mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-07-24 17:12:50 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
4,824 Commits 31 Branches 54 Tags
5d9b7a3346a9307e4e5dafba2a3c2f94de73cb89
Commit Graph
4824 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mo KhanandGitHub 8ecf18521c Merge pull request #1112 from vmware-tanzu/fips-website-docs 
document how to use the fips dockerfile on our website
 2022-04-13 16:41:25 -04:00
Margo Crawford 96c705bf94 document how to use the fips dockerfile on our website 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-04-13 12:45:58 -07:00
Mo KhanandGitHub d0d20e00e4 Merge pull request #1117 from vmware-tanzu/prefix_tokens 
Add custom prefix to downstream access and refresh tokens and authcodes
 2022-04-13 15:34:42 -04:00
Ryan Richard 53348b8464 Add custom prefix to downstream access and refresh tokens and authcodes 2022-04-13 10:13:27 -07:00
Ryan RichardandGitHub 13daf59217 Merge pull request #1108 from vicmarbev/main 
Use vmware-tanzu/carvel instead of the deprecated k14s/tap to install deps with brew
 2022-04-13 08:43:39 -07:00
Ryan RichardandGitHub 9ebf3a5b92 Merge branch 'main' into main 2022-04-13 08:41:04 -07:00
Mo KhanandGitHub 6af1aaeb20 Merge pull request #1114 from enj/enj/i/fips_init_log 
Use klog to make sure FIPS init log is emitted
 2022-04-12 16:23:38 -04:00
Monis Khan 6b4fbb6e0e Use klog to make sure FIPS init log is emitted 
We cannot use plog until the log level config has been setup, but
that occurs after this init function has run.

Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-12 14:36:06 -04:00
Mo KhanandGitHub edf4ffb018 Merge pull request #1101 from vmware-tanzu/dependabot/docker/hack/distroless/static-2556293 
Bump distroless/static from `80c956f` to `2556293` in /hack
 2022-04-11 12:37:25 -04:00
dependabot[bot]andGitHub 721526b7e7 Bump distroless/static from 80c956f to 2556293 in /hack 
Bumps distroless/static from `80c956f` to `2556293`.

---
updated-dependencies:
- dependency-name: distroless/static
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-07 14:13:12 +00:00
anjalitelangandGitHub 91681b9368 Update ROADMAP.md 
Edits to the wiki based on our current backlog 4/5/2022
 2022-04-06 16:08:04 -04:00
Mo KhanandGitHub 3c6f97a457 Target hack/Dockerfile_fips correctly 2022-04-06 15:32:08 -04:00
Mo KhanandGitHub 12cbd744b7 Syntax highlighting for Dockerfile_fips 2022-04-06 15:31:07 -04:00
Ryan RichardandGitHub 103538858f Merge pull request #1094 from vmware-tanzu/disable_http 
Supervisor HTTP listener disabled by default and may only bind to loopback interfaces
 2022-04-05 12:39:04 -07:00
Ryan Richard bdabdf0f42 Update comment in FederationDomainTLSSpec 2022-04-05 09:53:22 -07:00
Ryan Richard 25d20d4081 Merge branch 'main' into disable_http 2022-04-05 09:00:26 -07:00
Víctor Martínez Bevià dc24397df4 Use vmware-tanzu/carvel instead of the deprecated k14/tap to install deps with brew 2022-04-05 16:43:22 +02:00
Mo KhanandGitHub c0874706d9 Merge pull request #1106 from enj/enj/i/fips_followup 
Add more details to FIPS comments
 2022-04-01 13:16:50 -04:00
Monis Khan 07066e020d Explicitly set defaultServing ciphers in FIPS mode 
This is a no-op today, but could change in the future when we add
support for FIPS in non-strict mode.

Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:59:47 -04:00
Monis Khan 3f0753ec5a Remove duplication in secure TLS tests 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:56:38 -04:00
Monis Khan 15bc6a4a67 Add more details to FIPS comments 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:56:38 -04:00
Mo KhanandGitHub ce82d799c9 Run OSSF scorecard on release branches 2022-04-01 10:41:23 -04:00
Mo KhanandGitHub a453522d81 Add OSSF Scorecard GitHub Action 2022-04-01 10:30:01 -04:00
Ryan Richard 51c527a965 Change to camel-case for insecureAcceptExternalUnencryptedHttpRequests 
- Use camel-case in the static configmap
- Parse the value into a boolean in the go struct instead of a string
- Add test for when unsupported value is used in the configmap
- Run the config_test.go tests in parallel
- Update some paragraphs in configure-supervisor.md for clarity
 2022-03-31 16:23:45 -07:00
Ryan Richard ae7aac020a Merge branch 'main' into disable_http 2022-03-30 11:30:32 -07:00
Mo KhanandGitHub 17e8faa0fe Have dependabot keep the FIPS dockerfile updated 2022-03-30 13:55:19 -04:00
Mo KhanandGitHub 6639ce2a1f Merge pull request #1061 from vmware-tanzu/fips-boringcrypto 
FIPs compatibility
 2022-03-30 13:43:23 -04:00
Margo Crawford 53597bb824 Introduce FIPS compatibility 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-03-29 16:58:41 -07:00
Ryan Richard 0e54ba1a20 Slightly fancier way to prevent old values.yaml names from being used 2022-03-29 14:24:40 -07:00
Ryan Richard b07a4131e5 Merge branch 'main' into disable_http 2022-03-29 12:47:53 -07:00
Mo KhanandGitHub 2cffea5880 Merge pull request #1099 from vmware-tanzu/remove_supervisorhttpaddress_var 
Remove unused env.SupervisorHTTPAddress integration test var
 2022-03-29 13:36:00 -04:00
Ryan Richard 5f34efc0b7 Empty commit to trigger CI 2022-03-29 09:39:18 -07:00
Ryan Richard cf471d6422 Remove unused env.SupervisorHTTPAddress integration test var 2022-03-29 09:13:44 -07:00
Ryan Richard 3592f80457 Merge branch 'main' into disable_http 2022-03-28 17:03:59 -07:00
Ryan Richard 488f08dd6e Provide a way to override the new HTTP loopback-only validation 
Add new deprecated_insecure_accept_external_unencrypted_http_requests
value in values.yaml. Allow it to be a boolean or a string to make it
easier to use (both --data-value and --data-value-yaml will work).

Also:
- Consider "ip6-localhost" and "ip6-loopback" to be loopback addresses
  for the validation
- Remove unused env.SupervisorHTTPAddress var
- Deprecate the `service_http_*` values in values.yaml by renaming them
  and causing a ytt render error when the old names are used
 2022-03-28 17:03:23 -07:00
Mo KhanandGitHub cd25cb89c4 Merge pull request #1093 from enj/enj/d/ws1 
Add Workspace ONE Access docs
 2022-03-24 20:24:29 -04:00
Monis Khan 57fb085bef Add Workspace ONE Access docs 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-03-24 20:17:54 -04:00
Ryan Richard 8d12c1b674 HTTP listener: default disabled and may only bind to loopback interfaces 2022-03-24 15:46:10 -07:00
Mo KhanandGitHub 9c5adad062 Merge pull request #1092 from vmware-tanzu/remove_oryx_direct_dep 
Remove direct dependency on ory/x
 2022-03-24 15:16:34 -04:00
Mo KhanandGitHub 4649b8e0e4 Merge pull request #1085 from pnbrown/community-page-update 
Update _index.html
 2022-03-24 14:02:51 -04:00
Ryan Richard 48c5a625a5 Remove our direct dependency on ory/x 
ory/x has new releases very often, sometimes multiple times per week,
causing a lot of noise from dependabot. We were barely using it
directly, so replace our direct usages with equivalent code.
 2022-03-24 10:24:54 -07:00
Ryan RichardandGitHub 42bd385cbd Merge pull request #1088 from vmware-tanzu/pty_int_test_flakes 
WIP: Try to fix recent integration test flakes
 2022-03-22 18:10:08 -07:00
Ryan Richard bedf4e5a39 Try to avoid getting a second username prompt in a test in e2e_test.go 2022-03-22 14:23:50 -07:00
Ryan Richard 2715741c2c Increase a test timeout in e2e_test.go 2022-03-22 12:13:10 -07:00
Ryan RichardandGitHub d20b2056f2 Merge branch 'main' into pty_int_test_flakes 2022-03-22 11:14:19 -07:00
Margo CrawfordandGitHub a9b054e2f4 Merge pull request #1087 from vmware-tanzu/update-install-linter-1.45.0 
Update install-linter.sh to use v1.45.0
 2022-03-22 10:57:34 -07:00
Margo Crawford 051a228a8c Update install-linter.sh to use v1.45.0 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-03-22 10:29:08 -07:00
Ryan Richard d162e294ed Split up the context timeouts per test in e2e_test.go 2022-03-22 10:17:45 -07:00
Margo CrawfordandGitHub 636d2014a7 Merge pull request #1086 from pnbrown/patch-1 
Update MAINTAINERS.md
 2022-03-21 15:02:05 -07:00
Nigel BrownandGitHub f981f63b90 Update MAINTAINERS.md 2022-03-21 13:17:14 -05:00