Ryan Richard
a2be4b7b5e
clarify some comments based on PR feedback
2024-07-17 09:58:26 -07:00
Ryan Richard
b5a509f27f
fix authenticators bug: stop allowing usage when validation fails
2024-07-16 09:59:19 -07:00
Ryan Richard
6b722a14c8
Merge pull request #2014 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-07-16 09:38:58 -07:00
Pinny
dd0c805b09
Bump dependencies
2024-07-16 13:01:44 +00:00
Ryan Richard
6c35490cfb
Merge pull request #2012 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-07-15 09:48:11 -07:00
Pinny
19a04ea804
Bump dependencies
2024-07-15 13:02:37 +00:00
Ryan Richard
a9a63914b2
Merge pull request #2008 from vmware-tanzu/dependabot/go_modules/hack/update-go-mod/golang.org/x/mod-0.19.0
...
Bump golang.org/x/mod from 0.18.0 to 0.19.0 in /hack/update-go-mod
2024-07-12 09:00:02 -07:00
Ryan Richard
b7d1c3f5f6
Merge pull request #2010 from vmware-tanzu/remove_warning
...
remove unnecessary warning log message
2024-07-12 08:59:45 -07:00
Ryan Richard
a8ccdbc833
Merge pull request #2011 from vmware-tanzu/update_toolchain
...
update Go toolchain directives to match current version of Go
2024-07-12 08:59:29 -07:00
Ryan Richard
decf1cf537
update Go toolchain directives to match current version of Go
2024-07-10 10:27:39 -07:00
Ryan Richard
e5cfa521da
remove unnecessary warning log message
...
This message is not needed because the IDP chooser page will take
care of the case where a browser-based authorization flow did not
request any specific IDP. For browserless flows (only allowed for
the `pinniped-cli` client), the client must request a specific IDP
(except in backwards-compatibility mode) because there is no browser
in which to show the IDP chooser page. Failing to request a specific
IDP in a browserless flow will result in a helpful error message
being returned.
2024-07-10 09:32:23 -07:00
Ryan Richard
dd80627dfa
Merge pull request #2007 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-07-10 08:58:13 -07:00
Pinny
f79c844c71
Bump dependencies
2024-07-10 13:01:25 +00:00
dependabot[bot]
cb550dfed0
Bump golang.org/x/mod from 0.18.0 to 0.19.0 in /hack/update-go-mod
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.18.0 to 0.19.0.
- [Commits](https://github.com/golang/mod/compare/v0.18.0...v0.19.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/mod
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-05 01:48:54 +00:00
Ryan Richard
602623a0ba
Merge pull request #2005 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-07-02 15:30:16 -07:00
Pinny
6d7646c0a2
Bump dependencies
2024-07-02 13:02:03 +00:00
Ryan Richard
51518aeb03
Merge pull request #2004 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-07-01 10:43:24 -07:00
Pinny
f3e710c814
Bump dependencies
2024-07-01 13:02:17 +00:00
Ryan Richard
b132b14982
Merge pull request #2003 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-06-27 13:29:03 -07:00
Pinny
6cd45fa81c
Bump dependencies
2024-06-27 17:43:41 +00:00
Ryan Richard
95e4b8fcdf
Merge pull request #2001 from vmware-tanzu/replace_go-retryablehttp
...
replace indirect dep go-retryablehttp
2024-06-27 10:23:12 -07:00
Ryan Richard
b4cd64e999
replace indirect dep go-retryablehttp
2024-06-25 11:22:42 -07:00
Ryan Richard
82dbb93e2c
Merge pull request #1999 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-06-24 12:03:08 -07:00
Pinny
b7e12334d6
Bump dependencies
2024-06-24 17:42:49 +00:00
Ryan Richard
a39eac6f1b
Merge pull request #1998 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-06-21 16:10:57 -07:00
Ryan Richard
418ec2a01f
Merge pull request #1997 from vmware-tanzu/upgrade_jose_and_coreosoidc
...
upgrade github.com/go-jose/go-jose and github.com/coreos/go-oidc
2024-06-21 13:10:45 -07:00
Ryan Richard
0380a9ce33
upgrade github.com/go-jose/go-jose and github.com/coreos/go-oidc
...
Also standardize some related imports and fix some whitespace in a test
2024-06-21 11:16:40 -07:00
Pinny
ed338d1455
Bump dependencies
2024-06-21 13:05:15 +00:00
Ryan Richard
10699314d4
Merge pull request #1995 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-06-20 09:01:59 -07:00
Pinny
1f7b6133cd
Bump dependencies
2024-06-20 13:02:20 +00:00
Ashish Amarnath
3c0ed4d5e3
Merge pull request #1984 from vmware-tanzu/jtc/add-proposal-for-secret-ref-ca-bundles
...
Add proposal for CA bundles to be sourced from configmaps or secrets
2024-06-19 16:21:47 -07:00
Ashish Amarnath
e38f0824dc
update proposal for CA bundles from secret and configmap refs
...
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com >
2024-06-19 16:19:31 -07:00
Ryan Richard
a7d2c50550
Merge pull request #1993 from vmware-tanzu/local_demo
...
add local demo tutorial to site
2024-06-19 14:21:43 -07:00
Joshua Casey
9fee276214
Add proposal for CA bundles from secret refs
2024-06-19 13:48:44 -07:00
Ryan Richard
ef7c7d879b
add local demo tutorial to site
2024-06-19 13:02:02 -07:00
Pinny
ea64444c8b
Updated versions in docs for v0.32.0 release
2024-06-19 19:08:25 +00:00
Ashish Amarnath
84308f3518
Merge pull request #1992 from vmware-tanzu/update_flaky_test
...
rewrite flaky category test
v0.32.0
2024-06-18 10:56:26 -07:00
Ryan Richard
88bcdbadce
rewrite flaky category test
2024-06-18 08:40:56 -07:00
Ryan Richard
b50d1384dc
Merge pull request #1991 from vmware-tanzu/update_codegen_kube_versions
...
bump codegen kube versions
2024-06-17 15:10:09 -07:00
Ryan Richard
b3457271a9
bump codegen kube versions
2024-06-17 11:38:28 -07:00
Ryan Richard
fc6de7e86c
Merge pull request #1990 from vmware-tanzu/pinny/bump-deps
...
Bump dependencies
2024-06-17 10:11:31 -07:00
Pinny
6b87bc3fa9
Bump dependencies
2024-06-17 13:02:34 +00:00
Ryan Richard
238df12920
Merge pull request #1952 from vmware-tanzu/jtc/issue-1605-limit-tls-ciphers-for-tls1.2-v2
...
Allow admin user to further limit TLS ciphers used for TLS1.2 client requests and server ports (not including CLI)
2024-06-14 15:52:52 -07:00
Ryan Richard
f7f32f2f98
some mild refactoring of ptls common.go (mostly renames)
2024-06-14 13:27:38 -07:00
Ryan Richard
1f8ac0ff23
Also probe aggregated API ports in new ciphers test
...
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com >
2024-06-14 13:27:38 -07:00
Joshua Casey
75ff3efb59
fix lint
2024-06-14 10:42:17 -07:00
Ryan Richard
f0f9efa277
Refactor to make profiles.go and profiles_fips_strict.go more similar
...
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com >
2024-06-14 10:42:17 -07:00
Joshua Casey
4ab2ed10f5
Add integration test for allowed ciphers
2024-06-14 10:42:17 -07:00
Joshua Casey
53031ad8d4
User can now configured allowed ciphers, to restrict the ciphers used by the Default profile
2024-06-14 10:42:17 -07:00
Joshua Casey
ce1ad010e9
Remove Legacy TLS Config, which is not used in the source code
2024-06-14 10:42:17 -07:00