mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-01-10 16:01:04 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
3,630 Commits 21 Branches 50 Tags
659224a207f87a8bbf1bbdef6d730d7ab817f53e
Commit Graph

3630 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Pinny
659224a207 Updated versions in docs for v0.28.0 release 2023-12-15 18:56:15 +00:00
Ryan Richard
2c5214724b Merge pull request #1815 from vmware-tanzu/pinny/bump-deps 
Bump dependencies
v0.28.0 		2023-12-13 09:29:34 -08:00
Pinny
b2e3f84156 Bump dependencies 2023-12-13 16:39:49 +00:00
Ben Petersen
a58649faa6 Merge pull request #1813 from vmware-tanzu/disable_feature_gate 
Disable UnauthenticatedHTTP2DOSMitigation feature gate
 2023-12-12 16:12:14 -05:00
Ryan Richard
a4883507b5 Disable UnauthenticatedHTTP2DOSMitigation feature gate 2023-12-12 08:47:03 -08:00
Ben Petersen
461e272d79 Merge pull request #1812 from vmware-tanzu/tcr_test_more_output_on_failure 
Add more output on failure of TokenCredentialRequest integration tests
 2023-12-12 11:04:06 -05:00
Ryan Richard
981004eec4 Admin kubeconfigs with system:masters can have kubeadm:cluster-admins 2023-12-11 13:05:29 -08:00
Ryan Richard
0332362598 Add more output on failure of TokenCredentialRequest integration tests 2023-12-11 12:09:12 -08:00
Ryan Richard
f519b271d2 Merge pull request #1810 from vmware-tanzu/pinny/bump-deps 
Bump dependencies
 2023-12-11 08:57:12 -08:00
Pinny
be7a4f781f Bump dependencies 2023-12-11 09:04:33 +00:00
Ryan Richard
0e3c815e9b Merge pull request #1809 from vmware-tanzu/sdump_in_whoami_test 
Add more debugging output for when concierge_whoami_test.go fails
 2023-12-08 12:43:32 -08:00
Ryan Richard
3b4147f90e Add more debugging output for when concierge_whoami_test.go fails 2023-12-08 10:31:40 -08:00
Ryan Richard
3b10cc3097 Merge pull request #1808 from vmware-tanzu/pinny/bump-deps 
Bump dependencies
 2023-12-08 09:18:57 -08:00
Pinny
d8ec87d0e1 Bump dependencies 2023-12-08 16:17:12 +00:00
Ryan Richard
cdd38dd55e Merge pull request #1807 from vmware-tanzu/replace_grpc_version 
replace version of google.golang.org/grpc
 2023-12-07 12:33:30 -08:00
Ryan Richard
236a7cf3fb replace version of google.golang.org/grpc 2023-12-07 10:29:36 -08:00
Ryan Richard
3e74b38a95 Merge pull request #1806 from vmware-tanzu/revert_supervisor_disabling_http2 
revert the disabling of http2 for the Supervisor OIDC endpoints
 2023-12-06 20:33:27 -08:00
Ryan Richard
a05acadf80 Merge pull request #1594 from vmware-tanzu/jtc/add-ldapsearch-hack-script 
Add ldapsearch hack script
 2023-12-06 14:02:20 -08:00
Ryan Richard
c5d1f380d2 revert the disabling of http2 for the Supervisor OIDC endpoints 
Due to the unintended consequence of potentially breaking Ingresses
which were configured to use http2 on their backends.
 2023-12-06 13:10:51 -08:00
Ryan Richard
9883b4e236 rename the ldap debugging hack script and add parens to search filters 2023-12-06 12:56:35 -08:00
Ryan Richard
348187d2f4 Enchance and move the ldapsearch hack script 2023-12-06 09:16:16 -08:00
Joshua Casey
86ee66d21d Add ldapsearch hack script 
[#185658904]
 2023-12-06 09:16:16 -08:00
Ryan Richard
2198b4820a Merge pull request #1789 from vmware-tanzu/http2 
Defensive changes to mitigate potential http2 rapid reset attacks
 2023-12-06 09:15:07 -08:00
Ryan Richard
4b7b9e4362 Defensive changes to mitigate potential http2 rapid reset attacks 2023-12-05 14:57:50 -08:00
Ryan Richard
70f2bbf4f8 Merge pull request #1804 from vmware-tanzu/upgrade_fosite 
Upgrade fosite to the latest commit on their main branch
 2023-12-05 14:51:34 -08:00
Ryan Richard
7a3efb9981 change update-go-mod.sh to use head of main for fosite via config file 2023-12-05 11:25:02 -08:00
Ryan Richard
e1954b1df9 update session storage version from 5 to 6 due to fosite upgrade 
A small part of the session storage changed type in the latest version
of fosite compared to the old version of fosite that we were using.
Just to be safe, update our session storage version to invalidate
any pre-existing sessions upon upgrade of Pinniped.
 2023-12-04 14:49:22 -08:00
Ryan Richard
37c2ce53d7 upgrade fosite pkg to latest 2023-12-04 14:49:21 -08:00
Ryan Richard
9d3773e58a Merge pull request #1803 from vmware-tanzu/bump_codegen 
Update kube-versions.txt and rerun codegen
 2023-12-04 14:48:37 -08:00
Ryan Richard
aa651973fc Update kube-versions.txt and rerun codegen 2023-12-04 12:11:37 -08:00
Ryan Richard
745852ef2e Merge pull request #1801 from vmware-tanzu/pinny/bump-deps 
Bump dependencies
 2023-12-04 11:58:04 -08:00
Ryan Richard
ca5ad85bbd Switch from gopkg.in/square/go-jose.v2 to github.com/go-jose/go-jose/v3 
Made the switch wherever possible, but since fosite still uses the old
gopkg.in/square/go-jose.v2 there was one test where we still need to use
it as a direct dependency.
 2023-12-04 11:05:12 -08:00
Ryan Richard
8296093beb Increase fudge factor in tokenclient_test.go due to CI failures 2023-12-04 10:04:05 -08:00
Pinny
6d79fe5f4c Bump dependencies 2023-12-04 09:40:51 -08:00
Ryan Richard
ef6369d71e Merge pull request #1733 from vmware-tanzu/jtc/issue-1700/impersonation-proxy-token-request-api 
The Impersonation Proxy should use a short-lived token from the `TokenRequest` API
 2023-12-01 11:48:52 -08:00
Ryan Richard
7616799adb Minor refactors in legacy SA token Secret cleanup controller 2023-11-30 16:40:21 -08:00
Ryan Richard
dea3513125 Add test for when no SA token is cached in impersonator_test.go 2023-11-30 15:55:27 -08:00
Ryan Richard
5f4645d505 Improve unit tests in tokenclient_test.go 
Also fix a linter error and rename some new files.
 2023-11-30 13:29:52 -08:00
Joshua Casey
c439cc03a2 WIP for a tokenClient.Start() unit test 2023-11-30 09:57:57 -08:00
Joshua Casey
2603bbfcd6 Do not use long-lived service account tokens in secrets 
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2023-11-30 09:57:57 -08:00
Ryan Richard
dc1d563549 Merge pull request #1793 from vmware-tanzu/pinny/bump-deps 
Bump dependencies
 2023-11-29 12:58:38 -08:00
Pinny
416a66f68a Bump dependencies 2023-11-29 09:02:04 +00:00
Joshua Casey
8f2da915aa Merge pull request #1791 from vmware-tanzu/pinny/bump-deps 
Bump dependencies
 2023-11-17 14:00:05 -06:00
Pinny
aad74158ba Bump dependencies 2023-11-17 09:02:40 +00:00
Joshua Casey
98dde187bb Merge pull request #1788 from vmware-tanzu/pinny/bump-deps 
Bump dependencies
 2023-11-16 12:14:21 -06:00
Joshua Casey
ab71450c69 Use correct reference for pinned dependencies 2023-11-16 09:08:42 -08:00
Pinny
a4789e2b2c Bump dependencies 2023-11-16 17:07:36 +00:00
Ryan Richard
1c2829a326 Merge pull request #1779 from vmware-tanzu/pinny/bump-deps 
Bump dependencies
 2023-11-15 15:54:45 -08:00
Pinny
9be8cd40d2 Bump dependencies 2023-11-15 15:02:54 -08:00
Ryan Richard
90a3538806 Merge pull request #1780 from vmware-tanzu/jtc/lightly-standardize-import-aliases 
Lightly standardize import aliases
 2023-11-15 15:02:01 -08:00