Joshua Casey
|
0ee8ee80e1
|
Use sha256.Size
|
2024-08-27 13:26:39 -05:00 |
|
Ashish Amarnath
|
b70db9dc03
|
refactor to use new certificateAuthorityDataSourceKind enum
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:21 -07:00 |
|
Ryan Richard
|
e0235ed190
|
update docs and change struct name in types_tls.go.tmpl files
Co-authored-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:21 -07:00 |
|
Ryan Richard
|
9f17ba5ae4
|
change wording of TLS config loaded success messages
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
a888083c50
|
Introduce type alias CABundleHash for the hash of a CA bundle ([32]byte)
Co-authored-by: Ryan Richard <richardry@vmware.com>
Co-authored-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
99cfc4fbce
|
Remove tlsconfigutil.CABundle.IsEqual and ensure that tlsconfigutil.NewCABundle handles nil/empty input
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
fcceeed9fa
|
Refactor tlsconfigutil.CABundle 'getters' to not have 'get' in the name
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
4cf0e46c38
|
tlsconfigutil.CABundle should generate its own certPool
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
34eff2a2f9
|
Refactor tlsconfigutil.buildCABundle to make it more clear where the bundle is coming from
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
e82cb2c7ba
|
Refactor tlsconfigutil.getCertPool to return a CABundle and change its name to buildCABundle
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
0711093ccd
|
Add tests for tlsconfigutil.CABundle and all callers should use the constructor
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
15d0006841
|
Pull tlsconfigutil.CABundle into a separate file
|
2024-08-05 11:32:20 -07:00 |
|
Ashish Amarnath
|
005dbf3aa8
|
refactor tlsconfigutil to return a caBundle type
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
242fa8afb2
|
When reading CA bundle from a secret/configmap, return more specific err
When the bundle does not contain any certs, make the error more
specific.
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:20 -07:00 |
|
Joshua Casey
|
e3ed722252
|
Minor refactor
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:20 -07:00 |
|
Ryan Richard
|
920b519ebf
|
error when CA bundle from Secret or ConfigMap is empty
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
|
2024-08-05 11:32:19 -07:00 |
|
Joshua Casey
|
bf1c02d328
|
jwtauthenticator controller redoes validations when external CA bundle changes
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:19 -07:00 |
|
Joshua Casey
|
6e9023e090
|
add code review todos and light refactoring
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:19 -07:00 |
|
Ashish Amarnath
|
199562fd05
|
get all supervisor unit tests to pass
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
Ashish Amarnath
|
aab1ee9edc
|
unify TLS Spec between supervisor and concierge
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
Ashish Amarnath
|
080c75efe6
|
refactor tls spec validation into its own package
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|