mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-09-29 11:15:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
4,824 Commits 43 Branches 54 Tags
5d9b7a3346a9307e4e5dafba2a3c2f94de73cb89
Commit Graph
76 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Joshua Casey 270594cdb1 Allow users to specify the RunAsUser and RunAsGroup for the kube-cert-agent container 2025-10-20 13:45:46 -05:00
Joshua Casey 9aa3f7496a Update CEL errors for k8s 1.35+ 2025-10-20 08:32:49 -05:00
Joshua Casey 7f14ac7863 Run codegen with new k8s lib versions 2025-10-17 08:37:34 -05:00
Joshua Casey f001df3978 Bump go versions in Dockerfiles 2025-10-17 07:29:52 -05:00
Joshua Casey 2f68041c88 fix lint issues 2025-10-17 07:29:52 -05:00
Joshua Casey 513f1cf7d9 Update net/url as per https://github.com/golang/go/issues/75713 2025-10-17 07:29:52 -05:00
Joshua Casey d68761e144 Bump libs, especially k8s to v0.33.5 2025-10-17 07:29:52 -05:00
Joshua Casey 1c1b3b7f2e Bump golangci-lint to 2.3.0 and fix issues 2025-07-30 10:25:23 -05:00
Joshua CaseyandRyan Richard b387a2cae9 Update release checklist to include checking the overrides.conf file 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2025-07-30 09:21:37 -05:00
Joshua CaseyandRyan Richard af8d7335fd Replace github.com/google/gnostic-models v0.6.9 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2025-07-30 09:21:37 -05:00
Joshua CaseyandRyan Richard 07ed9e95cd Pin k8s.io/kube-openapi to v0.0.0-20250318190949-c8a335a9a2ff 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2025-07-30 09:21:37 -05:00
Joshua Casey 8d56e06f1c Bump golang.org/x/mod from 0.25.0 to 0.26.0 in /hack/update-go-mod 2025-07-30 09:21:37 -05:00
Joshua Casey 17cb4c2ee5 Update unit test malformed jwt error messages due to https://github.com/coreos/go-oidc/compare/v3.14.1...v3.15.0 2025-07-30 09:21:37 -05:00
Joshua Casey 1254f730f2 Revert the Concierge configmap data to inline rendering 2025-05-16 10:43:14 -05:00
Joshua Casey 69281a4620 Fix concierge config deployment manifest 2025-05-16 10:43:14 -05:00
Joshua Casey 02f7ad2fff Run unit tests with CGO_ENABLED=0, which no longer yields ld warnings 2025-05-16 10:43:13 -05:00
Joshua CaseyandRyan Richard b8e7a64afe Bump libs to k8s.io@v0.32.3, add codegen for k8s 1.32, and drop codegen for k8s 1.25 2025-05-12 16:36:46 -07:00
Joshua Casey 6057b0c912 Bump to github.com/google/go-github/v70 2025-03-24 10:13:45 -05:00
Joshua Casey 2845829fb4 Bump to k8s.io@v0.31.7 libs 2025-03-24 10:10:49 -05:00
Joshua CaseyandRyan Richard fc9a261b77 Update golang.org/x/mod in hack/update-go-mod/go.mod 2025-03-06 13:28:00 -08:00
Joshua Casey 7e4330be93 Bump codegen to latest k8s.io versions for 1.29, 1.30, and 1.31 2025-02-03 10:28:43 -06:00
Joshua Casey f5b3e6da93 Bump to k8s.io@v0.31.5 libs 2025-02-03 10:28:42 -06:00
Joshua Casey 5c39374915 Update code for fosite changes 2025-02-03 10:28:42 -06:00
Joshua CaseyandJoshua Casey 1d873be184 Make sure that CEL errors are checked for the appropriate Kube version 2025-01-27 10:46:55 -06:00
Joshua CaseyandJoshua Casey 5a0d6eddb1 Make sure each FederationDomain has a unique name, and skip CEL tests for old K8s versions 2025-01-27 10:46:55 -06:00
Joshua CaseyandJoshua Casey 31b45525ce Remove deprecated CredentialIssuer.status.kubeConfigInfo 2025-01-27 10:46:55 -06:00
Joshua CaseyandJoshua Casey 430c73b903 FederationDomain.spec.issuer must now be an HTTPS URL 2025-01-27 10:46:55 -06:00
Joshua CaseyandJoshua Casey cc1befbc57 Allow for multiple error messages 2025-01-27 10:46:55 -06:00
Joshua CaseyandJoshua Casey 68a0ad4112 Extract common prefix from error messages 2025-01-27 10:46:55 -06:00
Joshua Casey 7e43aa4e12 Bump dependencies and codgen 2025-01-24 13:56:57 -06:00
Joshua Casey f441714f93 Bump codegen for 1.31, 1.30, and 1.29 2024-12-26 11:31:19 -06:00
Joshua Casey fa9ddf48d5 Pin k8s.io dependencies to v0.31.4 2024-12-20 15:39:26 -06:00
Joshua Casey b8a9c4d1e5 Bump all dependencies 2024-12-20 15:38:57 -06:00
Joshua CaseyandRyan Richard 87640ca54a Callback endpoint emits audit log with authorizeID even when code param not found 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2024-12-09 12:47:54 -06:00
Joshua Casey 28e22d7dd2 Update error text assertion due to change in ory/fosite 
- https://github.com/ory/fosite/commit/db74aa7abd9f22deb0d6779a6870c1a65445f298
 2024-12-02 11:08:30 -06:00
Joshua Casey 9cfbbb541a Standardize casing in Dockerfiles 2024-12-02 10:00:39 -06:00
Joshua Casey c803a182be Allow override of audit.log_usernames_and_groups for local debugging 2024-11-27 13:53:02 -06:00
Joshua Casey bc73505e35 Easily enable kind audit logs with ENABLE_AUDIT_LOGGING=true ./hack/kind-up.sh 2024-11-27 13:53:02 -06:00
Joshua Casey 0a28c818ad Small fixes for integration tests 2024-11-27 13:53:02 -06:00
Joshua Casey ce2dcbdbb3 simplify godoc 2024-11-27 13:53:02 -06:00
Joshua Casey c7e9ee1c61 Backfill unit tests for paramsSafeToLog 2024-11-27 13:53:02 -06:00
Joshua Casey 51c86795af Backfill unit tests for cmd/pinniped/cmd/audit_id.go 2024-11-27 13:53:02 -06:00
Joshua Casey 8dffd60f0b Backfill unit tests for audit logging from the CLI 2024-11-27 13:53:02 -06:00
Joshua CaseyandRyan Richard 60bd118a9c pinniped CLI should print the audit-ID in certain error cases 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2024-11-27 13:53:02 -06:00
Joshua Casey b69507f7f3 Add generic audit integration test 2024-11-27 13:53:02 -06:00
Joshua Casey f388513145 resolve TODO by adding docs 2024-11-27 13:53:02 -06:00
Joshua Casey de7781b7f9 Use correct caller when generating audit events 2024-11-27 13:53:02 -06:00
Joshua Casey 611de03e01 Add audit event 'Incorrect Username Or Password' to auth_handler and audit event 'Using Upstream IDP' to callback_handler 2024-11-27 13:53:01 -06:00
Joshua Casey de722332b1 Add audit logging to post_login_handler 2024-11-27 13:53:01 -06:00
Joshua Casey 37e12b4024 Start backfilling some audit unit tests in post_login_handler 2024-11-27 13:53:01 -06:00
Joshua Casey 76f6b725b8 Fix some rebase conflicts 2024-11-27 13:53:01 -06:00
Joshua Casey f9e1dd4bec Backfill unit tests for garbage_collector audit logging 2024-11-27 13:53:01 -06:00
Joshua CaseyandRyan Richard f4f393e5de Audit event 'HTTP Request Completed' will now log the location with err, error, and error_description query parameters 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2024-11-27 13:53:01 -06:00
Joshua CaseyandRyan Richard 2db5dda266 Add last audit log unit tests to auth_handler 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2024-11-27 13:53:01 -06:00
Joshua Casey 18d3ab3d15 The 'HTTP Request Parameters' audit event now logs params as a JSON object 2024-11-27 13:53:01 -06:00
Joshua Casey dc6faa33bb Log params to token_handler endpoint even during error cases 2024-11-27 13:53:01 -06:00
Joshua Casey 0d22ae2c1a Fix lint and unit test compilation 2024-11-27 13:53:01 -06:00
Joshua Casey 362d982906 Start to backfill some audit unit tests for the token_handler 2024-11-27 13:53:01 -06:00
Joshua Casey 369316556a Add configuration to audit internal endpoints and backfill unit tests 2024-11-27 13:53:01 -06:00
Joshua Casey cf4b29de4b Clarify docs 2024-11-27 13:53:00 -06:00
Joshua Casey 09ca7920ea Extract testutil helper function 2024-11-27 13:53:00 -06:00
Joshua Casey 9994e033b2 Add audit event tests for login_handler 2024-11-27 13:53:00 -06:00
Joshua Casey dd56f2b47f Add audit event tests for callback_handler 2024-11-27 13:53:00 -06:00
Joshua Casey dd42f35db0 plog.TestLogger returns a buffer that holds the logs 
# Conflicts:
#	internal/controller/apicerts/certs_expirer_test.go
#	internal/plog/plog_test.go
#	internal/plog/testing.go
#	pkg/oidcclient/login_test.go
 2024-11-27 13:53:00 -06:00
Joshua Casey a67af9455b Refactor: don't copy the loop variable in test loops 2024-11-27 13:53:00 -06:00
Joshua Casey d729c82f84 fix lint 2024-11-27 13:53:00 -06:00
Joshua CaseyandRyan Richard 44e218194b Add 'AuthorizeID From Parameters' audit logs to the /callback and /login endpoints 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2024-11-27 13:53:00 -06:00
Joshua Casey bf1e37f149 Use a helper to verify audit messages 2024-11-27 13:53:00 -06:00
Joshua CaseyandRyan Richard aee56c388f Check the sessionID as well 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2024-11-27 13:53:00 -06:00
Joshua Casey fd5a10bee7 WIP: Add audit event when upstream redirect occurs and backfill tests 2024-11-27 13:53:00 -06:00
Joshua Casey b20e890f15 Add testutil.RequireLogLines to verify multiple log lines at once 2024-11-27 13:53:00 -06:00
Joshua Casey f3c9be07c0 Bump dependencies 2024-11-08 14:15:05 -06:00
Joshua Casey 0c131f11f8 plog.TestLogger returns a buffer instead of taking one in 2024-11-07 17:46:01 -06:00
Joshua Casey 8a6c64095d Pin sigs.k8s.io/structured-merge-diff/v4s to the version used in k8s.io/apimachinery@v0.31.2 2024-11-05 09:05:14 -06:00
Joshua Casey 590f001f17 Run go generate with new version of mock library 2024-10-23 09:09:41 -05:00
Joshua Casey 01c2377de0 Refactor tests to use a table 2024-09-24 14:45:07 -05:00