mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-07-23 16:42:43 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
2,847 Commits 31 Branches 54 Tags
7450fb6c8e9937e43fd5f0f95f2caa674413e3eb
Commit Graph
2847 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ryan Richard 7450fb6c8e A few more small changes to the dynamic clients proposal 2022-07-22 09:26:24 -07:00
Ryan Richard b507604b90 Update dynamic clients proposal with a link to the LDAP/AD UI release 
Also fix a typos.
 2022-07-21 11:37:58 -07:00
Ryan Richard 1eefba537d Update dynamic clients proposal with details learned during implementation 
Also fix some typos and add some clarifying comments.
 2022-07-21 11:26:04 -07:00
Ryan Richard 1f505fc065 Update audience confusion section of proposal doc 2022-06-08 11:36:50 -07:00
Monis Khan 212f00ebde Recommend a single approach to address all goals 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-06-01 10:26:37 -04:00
Monis Khan 6bb34130fe Add asymmetric crypto based client secret generation 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-05-09 15:58:52 -04:00
Monis Khan 58f8a10919 Add data model and secret generation alternatives 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-05-09 00:05:06 -04:00
Monis Khan 1c4ed8b404 Add recommendation for solving the audience confusion problem 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-05-06 22:26:59 -04:00
Ryan RichardandGitHub 56c8b9f884 Add recommendations to dynamic client proposal 2022-04-29 12:48:03 -07:00
Ryan Richard 19149ff043 Update proposal state to "in-review" 2022-04-15 13:35:07 -07:00
Ryan Richard e2836fbdb5 Dynamic Supervisor OIDC Clients proposal 2022-04-15 13:23:40 -07:00
Margo CrawfordandGitHub f5cf3276d5 Merge pull request #1123 from vmware-tanzu/macos-untrusted-certificate-errors 2022-04-14 20:15:31 -07:00
Margo Crawford d5337c9c19 Error format of untrusted certificate errors should depend on OS 
Go 1.18.1 started using MacOS' x509 verification APIs on Macs
rather than Go's own. The error messages are different.

Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-04-14 17:37:36 -07:00
Mo KhanandGitHub c624846eaa Merge pull request #1122 from vmware-tanzu/impersonator-only-http2 
the http2RoundTripper should only use http2
 2022-04-14 16:55:50 -04:00
Margo Crawford 03f19da21c the http2RoundTripper should only use http2 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-04-14 10:51:25 -07:00
Mo KhanandGitHub 8fe635e7ce Merge pull request #1096 from vmware-tanzu/dependabot/docker/distroless/static-2556293 
Bump distroless/static from `80c956f` to `2556293`
 2022-04-14 12:53:59 -04:00
dependabot[bot]andGitHub 2fa81546f3 Bump distroless/static from 80c956f to 2556293 
Bumps distroless/static from `80c956f` to `2556293`.

---
updated-dependencies:
- dependency-name: distroless/static
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-14 14:51:17 +00:00
Mo KhanandGitHub 43485563ff Merge pull request #1120 from vmware-tanzu/dependabot/docker/hack/google.com/api-project-999119582588/go-boringcrypto/golang-1.18.1b7 
Bump google.com/api-project-999119582588/go-boringcrypto/golang from 1.17.8b7 to 1.18.1b7 in /hack
 2022-04-14 10:26:04 -04:00
dependabot[bot]andGitHub 5621c1161a Bump google.com/api-project-999119582588/go-boringcrypto/golang in /hack 
Bumps google.com/api-project-999119582588/go-boringcrypto/golang from 1.17.8b7 to 1.18.1b7.

---
updated-dependencies:
- dependency-name: google.com/api-project-999119582588/go-boringcrypto/golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-14 13:26:21 +00:00
Mo KhanandGitHub 79fd8e2901 Merge pull request #1119 from enj/enj/i/fips_log_errs 
Only emit FIPS startup log when running a server component
 2022-04-14 09:19:40 -04:00
Monis Khan e0886c6948 Only emit FIPS startup log when running a server component 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-13 18:31:02 -04:00
Mo KhanandGitHub f5cc2f20f7 Merge pull request #1118 from enj/enj/i/go1.18_linter_fix 
Bump to go1.18.1 and fix linter errors
 2022-04-13 18:15:20 -04:00
Monis Khan 8fd77b72df Bump to go1.18.1 and fix linter errors 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-13 16:43:06 -04:00
Mo KhanandGitHub 8ecf18521c Merge pull request #1112 from vmware-tanzu/fips-website-docs 
document how to use the fips dockerfile on our website
 2022-04-13 16:41:25 -04:00
Margo Crawford 96c705bf94 document how to use the fips dockerfile on our website 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-04-13 12:45:58 -07:00
Mo KhanandGitHub d0d20e00e4 Merge pull request #1117 from vmware-tanzu/prefix_tokens 
Add custom prefix to downstream access and refresh tokens and authcodes
 2022-04-13 15:34:42 -04:00
Ryan Richard 53348b8464 Add custom prefix to downstream access and refresh tokens and authcodes 2022-04-13 10:13:27 -07:00
Ryan RichardandGitHub 13daf59217 Merge pull request #1108 from vicmarbev/main 
Use vmware-tanzu/carvel instead of the deprecated k14s/tap to install deps with brew
 2022-04-13 08:43:39 -07:00
Ryan RichardandGitHub 9ebf3a5b92 Merge branch 'main' into main 2022-04-13 08:41:04 -07:00
Mo KhanandGitHub 6af1aaeb20 Merge pull request #1114 from enj/enj/i/fips_init_log 
Use klog to make sure FIPS init log is emitted
 2022-04-12 16:23:38 -04:00
Monis Khan 6b4fbb6e0e Use klog to make sure FIPS init log is emitted 
We cannot use plog until the log level config has been setup, but
that occurs after this init function has run.

Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-12 14:36:06 -04:00
Mo KhanandGitHub edf4ffb018 Merge pull request #1101 from vmware-tanzu/dependabot/docker/hack/distroless/static-2556293 
Bump distroless/static from `80c956f` to `2556293` in /hack
 2022-04-11 12:37:25 -04:00
dependabot[bot]andGitHub 721526b7e7 Bump distroless/static from 80c956f to 2556293 in /hack 
Bumps distroless/static from `80c956f` to `2556293`.

---
updated-dependencies:
- dependency-name: distroless/static
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-07 14:13:12 +00:00
anjalitelangandGitHub 91681b9368 Update ROADMAP.md 
Edits to the wiki based on our current backlog 4/5/2022
 2022-04-06 16:08:04 -04:00
Mo KhanandGitHub 3c6f97a457 Target hack/Dockerfile_fips correctly 2022-04-06 15:32:08 -04:00
Mo KhanandGitHub 12cbd744b7 Syntax highlighting for Dockerfile_fips 2022-04-06 15:31:07 -04:00
Ryan RichardandGitHub 103538858f Merge pull request #1094 from vmware-tanzu/disable_http 
Supervisor HTTP listener disabled by default and may only bind to loopback interfaces
 2022-04-05 12:39:04 -07:00
Ryan Richard bdabdf0f42 Update comment in FederationDomainTLSSpec 2022-04-05 09:53:22 -07:00
Ryan Richard 25d20d4081 Merge branch 'main' into disable_http 2022-04-05 09:00:26 -07:00
Víctor Martínez Bevià dc24397df4 Use vmware-tanzu/carvel instead of the deprecated k14/tap to install deps with brew 2022-04-05 16:43:22 +02:00
Mo KhanandGitHub c0874706d9 Merge pull request #1106 from enj/enj/i/fips_followup 
Add more details to FIPS comments
 2022-04-01 13:16:50 -04:00
Monis Khan 07066e020d Explicitly set defaultServing ciphers in FIPS mode 
This is a no-op today, but could change in the future when we add
support for FIPS in non-strict mode.

Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:59:47 -04:00
Monis Khan 3f0753ec5a Remove duplication in secure TLS tests 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:56:38 -04:00
Monis Khan 15bc6a4a67 Add more details to FIPS comments 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:56:38 -04:00
Mo KhanandGitHub ce82d799c9 Run OSSF scorecard on release branches 2022-04-01 10:41:23 -04:00
Mo KhanandGitHub a453522d81 Add OSSF Scorecard GitHub Action 2022-04-01 10:30:01 -04:00
Ryan Richard 51c527a965 Change to camel-case for insecureAcceptExternalUnencryptedHttpRequests 
- Use camel-case in the static configmap
- Parse the value into a boolean in the go struct instead of a string
- Add test for when unsupported value is used in the configmap
- Run the config_test.go tests in parallel
- Update some paragraphs in configure-supervisor.md for clarity
 2022-03-31 16:23:45 -07:00
Ryan Richard ae7aac020a Merge branch 'main' into disable_http 2022-03-30 11:30:32 -07:00
Mo KhanandGitHub 17e8faa0fe Have dependabot keep the FIPS dockerfile updated 2022-03-30 13:55:19 -04:00
Mo KhanandGitHub 6639ce2a1f Merge pull request #1061 from vmware-tanzu/fips-boringcrypto 
FIPs compatibility
 2022-03-30 13:43:23 -04:00