 Ryan Richard
|
9f17ba5ae4
|
change wording of TLS config loaded success messages
|
2024-08-05 11:32:20 -07:00 |
|
 Joshua CaseyandRyan Richard
|
9a16dc28b7
|
Fix another integration test
|
2024-08-05 11:32:20 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
de86809b69
|
Fix some integration tests
|
2024-08-05 11:32:20 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
9420bfde5b
|
webhookcachefiller controller loops over all webhookauthenticators
|
2024-08-05 11:32:20 -07:00 |
|
|
Ryan Richard
|
adb460b644
|
refactor integration test to use proper test table
|
2024-08-05 11:32:20 -07:00 |
|
|
Ryan RichardandJoshua Casey
|
06b47a5792
|
jwtcachefiller controller loops over all jwtauthenticators
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
|
2024-08-05 11:32:20 -07:00 |
|
|
ca2dd2d476
|
refactor InferSupervisorIssuerURL() func; remove a TODO
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
Co-authored-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:20 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
60f82d2a55
|
Fix integration test typo
|
2024-08-05 11:32:20 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
4ec5766ea9
|
Modify Concierge/Superivsor TLS spec integration tests to allow for older K8s versions
|
2024-08-05 11:32:20 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
b7c26c43ca
|
Add LDAPIdentityProvider and ActiveDirectoryIdentityProvider to the Supervisor TLS config static validation integration tests
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:20 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
4b2ed52f44
|
Add GitHubIdentityProvider to the Supervisor TLS config static validation integration tests
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:20 -07:00 |
|
|
Ryan RichardandJoshua Casey
|
f381c92f0b
|
Use templates to reduce duplication in concierge_tls_spec_test.go
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
|
2024-08-05 11:32:20 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
3a303cc8fb
|
Supervisor TLS Spec validation integration tests should use helper method
|
2024-08-05 11:32:20 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
d74c2a6e3f
|
Supervisor TLS spec integration tests should use an OIDC issuer url from the test environment
|
2024-08-05 11:32:19 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
0f9352db3b
|
Integration tests should use a helper func to infer Supervisor's downstream issuer URL
|
2024-08-05 11:32:19 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
afec420ce6
|
Add JWTAuthenticators to the static validation checks for concierge TLS spec
|
2024-08-05 11:32:19 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
d5e3ad9da0
|
Concierge external TLS static integration tests use the real URL of the deployed local-user-authenticator
|
2024-08-05 11:32:19 -07:00 |
|
|
Ryan RichardandJoshua Casey
|
a4ad5d68a9
|
Fix *_tls_spec_test.go for old versions of Kubernetes
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ryan RichardandJoshua Casey
|
30c0fd479e
|
Fix e2e_test.go
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ryan Richard
|
756966c55b
|
add "Status" printer column to JWTAuthenticator and WebhookAuthenticator
|
2024-08-05 11:32:19 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
bf1c02d328
|
jwtauthenticator controller redoes validations when external CA bundle changes
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
6e9023e090
|
add code review todos and light refactoring
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ashish AmarnathandRyan Richard
|
1b7a26d932
|
test secret and configmap filtering in concierge authenticator controllers
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ashish AmarnathandRyan Richard
|
cb4b63f8b3
|
integration tests for concierge authenticators
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ashish AmarnathandRyan Richard
|
8eb15a924f
|
integration tests for supervisor oidc, ldap, activedirectory IDP
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ashish AmarnathandRyan Richard
|
821a893f70
|
integration tests for supervisor oidc, ldap, activedirectory IDP
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ashish AmarnathandRyan Richard
|
afcd80de37
|
more integration tests pass
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ashish AmarnathandRyan Richard
|
90e8cc86c2
|
integration tests pass
|
2024-08-05 11:32:19 -07:00 |
|
|
Ashish AmarnathandRyan Richard
|
199562fd05
|
get all supervisor unit tests to pass
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ashish AmarnathandRyan Richard
|
7e6dadb508
|
add CRD validation integration tests
Signed-off-by: Ashish Amarnath <ashish.amarnath@broadcom.com>
|
2024-08-05 11:32:19 -07:00 |
|
|
Ryan Richard
|
a2be4b7b5e
|
clarify some comments based on PR feedback
|
2024-07-17 09:58:26 -07:00 |
|
|
Ryan Richard
|
0380a9ce33
|
upgrade github.com/go-jose/go-jose and github.com/coreos/go-oidc
Also standardize some related imports and fix some whitespace in a test
|
2024-06-21 11:16:40 -07:00 |
|
|
Ryan Richard
|
88bcdbadce
|
rewrite flaky category test
|
2024-06-18 08:40:56 -07:00 |
|
|
Ryan RichardandJoshua Casey
|
1f8ac0ff23
|
Also probe aggregated API ports in new ciphers test
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
|
2024-06-14 13:27:38 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
75ff3efb59
|
fix lint
|
2024-06-14 10:42:17 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
4ab2ed10f5
|
Add integration test for allowed ciphers
|
2024-06-14 10:42:17 -07:00 |
|
|
Joshua CaseyandRyan Richard
|
53031ad8d4
|
User can now configured allowed ciphers, to restrict the ciphers used by the Default profile
|
2024-06-14 10:42:17 -07:00 |
|
|
Joshua Casey
|
678be9902a
|
Lint new files from the GitHub branch
|
2024-06-11 10:16:18 -05:00 |
|
|
Joshua Casey
|
bafd578866
|
Merge branch 'main' into jtc/add-importas-linter
|
2024-06-11 09:39:48 -05:00 |
|
|
Ryan Richard
|
07f8c327e4
|
handle another githug login interstitial page
|
2024-06-06 14:00:22 -04:00 |
|
|
Joshua CaseyandRyan Richard
|
58b4ecc0aa
|
user sees error msg when GitHub login is denied due to allowed orgs
Also renamed an interface function from GetName to GetResourceName.
Co-authored-by: Ryan Richard <richardry@vmware.com>
|
2024-06-03 10:56:28 -07:00 |
|
|
Ryan Richard
|
e3d8c71f97
|
sleep longer before generating any GitHib OTP codes
|
2024-05-31 12:03:36 -07:00 |
|
|
Ryan Richard
|
6364ac9ac7
|
change status condition type name to be "ClientCredentialsSecretValid"
For both GitHubIdentityProvider and OIDCIdentityProvider to make them
consistent with each other.
|
2024-05-31 09:59:30 -07:00 |
|
|
Ryan Richard
|
e89daadfcf
|
dump debugging info when a browser-based test fails
|
2024-05-31 09:09:24 -07:00 |
|
|
Ryan Richard
|
c5b54ec27e
|
resolve a todo in supervisor_discovery_test.go
|
2024-05-30 14:48:35 -07:00 |
|
|
Ryan Richard
|
6327f51f5b
|
repeat same github int tests using OAuth client in supervisor_login_test
|
2024-05-30 09:58:10 -07:00 |
|
|
Ryan Richard
|
2bf11ffde1
|
update error message assertion for github in supervisor_login_test.go
|
2024-05-29 09:45:43 -07:00 |
|
|
Ryan RichardandJoshua Casey
|
bb1737daec
|
slow down github integration tests to avoid OTP reuse errors from github
|
2024-05-22 21:21:45 -05:00 |
|
|
Ryan RichardandJoshua Casey
|
fef494949f
|
implement upstream refresh for github
|
2024-05-22 21:21:45 -05:00 |
|
|
Ryan RichardandJoshua Casey
|
e69eb46911
|
Add github integration tests to supervisor_login_test.go
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
|
2024-05-22 21:21:45 -05:00 |
|