Commit Graph

  • 7ef6a02d0a Merge pull request #466 from mattmoyer/bump-dependencies Matt Moyer 2021-03-01 14:16:58 -06:00
  • c832cab8d0 Update internal/oidc/token_exchange.go for latest Fosite version. Matt Moyer 2021-03-01 13:08:41 -06:00
  • 234465789b Regenerate gomock mocks with v1.5.0. Matt Moyer 2021-03-01 10:08:57 -06:00
  • da6d69d807 Bump github.com/golang/mock from 1.4.4 to 1.5.0 dependabot[bot] 2021-02-25 15:39:55 +00:00
  • 04ef7c5456 Bump github.com/ory/fosite from 0.36.0 to 0.38.0 dependabot[bot] 2021-02-25 15:39:48 +00:00
  • f05c3092b5 Bump github.com/go-openapi/spec from 0.19.9 to 0.20.3 dependabot[bot] 2021-02-25 15:39:25 +00:00
  • 2637dc00da Bump golang from 1.15.8 to 1.16.0 dependabot[bot] 2021-02-17 05:54:07 +00:00
  • e8365d2c57 Merge pull request #467 from mattmoyer/fix-docs-title Matt Moyer 2021-03-01 11:35:56 -06:00
  • dd151b3f50 Fix missing titles on website docs. Matt Moyer 2021-03-01 11:31:27 -06:00
  • f1eeae8c71 Parse out ports from impersonation proxy endpoint config Ryan Richard 2021-02-26 15:01:38 -08:00
  • 41e4a74b57 impersonator_config_test.go: more small refactoring of test helpers Ryan Richard 2021-02-26 13:53:30 -08:00
  • fa49beb623 Change length of TLS certs and CA. Margo Crawford 2021-02-26 12:05:17 -08:00
  • 9bd206cedb impersonator_config_test.go: small refactor of test helpers Margo Crawford 2021-02-26 11:27:19 -08:00
  • 5b01e4be2d impersonator_config.go: handle more error cases Ryan Richard 2021-02-26 10:58:56 -08:00
  • bbbb40994d Prefer hostnames over IPs when making certs to match load balancer ingress Ryan Richard 2021-02-25 17:03:34 -08:00
  • f709da5569 Updated test assertions for new logger version Margo Crawford 2021-02-25 15:18:36 -08:00
  • ccb17843c1 Fix some lint errors that resulted from merging main Margo Crawford 2021-02-25 15:06:24 -08:00
  • f8111db5ff Merge branch 'main' into impersonation-proxy Ryan Richard 2021-02-25 14:50:40 -08:00
  • 3fcde8088c concierge_impersonation_proxy_test.go: Make it work on more clusters Ryan Richard 2021-02-25 14:40:02 -08:00
  • f937ae2c07 Add --concierge-credential-issuer flag to "pinniped get kubeconfig" command. Matt Moyer 2021-02-25 14:16:40 -06:00
  • 1c7c22352f Switch "get kubeconfig" flags to use --concierge-mode flag instead of boolean flag. Matt Moyer 2021-02-25 11:31:11 -06:00
  • 0cae72b391 Get hostname from load balancer ingress to use for impersonator certs Ryan Richard 2021-02-25 11:40:14 -08:00
  • 9a8c80f20a Impersonator checks cert addresses when endpoint config is a hostname Margo Crawford 2021-02-25 10:27:19 -08:00
  • a42e3708aa Merge pull request #453 from mattmoyer/bump-dependencies Matt Moyer 2021-02-25 09:33:53 -06:00
  • c8fc8a0b65 Reformat some log-based test assertions. Matt Moyer 2021-02-25 08:11:37 -06:00
  • 8fc68a4b21 WIP improved cert management in impersonator config Margo Crawford 2021-02-24 17:08:58 -08:00
  • 975d493b8a Fix some small lint errors Margo Crawford 2021-02-24 16:09:15 -08:00
  • aee7a7a72b More WIP managing TLS secrets from the impersonation config controller Ryan Richard 2021-02-24 16:03:17 -08:00
  • a31c24e5a0 Bump a bunch of minor dependencies. Matt Moyer 2021-02-24 22:37:31 +00:00
  • 943b0ff6ec Switch login flags to use --concierge-mode flag instead of boolean flag. Matt Moyer 2021-02-24 17:07:07 -06:00
  • d42c533fbb WIP managing TLS secrets from the impersonation config controller Ryan Richard 2021-02-24 10:56:24 -08:00
  • 4dbde4cf7f Fix TestImpersonationProxy on Kubernetes 1.20 with RootCAConfigMap. Matt Moyer 2021-02-24 12:08:41 -06:00
  • 7be8927d5e Add generated code for new CredentialIssuer API fields. Matt Moyer 2021-02-24 10:47:06 -06:00
  • 96d7743eab Add CredentialIssuer API fields for impersonation proxy. Matt Moyer 2021-02-24 10:45:25 -06:00
  • 2254f76b30 Fix a broken link, a typo, and tweak menu text. Matt Moyer 2021-02-24 09:23:21 -06:00
  • 852c1b7a27 Fix some copy-paste errors on install-supervisor.md. Matt Moyer 2021-02-23 16:01:40 -06:00
  • 522210adb6 Merge pull request #447 from mattmoyer/website-security-headers Matt Moyer 2021-02-23 14:39:31 -06:00
  • a4089fcc72 Add security headers to the website. Matt Moyer 2021-02-23 14:26:58 -06:00
  • 60034b39a3 Fix wording on website hero text. Matt Moyer 2021-02-23 12:17:26 -08:00
  • 2f7c80a5e0 Merge pull request #446 from mattmoyer/more-website-tweaks Matt Moyer 2021-02-23 14:13:27 -06:00
  • 827e6e0dc0 More website tweaks. Matt Moyer 2021-02-23 13:55:42 -06:00
  • dac1c9939e concierge_impersonation_proxy_test.go: Test all the verbs Margo Crawford 2021-02-23 10:38:02 -08:00
  • a6d74ea876 Merge pull request #443 from mattmoyer/reorg-docs Matt Moyer 2021-02-23 11:12:32 -06:00
  • 7a1d92a8d4 Restructure docs into new layout. Matt Moyer 2021-02-22 17:52:23 -06:00
  • f2db76a0d5 Fix typo in multiple-pinnipeds post. Matt Moyer 2021-02-22 09:36:29 -06:00
  • 3721632de2 Move scope doc out of website to SCOPE.md. Matt Moyer 2021-02-18 10:10:35 -06:00
  • 4de949fe18 Rework docs sidebar to have some nesting. Matt Moyer 2021-02-17 17:02:57 -06:00
  • 069b3fba37 Merge remote-tracking branch 'upstream/main' into impersonation-proxy Andrew Keesler 2021-02-23 12:10:52 -05:00
  • e74dd47b1d Merge pull request #439 from enj/enj/f/whoami_api Mo Khan 2021-02-23 10:40:38 -05:00
  • 6a9f57f83d TestWhoAmI: support older clusters (CSR and impersonation) Monis Khan 2021-02-22 23:30:02 -05:00
  • 80ff5c1f17 Fix bug which prevented watches from working through impersonator Ryan Richard 2021-02-22 17:23:11 -08:00
  • aa22047a0f Generated Monis Khan 2021-02-19 13:55:01 -05:00
  • abc941097c Add WhoAmIRequest Aggregated Virtual REST API Monis Khan 2021-02-19 13:21:10 -05:00
  • 62630d6449 getAggregatedAPIServerScheme: move group version logic internally Monis Khan 2021-02-19 10:10:30 -05:00
  • f228f022f5 Merge pull request #435 from enj/enj/c/bump_v0.20.4 Mo Khan 2021-02-19 10:59:40 -05:00
  • 1c1decfaf1 Generated Monis Khan 2021-02-19 10:33:10 -05:00
  • 7786c83b0d Bump kube deps to v0.20.4 Monis Khan 2021-02-19 10:26:53 -05:00
  • 41b75e6977 Merge pull request #431 from enj/enj-patch-1 Mo Khan 2021-02-19 08:48:06 -05:00
  • a54e1145a5 concierge API service: update groupPriorityMinimum and versionPriority Mo Khan 2021-02-19 07:47:38 -05:00
  • b8592a361c Add some comments to concierge_impersonation_proxy_test.go Ryan Richard 2021-02-18 16:27:03 -08:00
  • 19881e4d7f Increase how long we wait for loadbalancers to be deleted for int test Margo Crawford 2021-02-18 15:58:27 -08:00
  • 126f9c0da3 certs_manager.go: Rename some local variables Ryan Richard 2021-02-18 11:16:34 -08:00
  • 7a140bf63c concierge_impersonation_proxy_test.go: add an eventually loop Margo Crawford 2021-02-18 11:08:13 -08:00
  • f5fedbb6b2 Add Service resource "delete" permission to Concierge RBAC Ryan Richard 2021-02-18 10:59:58 -08:00
  • 957cb2d56c Merge remote-tracking branch 'upstream/main' into impersonation-proxy Andrew Keesler 2021-02-18 13:37:28 -05:00
  • b3cdc438ce internal/concierge/impersonator: reuse kube bearertoken.Authenticator Andrew Keesler 2021-02-18 10:13:24 -05:00
  • 22a3e73bac impersonator_config_test.go: use require.Len() when applicable Margo Crawford 2021-02-17 17:29:56 -08:00
  • 0ad91c43f7 ImpersonationConfigController uses servicesinformer Margo Crawford 2021-02-17 17:22:13 -08:00
  • 2b208807a6 Merge pull request #426 from mattmoyer/website-accessibility-tweaks Matt Moyer 2021-02-17 17:28:03 -06:00
  • 25f841d063 Tweak website styles for accessibility. Matt Moyer 2021-02-17 17:08:34 -06:00
  • 10b769c676 Fixed integration tests for load balancer capabilities Margo Crawford 2021-02-17 10:32:29 -08:00
  • 67da840097 Add loadbalancer for impersonation proxy when needed Margo Crawford 2021-02-16 15:57:02 -08:00
  • 93d4581721 Workaround a bad module version to fix Dependabot. Matt Moyer 2021-02-16 17:05:33 -06:00
  • 0a7c5b0604 Merge pull request #403 from mattmoyer/add-latest-generated-package Matt Moyer 2021-02-16 15:30:48 -06:00
  • acbeb93f79 Don't lint generated code. Matt Moyer 2021-02-16 13:18:18 -06:00
  • 6565265bee Use new 'go.pinniped.dev/generated/latest' package. Matt Moyer 2021-02-16 13:00:08 -06:00
  • b42a34d822 Add generated client code for 'latest'. Matt Moyer 2021-02-09 09:46:38 -06:00
  • 3ce3403b95 Update ./hack/update.sh to add a "latest" package. Matt Moyer 2021-02-09 09:45:28 -06:00
  • eb19980110 internal/concierge/impersonator: set user extra impersonation headers Andrew Keesler 2021-02-16 09:09:54 -05:00
  • c7905c6638 internal/concierge/impersonator: fail if impersonation headers set Andrew Keesler 2021-02-16 08:15:50 -05:00
  • fdd8ef5835 internal/concierge/impersonator: handle custom login API group Andrew Keesler 2021-02-15 18:00:10 -05:00
  • 25bc8dd8a9 test/integration: hopefully fix TestImpersonationProxy Andrew Keesler 2021-02-15 18:04:12 -05:00
  • 6512ab1351 internal/concierge/impersonator: don't care about namespace Andrew Keesler 2021-02-11 17:27:27 -05:00
  • 5cd60fa5f9 Move starting/stopping impersonation proxy server to a new controller Ryan Richard 2021-02-11 17:22:47 -08:00
  • fac571b51a Merge pull request #410 from ankeesler/update-copyright Andrew Keesler 2021-02-11 12:26:31 -05:00
  • 9b87906a30 Merge remote-tracking branch 'upstream/main' into impersonation-proxy Andrew Keesler 2021-02-11 10:38:08 -05:00
  • c8b1f00107 generated: include 2021 in copyright Andrew Keesler 2021-02-11 10:52:01 -05:00
  • f015ad5852 Merge pull request #405 from enj/enj/i/cluster_scope_concierge v0.6.0 Mo Khan 2021-02-11 08:50:42 -05:00
  • b04fd46319 Update federation domain logic to use status subresource Monis Khan 2021-02-10 21:46:03 -05:00
  • 4c304e4224 Assert all APIs have a status subresource Monis Khan 2021-02-10 21:20:19 -05:00
  • 0a9f446893 Update credential issuer logic to use status subresource Monis Khan 2021-02-10 20:59:46 -05:00
  • 96cec59236 Generated Monis Khan 2021-02-10 20:03:15 -05:00
  • 4faf724c2c Make credential issuer status optional Monis Khan 2021-02-10 20:02:36 -05:00
  • de88ae2f61 Fix status related RBAC Monis Khan 2021-02-10 18:02:18 -05:00
  • dd3d1c8b1b Generated Monis Khan 2021-02-10 17:49:21 -05:00
  • 2e9baf9fa6 Correctly generate status subresource for all CRDs Monis Khan 2021-02-10 17:42:08 -05:00
  • ac01186499 Use API service as owner ref for cluster scoped resources Monis Khan 2021-02-10 11:12:03 -05:00
  • 2eb01bd307 authncache: remove namespace concept Monis Khan 2021-02-09 18:16:22 -05:00
  • 741b8fe88d Generated Monis Khan 2021-02-09 16:21:17 -05:00
  • d25c6d9d0a Make kubebuilder CRDs cluster scoped Monis Khan 2021-02-09 16:17:53 -05:00