Commit Graph

  • 7ca2796774 update release_checklist.md for new hack script Ryan Richard 2024-12-03 13:05:05 -06:00
  • 170cc3bba4 ran new hack script to update all majors: updated github mod Ryan Richard 2024-12-03 12:52:29 -06:00
  • 1980912ebe add hack script to help update major versions of modules Ryan Richard 2024-12-03 12:51:40 -06:00
  • 1958bb8fb0 Clarify documentation for the advertised CA bundle of the impersonation proxy jtc/externally-configured-serving-certs Joshua Casey 2024-08-01 23:08:00 -05:00
  • 46bbe5bc75 Fix typos Joshua Casey 2024-08-01 12:19:34 -05:00
  • e6a0f94f8f Restrict which packages are aware of the keys used in Pinniped-generated certificate secrets Joshua Casey 2024-08-01 11:35:57 -05:00
  • 2e996aaecd Refactor: Use secret.Data instead of secret.StringData Joshua Casey 2024-08-01 10:16:16 -05:00
  • cfb51b3337 Rename certsManagerController to certsCreatorController Joshua Casey 2024-07-31 16:04:08 -05:00
  • 8ea393e3de Move prepare_controllers alongside Concierge server code Joshua Casey 2024-07-31 15:17:00 -05:00
  • 1571859d67 Merge pull request #2147 from vmware-tanzu/pinny/bump-deps Joshua Casey 2024-12-03 11:22:23 -06:00
  • eb4c20a6aa Bump dependencies Pinny 2024-12-03 14:04:18 +00:00
  • 1154139b91 Merge pull request #2145 from vmware-tanzu/pinny/bump-deps Joshua Casey 2024-12-02 16:52:50 -06:00
  • 28e22d7dd2 Update error text assertion due to change in ory/fosite Joshua Casey 2024-12-02 11:08:30 -06:00
  • 9cfbbb541a Standardize casing in Dockerfiles Joshua Casey 2024-12-02 10:00:39 -06:00
  • 21bce1cb92 Bump dependencies Pinny 2024-12-02 14:10:28 +00:00
  • fe045343ee Merge pull request #2009 from vmware-tanzu/audit_logging Joshua Casey 2024-11-27 15:46:34 -06:00
  • df017f9267 attempt to fix a test flake seen sometimes in CI Ryan Richard 2024-11-22 12:42:35 -08:00
  • ae5aad178d TokenCredentialRequest uses actual cert expiry time instead of estimate Ryan Richard 2024-11-21 15:18:43 -08:00
  • 032160a85e simplify single-node.yaml Ryan Richard 2024-11-21 13:02:27 -08:00
  • ecd23e86ce callback endpoint renders more useful user-facing error messages Ryan Richard 2024-11-21 13:01:32 -08:00
  • 51ae782135 fix typo in audit-logging.md Ryan Richard 2024-11-21 11:02:45 -08:00
  • 54b35c30da rename tokenIdentifier to tokenID in the audit logs Ryan Richard 2024-11-21 10:38:16 -08:00
  • dfe04c5a58 update audit-logging.md to reflect changes in recent commits Ryan Richard 2024-11-21 10:29:15 -08:00
  • 4423d472da allow audit correlation between token being issued and being used Ryan Richard 2024-11-20 13:22:31 -08:00
  • c803a182be Allow override of audit.log_usernames_and_groups for local debugging Joshua Casey 2024-11-20 12:25:34 -06:00
  • bc73505e35 Easily enable kind audit logs with ENABLE_AUDIT_LOGGING=true ./hack/kind-up.sh Joshua Casey 2024-11-20 09:55:24 -06:00
  • 0a28c818ad Small fixes for integration tests Joshua Casey 2024-11-19 21:17:30 -06:00
  • ce2dcbdbb3 simplify godoc Joshua Casey 2024-11-19 16:46:04 -06:00
  • 1ebe2fcd1a add integration test for personal info showing in login audit logs Ryan Richard 2024-11-19 13:42:55 -08:00
  • c7e9ee1c61 Backfill unit tests for paramsSafeToLog Joshua Casey 2024-11-19 14:06:34 -06:00
  • 51c86795af Backfill unit tests for cmd/pinniped/cmd/audit_id.go Joshua Casey 2024-11-19 13:29:06 -06:00
  • 8dffd60f0b Backfill unit tests for audit logging from the CLI Joshua Casey 2024-11-19 12:06:39 -06:00
  • 6bf9b64778 log response audit-id for tokencredentialrequests made from CLI Ryan Richard 2024-11-18 15:23:31 -08:00
  • 26ec7fa346 prepare-supervisor-on-kind.sh takes new --api-group-suffix flag Ryan Richard 2024-11-18 15:21:32 -08:00
  • 60bd118a9c pinniped CLI should print the audit-ID in certain error cases Joshua Casey 2024-11-18 16:30:07 -06:00
  • b69507f7f3 Add generic audit integration test Joshua Casey 2024-11-15 13:16:37 -06:00
  • 7d59df0f86 update original audit logging proposal Ryan Richard 2024-11-15 10:55:01 -08:00
  • 9c0272382f clean up audit logging documentation Ryan Richard 2024-11-15 10:43:36 -08:00
  • 2de8d9f0f3 cleanup example audit logs to make them prettier Ryan Richard 2024-11-14 14:06:53 -08:00
  • d0905c02dd use test helper in rest_test.go to reduce some duplication Ryan Richard 2024-11-14 13:07:26 -08:00
  • 51fc86f950 don't audit log missing username or password, change query param value Ryan Richard 2024-11-14 12:52:05 -08:00
  • 76bda12760 update audit-logging.md to resolve todos Ryan Richard 2024-11-14 12:08:53 -08:00
  • a84b76e56a audit log session ID in token handler for every grant type Ryan Richard 2024-11-14 12:08:34 -08:00
  • c2018717b6 audit log OIDCClientSecretRequests Ryan Richard 2024-11-14 09:55:31 -08:00
  • f388513145 resolve TODO by adding docs Joshua Casey 2024-11-14 10:59:41 -06:00
  • c16ebe1707 add unit test for audit logging when token refresh updates groups Ryan Richard 2024-11-13 13:45:44 -08:00
  • b54365c199 audit log request params on GET and POST login handlers Ryan Richard 2024-11-13 13:34:45 -08:00
  • 51d1cc7a96 refactor and add unit test for AuditRequestParams() Ryan Richard 2024-11-13 12:50:17 -08:00
  • c06141c871 token handler uses common method to audit HTTP request parameters Ryan Richard 2024-11-13 11:56:00 -08:00
  • eab3fde3af introduce common method to audit HTTP request parameters Ryan Richard 2024-11-13 11:46:50 -08:00
  • de7781b7f9 Use correct caller when generating audit events Joshua Casey 2024-11-13 14:42:10 -06:00
  • 611de03e01 Add audit event 'Incorrect Username Or Password' to auth_handler and audit event 'Using Upstream IDP' to callback_handler Joshua Casey 2024-11-13 13:36:25 -06:00
  • de722332b1 Add audit logging to post_login_handler Joshua Casey 2024-11-13 12:29:23 -06:00
  • 438ca437ec tokencredentialrequest audit logs failed requests Ryan Richard 2024-11-12 16:13:41 -08:00
  • e21e1326b7 tokencredentialrequest audit logs successful responses Ryan Richard 2024-11-12 14:08:36 -08:00
  • 37e12b4024 Start backfilling some audit unit tests in post_login_handler Joshua Casey 2024-11-12 17:23:17 -06:00
  • e126ee5495 all callers of Audit() identify which keys may contain PII Ryan Richard 2024-11-12 12:22:41 -08:00
  • a308f3f22a audit log: keep key ordering in personalInfo, render nil slices and maps Ryan Richard 2024-11-12 11:35:59 -08:00
  • c5f4cce3ae make Audit() take struct as param for all optional params and redact PII Ryan Richard 2024-11-11 18:05:00 -08:00
  • ced8686d11 add config for audit logging, remove Audit() from Logger interface Ryan Richard 2024-11-11 15:21:14 -08:00
  • 76f6b725b8 Fix some rebase conflicts Joshua Casey 2024-11-11 10:33:01 -06:00
  • f9e1dd4bec Backfill unit tests for garbage_collector audit logging Joshua Casey 2024-11-11 10:13:07 -06:00
  • f4f393e5de Audit event 'HTTP Request Completed' will now log the location with err, error, and error_description query parameters Joshua Casey 2024-11-08 15:36:04 -06:00
  • 2db5dda266 Add last audit log unit tests to auth_handler Joshua Casey 2024-11-08 15:28:52 -06:00
  • 8cf9c59957 refactor to move audit event message types to their own pkg Ryan Richard 2024-11-07 14:15:04 -08:00
  • 088556193d auth handler audit logs headers and params when http method is wrong Ryan Richard 2024-11-07 14:04:36 -08:00
  • 18d3ab3d15 The 'HTTP Request Parameters' audit event now logs params as a JSON object Joshua Casey 2024-11-07 09:43:33 -06:00
  • dc6faa33bb Log params to token_handler endpoint even during error cases Joshua Casey 2024-11-06 10:26:28 -06:00
  • 0d22ae2c1a Fix lint and unit test compilation Joshua Casey 2024-11-04 14:41:13 -06:00
  • 362d982906 Start to backfill some audit unit tests for the token_handler Joshua Casey 2024-11-04 14:24:19 -06:00
  • 1006dd9379 resolve some todos Ryan Richard 2024-11-04 11:10:37 -08:00
  • 369316556a Add configuration to audit internal endpoints and backfill unit tests Joshua Casey 2024-11-04 12:15:20 -06:00
  • cf4b29de4b Clarify docs Joshua Casey 2024-11-04 09:28:31 -06:00
  • 09ca7920ea Extract testutil helper function Joshua Casey 2024-11-01 13:55:29 -05:00
  • 9994e033b2 Add audit event tests for login_handler Joshua Casey 2024-11-01 13:52:31 -05:00
  • dd56f2b47f Add audit event tests for callback_handler Joshua Casey 2024-11-01 12:25:55 -05:00
  • 4df043a91c document audit logging Ryan Richard 2024-11-01 14:12:13 -07:00
  • d020de4b3d update fips reference doc Ryan Richard 2024-11-01 12:54:49 -07:00
  • dd42f35db0 plog.TestLogger returns a buffer that holds the logs Joshua Casey 2024-11-01 09:18:47 -05:00
  • a67af9455b Refactor: don't copy the loop variable in test loops Joshua Casey 2024-11-01 08:48:04 -05:00
  • d729c82f84 fix lint Joshua Casey 2024-11-01 08:45:15 -05:00
  • 44e218194b Add 'AuthorizeID From Parameters' audit logs to the /callback and /login endpoints Joshua Casey 2024-10-31 17:00:52 -05:00
  • bf1e37f149 Use a helper to verify audit messages Joshua Casey 2024-10-31 10:15:27 -05:00
  • aee56c388f Check the sessionID as well Joshua Casey 2024-10-30 15:22:13 -05:00
  • fd5a10bee7 WIP: Add audit event when upstream redirect occurs and backfill tests Joshua Casey 2024-10-29 16:52:19 -05:00
  • b20e890f15 Add testutil.RequireLogLines to verify multiple log lines at once Joshua Casey 2024-10-29 16:47:29 -05:00
  • 4f9530eec7 audit logging WIP Ryan Richard 2024-07-05 11:06:31 -07:00
  • 615b60bd37 Merge pull request #2143 from vmware-tanzu/rr/kube-cert-agent-for-unschedulable-nodes Joshua Casey 2024-11-27 12:27:33 -06:00
  • e61afcd109 Merge branch 'main' into rr/kube-cert-agent-for-unschedulable-nodes Joshua Casey 2024-11-27 10:05:20 -06:00
  • 6ac5446940 Merge pull request #2142 from vmware-tanzu/pinny/bump-deps Joshua Casey 2024-11-27 09:46:46 -06:00
  • 0706681180 Bump dependencies Pinny 2024-11-27 14:03:34 +00:00
  • 45bc187ee4 Merge pull request #2144 from vmware-tanzu/dependabot/docker/dockerfiles/eks-deployer/ci/amazon/aws-cli-2.22.5 Ryan Richard 2024-11-26 12:31:06 -08:00
  • 434b1e2818 Bump amazon/aws-cli from 2.22.4 to 2.22.5 in /dockerfiles/eks-deployer dependabot[bot] 2024-11-26 01:31:55 +00:00
  • e44d70b41d kube cert agent controller avoids unschedulable nodes when possible Ryan Richard 2024-11-25 12:24:49 -08:00
  • b0904132c4 Merge pull request #2141 from vmware-tanzu/dependabot/docker/dockerfiles/eks-deployer/ci/amazon/aws-cli-2.22.4 Ryan Richard 2024-11-25 13:10:23 -08:00
  • d376fd318f Bump amazon/aws-cli from 2.22.2 to 2.22.4 in /dockerfiles/eks-deployer dependabot[bot] 2024-11-25 02:07:50 +00:00
  • 2d62a03bb2 add debugging echos to usage of "kubectl api-resources" Ryan Richard 2024-11-21 11:42:38 -08:00
  • 4bf810cb8f Merge pull request #2139 from vmware-tanzu/pinny/bump-deps Joshua Casey 2024-11-21 12:13:23 -06:00
  • 8e72e0e20b Merge pull request #2138 from vmware-tanzu/dependabot/docker/dockerfiles/eks-deployer/ci/amazon/aws-cli-2.22.2 Joshua Casey 2024-11-21 09:54:34 -06:00
  • c791db4c52 Bump dependencies Pinny 2024-11-21 14:04:17 +00:00