 Merge remote-tracking branch 'upstream/main' into secret-generation 2020-12-16 15:40:34 -05:00