Commit Graph

  • 73716f1b91 Ignore client-side throttling in kubectl stderr Monis Khan 2021-04-19 06:23:09 -04:00
  • 521adffb17 impersonation proxy: add nested impersonation support Monis Khan 2021-04-09 17:52:53 -04:00
  • c79930f419 Merge branch 'main' into initial_ldap Ryan Richard 2021-04-16 18:33:02 -07:00
  • 70d607d87e prepare-supervisor-on-kind.sh was accidentally double base64 encoding Ryan Richard 2021-04-16 18:32:30 -07:00
  • 4c2a0b4872 Add new command-line flags to the login oidc command Ryan Richard 2021-04-16 18:30:31 -07:00
  • e9d5743845 Add authentication dry run validation to LDAPIdentityProvider Ryan Richard 2021-04-16 14:04:05 -07:00
  • 83085aa3d6 Retest the server connection when the bind Secret has changed Ryan Richard 2021-04-15 17:45:15 -07:00
  • 8e438e22e9 Only test the server connection when the spec has changed Ryan Richard 2021-04-15 16:46:27 -07:00
  • b9ce84fd68 Test the LDAP config by connecting to the server in the controller Ryan Richard 2021-04-15 14:44:43 -07:00
  • 9dfa1f5ee5 Update ROADMAP.md Matt Moyer 2021-04-15 13:43:01 -05:00
  • da7216c1ef Merge branch 'main' into initial_ldap Ryan Richard 2021-04-15 10:27:59 -07:00
  • f63ded99bc Add a flag for skipping chromedriver version check to hack script Ryan Richard 2021-04-15 10:27:00 -07:00
  • e6e6497022 Introduce upstreamldap.New to prevent changes to the underlying config Ryan Richard 2021-04-15 10:25:35 -07:00
  • 5c28d36c9b Redact some params of URLs in logs to avoid printing sensitive info Ryan Richard 2021-04-15 07:59:38 -07:00
  • e7b7b597ff Merge pull request #570 from vmware-tanzu/add-ok-amba-to-adopters Andrew Keesler 2021-04-15 09:22:16 -04:00
  • e5da119000 Merge branch 'main' into add-ok-amba-to-adopters Andrew Keesler 2021-04-15 08:56:02 -04:00
  • 12a3636351 base64 once instead of thrice Ryan Richard 2021-04-14 20:39:01 -07:00
  • 939b6b12cc ldap_client_test.go: refactor to use the LDAP server on the K8s cluster Ryan Richard 2021-04-14 17:49:40 -07:00
  • 8d75825635 Merge branch 'main' into initial_ldap Ryan Richard 2021-04-14 17:47:26 -07:00
  • 923938ab26 Avoid multi-line integration test env vars Ryan Richard 2021-04-14 17:26:12 -07:00
  • 352d4dc5b1 Add OK a.m.b.a. to adopters.md file Nanci Lancaster 2021-04-14 18:38:11 -05:00
  • e0fe184c89 Relax cpu limit on ldap server a little to make it start faster Ryan Richard 2021-04-14 08:35:04 -07:00
  • a6e1a949d2 ldap_client_test.go: mark as integration test so units skip it Ryan Richard 2021-04-14 08:12:15 -07:00
  • 47b66ceaa7 Passing integration test for LDAP login! 🚀 Ryan Richard 2021-04-13 18:11:16 -07:00
  • 6bba529b10 RBAC rules for ldapidentityproviders to grant permissions to controller Ryan Richard 2021-04-13 17:26:53 -07:00
  • 14ff5ee4ff ldap_upstream_watcher.go: decode and validate CertificateAuthorityData Ryan Richard 2021-04-13 17:16:57 -07:00
  • 51263a0f07 Return unauthenticated instead of error for bad username or password Ryan Richard 2021-04-13 16:22:13 -07:00
  • fec3d92f26 Add integration test for upstreamldap.Provider Ryan Richard 2021-04-13 15:23:14 -07:00
  • 7b8c86b38e Handle error cases during LDAP user search and bind Ryan Richard 2021-04-13 08:38:04 -07:00
  • f0c4305e53 Started implementation of LDAP user search and bind Ryan Richard 2021-04-12 17:50:25 -07:00
  • e24d5891dd ldap_upstream_watcher_test.go: add another unit test Ryan Richard 2021-04-12 14:12:51 -07:00
  • 25c1f0d523 Add Conditions to LDAPIdentityProvider's Status and start to fill them Ryan Richard 2021-04-12 13:53:21 -07:00
  • 05571abb74 Add a little more logic to ldap_upstream_watcher.go Ryan Richard 2021-04-12 11:23:08 -07:00
  • 05daa9eff5 More LDAP WIP: started controller and LDAP server connection code Ryan Richard 2021-04-09 18:49:43 -07:00
  • dab7b57da0 Merge pull request #556 from microwavables/add-search-function-to-docs Matt Moyer 2021-04-09 12:42:27 -07:00
  • 12d35583c5 Merge pull request #566 from mattmoyer/upgrade-kubernetes-1.21 Matt Moyer 2021-04-09 11:27:09 -07:00
  • 599c537d24 Remove metav1.ExportOptions from scheme tests. Matt Moyer 2021-04-09 11:11:06 -05:00
  • 38f3ea3f2f Upgrade to client-go and apimachinery from Kubernetes 1.21. Matt Moyer 2021-04-09 10:40:23 -05:00
  • e450a348c5 Merge pull request #565 from mattmoyer/cleanup-test-file Matt Moyer 2021-04-09 09:59:56 -07:00
  • 11d820be06 Remove proxy-kubeconfig.yaml. Matt Moyer 2021-04-09 09:55:27 -05:00
  • 63816aa3ba Disable Content-Security-Policy for now. Matt Moyer 2021-04-09 10:57:54 -05:00
  • e5314164c5 added search functionality to docs on Pinniped.dev Nanci Lancaster 2021-04-06 12:20:17 -05:00
  • 7781a2e17a Some renames in pkg upstreamwatcher to make room for a second controller Ryan Richard 2021-04-09 08:43:09 -07:00
  • 4ab704b7de ldap: add initial stub upstream LDAP connection package Andrew Keesler 2021-04-09 11:38:53 -04:00
  • f6ded84f07 Implement upstream LDAP support in auth_handler.go Ryan Richard 2021-04-08 17:28:01 -07:00
  • abf606ab72 Merge pull request #563 from mattmoyer/cli-caching-enhancements Matt Moyer 2021-04-08 16:48:48 -07:00
  • b59a4f3fec Use a temporary directory for credential cache in CLI tests. Matt Moyer 2021-04-08 18:14:21 -05:00
  • 3b461572ea Add cluster info to cache key for cluster-specific credential cache. Matt Moyer 2021-04-08 17:00:14 -05:00
  • 271c006b6c Add --credential-cache flag to "pinniped get kubeconfig" and tweak usage messages. Matt Moyer 2021-04-08 16:00:21 -05:00
  • 043cefcd9f Merge pull request #562 from mattmoyer/add-cluster-credential-caching Matt Moyer 2021-04-08 12:59:23 -07:00
  • 2296faaeef Add CLI caching of cluster-specific credentials. Matt Moyer 2021-04-08 10:48:45 -05:00
  • fec24d307e Fix missing normalization in pkg/oidcclient/filesession. Matt Moyer 2021-04-06 11:18:51 -05:00
  • 64b13043ed Merge pull request #561 from vmware-tanzu/Adding-OK-amba-to-adopters-file Margo Crawford 2021-04-08 11:51:40 -07:00
  • 5501b5aa13 Added Ok amba logo for adopters file Nanci Lancaster 2021-04-08 11:48:06 -05:00
  • 064e3144a2 auth_handler.go: pre-factor to make room for upstream LDAP IDPs Ryan Richard 2021-04-07 17:05:25 -07:00
  • 1f5978aa1a Supervisor pre-factor to make room for upstream LDAP identity providers Ryan Richard 2021-04-07 16:12:13 -07:00
  • 1c55c857f4 Start to fill out LDAPIdentityProvider's fields and TestSupervisorLogin Ryan Richard 2021-04-07 12:56:09 -07:00
  • 2b6859b161 Add stub LDAP API type and integration test Ryan Richard 2021-04-06 13:10:01 -04:00
  • 9968d501f4 Merge branch 'main' into initial_ldap Ryan Richard 2021-04-05 15:15:05 -07:00
  • 9450048acf Fix lint error from previous commit Ryan Richard 2021-04-05 15:14:24 -07:00
  • 702f9965ab Deploy an OpenLDAP server for integration tests Ryan Richard 2021-04-05 15:05:53 -07:00
  • c53507809d Rename dex namespace, add new ytt value to deploy/tools, and remove Tilt Andrew Keesler 2021-04-05 15:01:17 -07:00
  • 9cd2b6e855 Merge pull request #552 from mattmoyer/nicer-generated-kubeconfig-names Matt Moyer 2021-04-05 11:35:07 -07:00
  • 4e25bcd4b2 Generate more helpful context/cluster/user names in pinniped get kubeconfig Matt Moyer 2021-04-05 11:41:06 -05:00
  • 5add31d263 Merge pull request #545 from vmware-tanzu/dependabot/docker/golang-1.16.3 Matt Moyer 2021-04-05 08:58:23 -07:00
  • 88c4335b4b Display blog posts in reverse order by date. Matt Moyer 2021-04-05 10:53:44 -05:00
  • 623830bf1f Fix a typo on the timezones on the website. Matt Moyer 2021-04-05 10:50:10 -05:00
  • 30f476e1ac Bump golang from 1.16.2 to 1.16.3 dependabot[bot] 2021-04-02 05:56:43 +00:00
  • 7b82b7a010 Update CLI docs for v0.7.0 release Pinny 2021-04-01 19:15:23 +00:00
  • 44bf925c3e Merge pull request #544 from mattmoyer/blog-post-v0.7.0 Matt Moyer 2021-04-01 11:03:09 -07:00
  • d2a6d7689f Add a small note about our test grid, and mention some limitations of the first version. Matt Moyer 2021-04-01 13:00:17 -05:00
  • 23dbd7cab6 Extract out a common shortcode for the "join the community" blurb we put at the end of each blog post. Matt Moyer 2021-04-01 10:43:03 -05:00
  • e4321cb369 Add v0.7.0 blog post. Matt Moyer 2021-03-31 23:20:13 -05:00
  • ad66f67dc9 Rename existing posts for clarity. Matt Moyer 2021-03-31 15:56:36 -05:00
  • 55bc3dee7f Merge pull request #543 from mattmoyer/fix-head-version-string-validation v0.7.0 Matt Moyer 2021-03-31 14:54:26 -07:00
  • fdbeb213fb Merge pull request #540 from vmware-tanzu/prepare-supervisor-on-kind.sh Ryan Richard 2021-03-31 13:47:32 -07:00
  • 1817d6c751 Merge branch 'main' into prepare-supervisor-on-kind.sh Ryan Richard 2021-03-31 13:47:13 -07:00
  • 476cc98e5a Fix missing "v". Matt Moyer 2021-03-31 15:40:54 -05:00
  • 4cbf4959f2 Merge pull request #542 from mattmoyer/fix-head-version-string-validation Matt Moyer 2021-03-31 13:36:22 -07:00
  • e4e4e686f6 Use "0.0.0" as our fake version instead of "?.?.?" to avoid a panic. Matt Moyer 2021-03-31 15:03:40 -05:00
  • d5be37673a Merge branch 'main' into prepare-supervisor-on-kind.sh Ryan Richard 2021-03-31 11:42:06 -07:00
  • 7bb5657c4d Add hack/prepare-supervisor-on-kind.sh Ryan Richard 2021-03-31 11:39:10 -07:00
  • fe9f12a29c Merge pull request #539 from mattmoyer/upgrade-kubernetes-deps Matt Moyer 2021-03-31 11:21:54 -07:00
  • bea75bb7ac Upgrade to prereleased Kubernetes v1.20.5++ dependencies. Matt Moyer 2021-03-31 12:50:19 -05:00
  • 081de8da62 Merge pull request #538 from vmware-tanzu/dependabot/docker/debian-10.9-slim Matt Moyer 2021-03-31 06:00:27 -07:00
  • 469f864de3 Bump debian from 10.8-slim to 10.9-slim dependabot[bot] 2021-03-31 05:41:15 +00:00
  • dc510792c4 Merge pull request #536 from vmware-tanzu/secret-deletion-not-found-flake Margo Crawford 2021-03-30 15:46:32 -07:00
  • 8b6fe0ac70 Fix lint error Margo Crawford 2021-03-30 14:53:26 -07:00
  • d47603472d Do not error when trying to delete the TLS secret and you get a not found Margo Crawford 2021-03-30 14:43:04 -07:00
  • d4baeff94e Merge pull request #534 from mattmoyer/deflake-categories-test-rate-limiting Matt Moyer 2021-03-30 13:46:55 -07:00
  • 210114dbe1 Merge pull request #535 from mattmoyer/deflake-impersonation-proxy-test-dns Matt Moyer 2021-03-30 12:31:44 -07:00
  • 4ebd0f5f12 Deflake TestImpersonationProxy (especially on EKS). Matt Moyer 2021-03-30 13:47:25 -05:00
  • f02b39b80f Deflake TestGetPinnipedCategory. Matt Moyer 2021-03-30 12:29:29 -05:00
  • 608be8332e Merge pull request #533 from vmware-tanzu/eks-load-balancer-annotation Margo Crawford 2021-03-30 11:12:54 -07:00
  • 3742719427 Add annotation to make the idle timeout be over 1 hour rather than 1 minute Margo Crawford 2021-03-29 13:40:22 -07:00
  • f00a02dcca Merge pull request #529 from microwavables/main Andrew Keesler 2021-03-29 16:16:02 -04:00
  • 017c891fb8 Merge branch 'main' into main Nanci Lancaster 2021-03-29 12:29:25 -05:00
  • d8baa43903 Add new non-idle timeout integration test for impersonation proxy Margo Crawford 2021-03-29 09:30:20 -07:00
  • 5c741bc423 Merge pull request #1 from microwavables/Adding-in-TKG-and-TMC-to-Adopters Nanci Lancaster 2021-03-29 09:49:54 -05:00
  • e99e175ce2 Updated adopters.md file to include TMC and TKG Nanci Lancaster 2021-03-29 09:48:34 -05:00