Commit Graph
4824 Commits
Author SHA1 Message Date
Ryan Richard 981004eec4 Admin kubeconfigs with system:masters can have kubeadm:cluster-admins 2023-12-11 13:05:29 -08:00
Ryan Richard 0332362598 Add more output on failure of TokenCredentialRequest integration tests 2023-12-11 12:09:12 -08:00
Ryan RichardandGitHub f519b271d2 Merge pull request #1810 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-12-11 08:57:12 -08:00
Pinny be7a4f781f Bump dependencies 2023-12-11 09:04:33 +00:00
Ryan RichardandGitHub 0e3c815e9b Merge pull request #1809 from vmware-tanzu/sdump_in_whoami_test
Add more debugging output for when concierge_whoami_test.go fails
2023-12-08 12:43:32 -08:00
Ryan Richard 3b4147f90e Add more debugging output for when concierge_whoami_test.go fails 2023-12-08 10:31:40 -08:00
Ryan RichardandGitHub 3b10cc3097 Merge pull request #1808 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-12-08 09:18:57 -08:00
Pinny d8ec87d0e1 Bump dependencies 2023-12-08 16:17:12 +00:00
Ryan RichardandGitHub cdd38dd55e Merge pull request #1807 from vmware-tanzu/replace_grpc_version
replace version of google.golang.org/grpc
2023-12-07 12:33:30 -08:00
Ryan Richard 236a7cf3fb replace version of google.golang.org/grpc 2023-12-07 10:29:36 -08:00
Ryan RichardandGitHub 3e74b38a95 Merge pull request #1806 from vmware-tanzu/revert_supervisor_disabling_http2
revert the disabling of http2 for the Supervisor OIDC endpoints
2023-12-06 20:33:27 -08:00
Ryan RichardandGitHub a05acadf80 Merge pull request #1594 from vmware-tanzu/jtc/add-ldapsearch-hack-script
Add ldapsearch hack script
2023-12-06 14:02:20 -08:00
Ryan Richard c5d1f380d2 revert the disabling of http2 for the Supervisor OIDC endpoints
Due to the unintended consequence of potentially breaking Ingresses
which were configured to use http2 on their backends.
2023-12-06 13:10:51 -08:00
Ryan Richard 9883b4e236 rename the ldap debugging hack script and add parens to search filters 2023-12-06 12:56:35 -08:00
Ryan Richard 348187d2f4 Enchance and move the ldapsearch hack script 2023-12-06 09:16:16 -08:00
Joshua CaseyandRyan Richard 86ee66d21d Add ldapsearch hack script
[#185658904]
2023-12-06 09:16:16 -08:00
Ryan RichardandGitHub 2198b4820a Merge pull request #1789 from vmware-tanzu/http2
Defensive changes to mitigate potential http2 rapid reset attacks
2023-12-06 09:15:07 -08:00
Ryan Richard 4b7b9e4362 Defensive changes to mitigate potential http2 rapid reset attacks 2023-12-05 14:57:50 -08:00
Ryan RichardandGitHub 70f2bbf4f8 Merge pull request #1804 from vmware-tanzu/upgrade_fosite
Upgrade fosite to the latest commit on their main branch
2023-12-05 14:51:34 -08:00
Ryan Richard 7a3efb9981 change update-go-mod.sh to use head of main for fosite via config file 2023-12-05 11:25:02 -08:00
Ryan Richard e1954b1df9 update session storage version from 5 to 6 due to fosite upgrade
A small part of the session storage changed type in the latest version
of fosite compared to the old version of fosite that we were using.
Just to be safe, update our session storage version to invalidate
any pre-existing sessions upon upgrade of Pinniped.
2023-12-04 14:49:22 -08:00
Ryan Richard 37c2ce53d7 upgrade fosite pkg to latest 2023-12-04 14:49:21 -08:00
Ryan RichardandGitHub 9d3773e58a Merge pull request #1803 from vmware-tanzu/bump_codegen
Update kube-versions.txt and rerun codegen
2023-12-04 14:48:37 -08:00
Ryan Richard aa651973fc Update kube-versions.txt and rerun codegen 2023-12-04 12:11:37 -08:00
Ryan RichardandGitHub 745852ef2e Merge pull request #1801 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-12-04 11:58:04 -08:00
Ryan Richard ca5ad85bbd Switch from gopkg.in/square/go-jose.v2 to github.com/go-jose/go-jose/v3
Made the switch wherever possible, but since fosite still uses the old
gopkg.in/square/go-jose.v2 there was one test where we still need to use
it as a direct dependency.
2023-12-04 11:05:12 -08:00
Ryan Richard 8296093beb Increase fudge factor in tokenclient_test.go due to CI failures 2023-12-04 10:04:05 -08:00
PinnyandRyan Richard 6d79fe5f4c Bump dependencies 2023-12-04 09:40:51 -08:00
Ryan RichardandGitHub ef6369d71e Merge pull request #1733 from vmware-tanzu/jtc/issue-1700/impersonation-proxy-token-request-api
The Impersonation Proxy should use a short-lived token from the `TokenRequest` API
2023-12-01 11:48:52 -08:00
Ryan Richard 7616799adb Minor refactors in legacy SA token Secret cleanup controller 2023-11-30 16:40:21 -08:00
Ryan Richard dea3513125 Add test for when no SA token is cached in impersonator_test.go 2023-11-30 15:55:27 -08:00
Ryan Richard 5f4645d505 Improve unit tests in tokenclient_test.go
Also fix a linter error and rename some new files.
2023-11-30 13:29:52 -08:00
Joshua CaseyandRyan Richard c439cc03a2 WIP for a tokenClient.Start() unit test 2023-11-30 09:57:57 -08:00
Joshua CaseyandRyan Richard 2603bbfcd6 Do not use long-lived service account tokens in secrets
Co-authored-by: Ryan Richard <richardry@vmware.com>
2023-11-30 09:57:57 -08:00
Ryan RichardandGitHub dc1d563549 Merge pull request #1793 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-11-29 12:58:38 -08:00
Pinny 416a66f68a Bump dependencies 2023-11-29 09:02:04 +00:00
Joshua CaseyandGitHub 8f2da915aa Merge pull request #1791 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-11-17 14:00:05 -06:00
Pinny aad74158ba Bump dependencies 2023-11-17 09:02:40 +00:00
Joshua CaseyandGitHub 98dde187bb Merge pull request #1788 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-11-16 12:14:21 -06:00
Joshua CaseyandRyan Richard ab71450c69 Use correct reference for pinned dependencies 2023-11-16 09:08:42 -08:00
Pinny a4789e2b2c Bump dependencies 2023-11-16 17:07:36 +00:00
Ryan RichardandGitHub 1c2829a326 Merge pull request #1779 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-11-15 15:54:45 -08:00
PinnyandRyan Richard 9be8cd40d2 Bump dependencies 2023-11-15 15:02:54 -08:00
Ryan RichardandGitHub 90a3538806 Merge pull request #1780 from vmware-tanzu/jtc/lightly-standardize-import-aliases
Lightly standardize import aliases
2023-11-15 15:02:01 -08:00
Joshua Casey b68e7f3e9e Lightly standardize import aliases 2023-11-15 13:52:17 -06:00
Ben PetersenandGitHub 4f15fc2123 Merge pull request #1776 from vmware-tanzu/ben/dockerfile-image-args
Make Dockerfile base images configurable
2023-11-15 14:33:50 -05:00
Benjamin A. Petersen 2bc6c15d25 Make Dockerfile base images configurable 2023-11-15 14:32:48 -05:00
Joshua CaseyandGitHub a740fb34c5 Merge pull request #1775 from vmware-tanzu/pinny/bump-deps
Bump go.mod direct dependencies
2023-11-15 08:54:00 -06:00
Pinny be1416b7b5 Bump go.mod direct dependencies 2023-11-15 09:02:22 +00:00
Ryan RichardandGitHub aad8dc50e7 Merge pull request #1774 from vmware-tanzu/whoami_timeout
Infinite default timeout for WhoAmI API call and add `--timeout` CLI flag
2023-11-14 14:02:42 -08:00