Commit Graph

  • 450ce6a4aa Switch impersonatorconfig to new endpointaddr package. Matt Moyer 2021-05-25 17:44:25 -05:00
  • c970dd1fb0 Merge branch 'main' of github.com:vmware-tanzu/pinniped into credentialissuer-spec-api Matt Moyer 2021-05-25 17:32:58 -05:00
  • 18a2a27a06 Merge pull request #640 from mattmoyer/endpointaddr Matt Moyer 2021-05-25 17:22:31 -05:00
  • 2941f3f3ef Merge pull request #641 from vmware-tanzu/prerelease-0.4.3 v0.4.3 Matt Moyer 2021-05-25 17:01:07 -05:00
  • 47582e3290 Documentation for using Jumpcloud as LDAP provider with Pinniped Supervisor Anjali Telang 2021-05-25 17:52:32 -04:00
  • 98fb4be58f Change access token storage TTL to match refresh. Matt Moyer 2021-05-25 16:48:28 -05:00
  • d0ec582334 Upgrade Go from 1.15.11 to 1.15.12. Matt Moyer 2021-05-25 16:45:12 -05:00
  • e9099bdcf9 Upgrade Kubernetes library dependencies from v1.20.6 to v1.20.7. Matt Moyer 2021-05-25 16:30:36 -05:00
  • 89eff28549 Convert LDAP code to use endpointaddr package. Matt Moyer 2021-05-25 14:46:50 -05:00
  • d9a3992b3b Add endpointaddr pkg for parsing host+port inputs. Matt Moyer 2021-05-25 14:32:57 -05:00
  • 75dd98a965 Integration test for impersonation proxy cluster ip Margo Crawford 2021-05-25 13:50:50 -07:00
  • 61362f8187 Merge pull request #639 from vmware-tanzu/dependabot/go_modules/github.com/google/go-cmp-0.5.6 Matt Moyer 2021-05-25 11:04:08 -05:00
  • f89f2281d8 Bump github.com/google/go-cmp from 0.5.5 to 0.5.6 dependabot[bot] 2021-05-25 05:51:17 +00:00
  • f5b11a0239 New docs: 1) Concierge with Supervisor, and 2) Supervisor with OpenLDAP Ryan Richard 2021-05-24 19:08:01 -07:00
  • 5e8945c616 Merge pull request #632 from vmware-tanzu/ldap_additional_unit_test Ryan Richard 2021-05-24 14:26:13 -07:00
  • 2331c2dae2 Merge branch 'main' into ldap_additional_unit_test Ryan Richard 2021-05-24 14:24:48 -07:00
  • 2014f4623d Move require.NoError() to t.Cleanup() Ryan Richard 2021-05-24 14:24:09 -07:00
  • fabc08b01b Merge branch 'main' of github.com:vmware-tanzu/pinniped into credentialissuer-spec-api Matt Moyer 2021-05-24 15:49:13 -05:00
  • 468463ce1d Merge pull request #635 from mattmoyer/fix-docs-version-to-better-default Matt Moyer 2021-05-24 14:25:48 -05:00
  • 520eb43bfd Replace all references to "a specific version" with v0.8.0. Matt Moyer 2021-05-24 11:50:16 -05:00
  • 5de9bac4ac Oof... good I wrote an integration test because that's not how updating works! Margo Crawford 2021-05-24 09:41:49 -07:00
  • 523a8d432f Merge pull request #616 from vmware-tanzu/okta-supervisor-docs Matt Moyer 2021-05-24 10:34:02 -05:00
  • 1ab1d41735 Minor cleanups on the new Supervisor+Okta docs page. Matt Moyer 2021-05-24 10:29:43 -05:00
  • 36168122cc Add doc for configuring the supervisor with okta Margo Crawford 2021-05-13 09:50:07 -07:00
  • 150e879a68 Add tests for deleting services Margo Crawford 2021-05-21 13:47:06 -07:00
  • b16e84d90a Add another unit test for the LDAP client code Ryan Richard 2021-05-21 12:44:01 -07:00
  • 722aa72206 Integration test tests update functionality Margo Crawford 2021-05-21 10:19:33 -07:00
  • 2d0cb16239 Merge pull request #631 from mattmoyer/remove-openapi-codegen Matt Moyer 2021-05-21 12:19:09 -05:00
  • b4bb0db6e5 Refactor some shared code between load balancer and cluster ip creation Margo Crawford 2021-05-21 09:57:46 -07:00
  • fd9d9b8c73 Stop generating zz_generated.openapi.go files. Matt Moyer 2021-05-21 11:16:07 -05:00
  • 44f6fd4437 Merge pull request #630 from mattmoyer/20210521-dependency-updates Matt Moyer 2021-05-21 11:12:03 -05:00
  • f0d5923091 Downgrade k8s.io/kube-openapi back to a previous version. Matt Moyer 2021-05-21 10:42:39 -05:00
  • 85ebaa96d5 Upgrade k8s.io/kube-openapi dependency. Matt Moyer 2021-05-21 10:11:26 -05:00
  • cf5bc9f1b4 Upgrade k8s.io/utils dependency. Matt Moyer 2021-05-21 10:07:41 -05:00
  • 0d02ba6af3 Upgrade k8s.io/gengo dependency. Matt Moyer 2021-05-21 10:07:00 -05:00
  • 74a569fa82 Upgrade golang.org/x/* module dependencies. Matt Moyer 2021-05-21 10:06:29 -05:00
  • 01c0514057 Upgrade github.com/pkg/browser. Matt Moyer 2021-05-21 10:00:19 -05:00
  • 0d42c1e9fe Update to Kubernetes 1.21.1 runtime components. Matt Moyer 2021-05-21 09:57:41 -05:00
  • 4606f1d8bd More error handling for cluster ip Margo Crawford 2021-05-20 16:21:10 -07:00
  • 1307c49212 Merge pull request #620 from vmware-tanzu/ldap_starttls Ryan Richard 2021-05-20 16:16:37 -07:00
  • b01665386d Use latest container image of our fork of bitnami-docker-openldap Ryan Richard 2021-05-20 15:49:34 -07:00
  • 599d70d6dc Wire generatedClusterIPServiceName through from NamesConfig Margo Crawford 2021-05-20 14:11:35 -07:00
  • 901ddd1870 Merge branch 'main' into ldap_starttls Ryan Richard 2021-05-20 13:40:56 -07:00
  • 8b549f66d4 Add integration test for LDAP StartTLS Ryan Richard 2021-05-20 13:39:48 -07:00
  • 4780c39640 Merge pull request #618 from vmware-tanzu/initial_ldap_group_support Ryan Richard 2021-05-20 13:10:23 -07:00
  • 7e76b66639 LDAP upstream watcher controller tries using both TLS and StartTLS Ryan Richard 2021-05-20 12:46:33 -07:00
  • fff90ed2ca Merge branch 'main' into initial_ldap_group_support Ryan Richard 2021-05-20 12:36:04 -07:00
  • 62651eddb0 Took care of some impersonation cluster ip related todos Margo Crawford 2021-05-20 11:57:07 -07:00
  • ec25259901 Update impersonatorconfig controller to use new CredentialIssuer update helper. Matt Moyer 2021-05-20 12:26:07 -05:00
  • e4dd83887a Merge remote-tracking branch 'origin/main' into credentialissuer-spec-api Matt Moyer 2021-05-20 10:53:53 -05:00
  • 562942cdbf Merge pull request #627 from mattmoyer/use-informers-for-credentialissuer-updates Matt Moyer 2021-05-20 10:13:41 -05:00
  • 025b37f839 upstreamldap.New() now supports a StartTLS config option Ryan Richard 2021-05-19 17:17:44 -07:00
  • 63c39454f6 WIP on impersonation clusterip service Margo Crawford 2021-05-19 17:00:28 -07:00
  • 657488fe90 Create CredentialIssuer at install, not runtime. Matt Moyer 2021-05-19 16:53:00 -05:00
  • 9e61640c92 LoadBalancerIP updated dynamically Margo Crawford 2021-05-19 14:16:15 -07:00
  • 94d6b76958 Merge branch 'initial_ldap_group_support' into ldap_starttls Ryan Richard 2021-05-19 13:12:56 -07:00
  • 424c112bbc Merge branch 'main' into initial_ldap_group_support Ryan Richard 2021-05-19 13:12:17 -07:00
  • 3bb95f1de2 Give kubeclient_test some default values for credentialissuer spec Margo Crawford 2021-05-19 11:56:54 -07:00
  • 0b66321902 Changes to make the linter pass Margo Crawford 2021-05-19 11:05:35 -07:00
  • 297a484948 Add more validation and update tests for impersonationProxy as pointer. Matt Moyer 2021-05-19 11:40:32 -05:00
  • 13372a43e6 Update generated code from previous commit. Matt Moyer 2021-05-19 11:39:53 -05:00
  • 54e0b83146 Update API so that impersonationProxy spec is a pointer. Matt Moyer 2021-05-19 11:39:28 -05:00
  • 94c370ac85 Annotations for impersonation load balancer Margo Crawford 2021-05-18 16:54:59 -07:00
  • b5063e59ab Merge branch 'initial_ldap_group_support' into ldap_starttls Ryan Richard 2021-05-18 16:39:59 -07:00
  • a6f95cfff1 Configure openldap to disallow non-TLS clients Ryan Richard 2021-05-18 16:38:12 -07:00
  • eaea3471ec Validation for service type none and external endpoint none Margo Crawford 2021-05-18 13:50:52 -07:00
  • 4a785e73e6 WIP fixing impersonatorconfig tests Matt Moyer 2021-05-18 14:54:04 -05:00
  • 51f1a0ec13 WIP: not using impersonator.config just credentialissuer directly Margo Crawford 2021-05-18 12:16:27 -07:00
  • 9af3cb1115 Change impersonation integration test to use CredentialIssuer spec Matt Moyer 2021-05-18 09:51:11 -07:00
  • 18ccf11905 Update impersonatorconfig controller to use CredentialIssuer API instead of ConfigMap. Matt Moyer 2021-05-17 17:08:05 -05:00
  • 1a131e64fe Start deploying an initial CredentialIssuer in our install YAML. Matt Moyer 2021-05-17 10:05:42 -05:00
  • e885114221 Add generated code from adding spec fields to CredentialIssuer. Matt Moyer 2021-05-14 11:55:12 -05:00
  • 26da763962 Add spec fields to CredentialIssuer. Matt Moyer 2021-05-14 10:19:45 -05:00
  • 4a456446ff Update doc comments for types_credentialissuer.go.tmpl. Matt Moyer 2021-05-11 21:23:43 -05:00
  • efeb25b8eb Merge pull request #619 from vmware-tanzu/dependabot/go_modules/github.com/creack/pty-1.1.12 Matt Moyer 2021-05-18 09:16:27 -05:00
  • f595e81dbb Bump github.com/creack/pty from 1.1.11 to 1.1.12 dependabot[bot] 2021-05-18 05:56:45 +00:00
  • 0f5f72829b Merge pull request #594 from enj/enj/i/tcr_strict_user_info Mo Khan 2021-05-17 19:28:21 -04:00
  • f40fd29c7c local-user-authenticator: stop setting UID Monis Khan 2021-05-03 15:19:28 -04:00
  • 35479e2978 cred req: disallow lossy user info translations Monis Khan 2021-05-03 14:06:49 -04:00
  • 742b70d6a4 Merge branch 'main' into initial_ldap_group_support Ryan Richard 2021-05-17 14:24:56 -07:00
  • dab5ff3788 ldap_client_test.go: Forgot to change an assertion related to groups Ryan Richard 2021-05-17 14:21:57 -07:00
  • 99099fd32f Yet more debugging of tests which only fail in main CI Ryan Richard 2021-05-17 14:20:41 -07:00
  • 65cab53a11 Merge branch 'main' into initial_ldap_group_support Ryan Richard 2021-05-17 14:12:20 -07:00
  • 8c660f09bc More debugging of tests which only fail in main CI Ryan Richard 2021-05-17 13:53:17 -07:00
  • ac431ddc6d Add more to failure message in test which only fails in main CI Ryan Richard 2021-05-17 12:57:34 -07:00
  • 3e1e8880f7 Initial support for upstream LDAP group membership Ryan Richard 2021-05-17 11:10:26 -07:00
  • 14b8fcc472 Merge pull request #555 from vmware-tanzu/initial_ldap Ryan Richard 2021-05-17 10:40:50 -07:00
  • 20b1c41bf5 Experiment to see if we can ignore read /dev/ptmx: input/output error Ryan Richard 2021-05-13 16:02:24 -07:00
  • f5bf8978a3 Cache ResourceVersion of the validated bind Secret in memory Ryan Richard 2021-05-13 15:22:36 -07:00
  • 514ee5b883 Merge branch 'main' into initial_ldap Ryan Richard 2021-05-13 14:24:10 -07:00
  • 39d7f8b6eb Merge pull request #614 from vmware-tanzu/gc-bug-tests Margo Crawford 2021-05-13 13:08:07 -07:00
  • 609883c49e Update TestSupervisorOIDCDiscovery for versioned IDP discovery endpoint Ryan Richard 2021-05-13 13:07:31 -07:00
  • f15fc66e06 pinniped get kubeconfig refactor to use oidc.NewProvider for discovery Ryan Richard 2021-05-13 12:27:42 -07:00
  • 6479015caf Remove timeout so this test doesnt take forever Margo Crawford 2021-05-13 10:23:44 -07:00
  • 67dca688d7 Add an API version to the Supervisor IDP discovery endpoint Ryan Richard 2021-05-13 10:05:56 -07:00
  • b391d5ae02 Also check that the authcode storage is around for a while Margo Crawford 2021-05-12 14:22:14 -07:00
  • 29ca8acab4 oidc_upstream_watcher.go: two methods become private funcs Ryan Richard 2021-05-12 14:05:08 -07:00
  • 1ae3c6a1ad Split package upstreamwatchers into four packages Ryan Richard 2021-05-12 14:00:39 -07:00
  • 22092e9aed Missed a usage of int64Ptr in previous commit Ryan Richard 2021-05-12 14:00:26 -07:00
  • 874f938fc7 unit test for garbage collection time for refresh and access tokens Margo Crawford 2021-05-12 13:55:54 -07:00