Commit Graph

3611 Commits

Author SHA1 Message Date
Ryan Richard
9883b4e236 rename the ldap debugging hack script and add parens to search filters 2023-12-06 12:56:35 -08:00
Ryan Richard
348187d2f4 Enchance and move the ldapsearch hack script 2023-12-06 09:16:16 -08:00
Joshua Casey
86ee66d21d Add ldapsearch hack script
[#185658904]
2023-12-06 09:16:16 -08:00
Ryan Richard
2198b4820a Merge pull request #1789 from vmware-tanzu/http2
Defensive changes to mitigate potential http2 rapid reset attacks
2023-12-06 09:15:07 -08:00
Ryan Richard
4b7b9e4362 Defensive changes to mitigate potential http2 rapid reset attacks 2023-12-05 14:57:50 -08:00
Ryan Richard
70f2bbf4f8 Merge pull request #1804 from vmware-tanzu/upgrade_fosite
Upgrade fosite to the latest commit on their main branch
2023-12-05 14:51:34 -08:00
Ryan Richard
7a3efb9981 change update-go-mod.sh to use head of main for fosite via config file 2023-12-05 11:25:02 -08:00
Ryan Richard
e1954b1df9 update session storage version from 5 to 6 due to fosite upgrade
A small part of the session storage changed type in the latest version
of fosite compared to the old version of fosite that we were using.
Just to be safe, update our session storage version to invalidate
any pre-existing sessions upon upgrade of Pinniped.
2023-12-04 14:49:22 -08:00
Ryan Richard
37c2ce53d7 upgrade fosite pkg to latest 2023-12-04 14:49:21 -08:00
Ryan Richard
9d3773e58a Merge pull request #1803 from vmware-tanzu/bump_codegen
Update kube-versions.txt and rerun codegen
2023-12-04 14:48:37 -08:00
Ryan Richard
aa651973fc Update kube-versions.txt and rerun codegen 2023-12-04 12:11:37 -08:00
Ryan Richard
745852ef2e Merge pull request #1801 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-12-04 11:58:04 -08:00
Ryan Richard
ca5ad85bbd Switch from gopkg.in/square/go-jose.v2 to github.com/go-jose/go-jose/v3
Made the switch wherever possible, but since fosite still uses the old
gopkg.in/square/go-jose.v2 there was one test where we still need to use
it as a direct dependency.
2023-12-04 11:05:12 -08:00
Ryan Richard
8296093beb Increase fudge factor in tokenclient_test.go due to CI failures 2023-12-04 10:04:05 -08:00
Pinny
6d79fe5f4c Bump dependencies 2023-12-04 09:40:51 -08:00
Ryan Richard
ef6369d71e Merge pull request #1733 from vmware-tanzu/jtc/issue-1700/impersonation-proxy-token-request-api
The Impersonation Proxy should use a short-lived token from the `TokenRequest` API
2023-12-01 11:48:52 -08:00
Ryan Richard
7616799adb Minor refactors in legacy SA token Secret cleanup controller 2023-11-30 16:40:21 -08:00
Ryan Richard
dea3513125 Add test for when no SA token is cached in impersonator_test.go 2023-11-30 15:55:27 -08:00
Ryan Richard
5f4645d505 Improve unit tests in tokenclient_test.go
Also fix a linter error and rename some new files.
2023-11-30 13:29:52 -08:00
Joshua Casey
c439cc03a2 WIP for a tokenClient.Start() unit test 2023-11-30 09:57:57 -08:00
Joshua Casey
2603bbfcd6 Do not use long-lived service account tokens in secrets
Co-authored-by: Ryan Richard <richardry@vmware.com>
2023-11-30 09:57:57 -08:00
Ryan Richard
dc1d563549 Merge pull request #1793 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-11-29 12:58:38 -08:00
Pinny
416a66f68a Bump dependencies 2023-11-29 09:02:04 +00:00
Joshua Casey
8f2da915aa Merge pull request #1791 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-11-17 14:00:05 -06:00
Pinny
aad74158ba Bump dependencies 2023-11-17 09:02:40 +00:00
Joshua Casey
98dde187bb Merge pull request #1788 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-11-16 12:14:21 -06:00
Joshua Casey
ab71450c69 Use correct reference for pinned dependencies 2023-11-16 09:08:42 -08:00
Pinny
a4789e2b2c Bump dependencies 2023-11-16 17:07:36 +00:00
Ryan Richard
1c2829a326 Merge pull request #1779 from vmware-tanzu/pinny/bump-deps
Bump dependencies
2023-11-15 15:54:45 -08:00
Pinny
9be8cd40d2 Bump dependencies 2023-11-15 15:02:54 -08:00
Ryan Richard
90a3538806 Merge pull request #1780 from vmware-tanzu/jtc/lightly-standardize-import-aliases
Lightly standardize import aliases
2023-11-15 15:02:01 -08:00
Joshua Casey
b68e7f3e9e Lightly standardize import aliases 2023-11-15 13:52:17 -06:00
Ben Petersen
4f15fc2123 Merge pull request #1776 from vmware-tanzu/ben/dockerfile-image-args
Make Dockerfile base images configurable
2023-11-15 14:33:50 -05:00
Benjamin A. Petersen
2bc6c15d25 Make Dockerfile base images configurable 2023-11-15 14:32:48 -05:00
Joshua Casey
a740fb34c5 Merge pull request #1775 from vmware-tanzu/pinny/bump-deps
Bump go.mod direct dependencies
2023-11-15 08:54:00 -06:00
Pinny
be1416b7b5 Bump go.mod direct dependencies 2023-11-15 09:02:22 +00:00
Ryan Richard
aad8dc50e7 Merge pull request #1774 from vmware-tanzu/whoami_timeout
Infinite default timeout for WhoAmI API call and add `--timeout` CLI flag
2023-11-14 14:02:42 -08:00
Ryan Richard
47f6de58c3 Infinite default timeout for WhoAmI API call & add --timeout CLI flag 2023-11-14 09:40:03 -08:00
Joshua Casey
61c630caf0 Merge pull request #1772 from vmware-tanzu/pinny/bump-deps
Bump go.mod direct dependencies
2023-11-13 11:04:37 -06:00
Pinny
2985d55edf Bump go.mod direct dependencies 2023-11-13 09:04:06 +00:00
Joshua Casey
4f794571a2 Merge pull request #1771 from vmware-tanzu/pinny/bump-deps
Bump go.mod direct dependencies
2023-11-09 08:45:28 -06:00
Pinny
d5ae3da893 Bump go.mod direct dependencies 2023-11-09 09:02:31 +00:00
Ryan Richard
80d5f42b57 Merge pull request #1701 from vmware-tanzu/ben/carvel-package/local-registry
Carvel Package POC for local development
2023-11-08 14:49:32 -08:00
Ryan Richard
d5aa682cbc Fix a comment
Co-authored-by: Benjamin A. Petersen <ben@benjaminapetersen.me>
2023-11-08 13:56:11 -08:00
Ryan Richard
b61557d3c3 Auto-format build.sh and deploy.sh
Co-authored-by: Benjamin A. Petersen <ben@benjaminapetersen.me>
2023-11-08 13:45:48 -08:00
Ryan Richard
d4e2622ea8 Revert "Rearrange carvel build & deploy scripts"
This reverts commit 9a632134ae.
2023-11-08 13:38:22 -08:00
Ryan Richard
88a97033fb Refined ytt schemas
Co-authored-by: Benjamin A. Petersen <ben@benjaminapetersen.me>
2023-11-08 13:37:31 -08:00
Benjamin A. Petersen
c4f9869e7c Relax image_pull_dockerconfigjson validation, improve endpoints
validation
2023-11-08 13:10:20 -08:00
Benjamin A. Petersen
c455a17abe Adjust validation for run_as_user,run_as_group 2023-11-08 13:10:20 -08:00
Benjamin A. Petersen
9a632134ae Rearrange carvel build & deploy scripts 2023-11-08 13:10:20 -08:00