Commit Graph

  • 89b00e3702 Declare war on namespaces Monis Khan 2021-02-09 13:59:32 -05:00
  • d2480e6300 Generated Monis Khan 2021-02-09 12:23:22 -05:00
  • 4205e3dedc Make concierge APIs cluster scoped Monis Khan 2021-02-09 11:57:34 -05:00
  • ee80920ffd Merge pull request #409 from mattmoyer/upgrade-debian Matt Moyer 2021-02-10 16:57:09 -06:00
  • 45f4a0528c Upgrade Debian base images from 10.7 to 10.8. Matt Moyer 2021-02-10 15:56:56 -06:00
  • d0266cecdb Merge pull request #390 from ankeesler/use-more-middleware Andrew Keesler 2021-02-10 16:38:54 -05:00
  • 0fc1f17866 internal/groupsuffix: mutate TokenCredentialRequest's Authenticator Andrew Keesler 2021-02-04 20:02:59 -05:00
  • ae6503e972 internal/plog: add KObj() and KRef() Andrew Keesler 2021-02-04 20:02:38 -05:00
  • 44b7679e9f Merge pull request #407 from ankeesler/test-flake Mo Khan 2021-02-10 14:24:44 -05:00
  • 12d5b8959d test/integration: make TestKubeCertAgent more stable Andrew Keesler 2021-02-10 11:25:08 -05:00
  • 5b076e7421 Merge pull request #404 from ankeesler/remove-deprecated-commands Andrew Keesler 2021-02-10 08:33:00 -05:00
  • 1ffe70bbea cmd/pinniped: delete get-kubeconfig + exchange-token Andrew Keesler 2021-02-09 11:17:11 -05:00
  • e4c49c37b9 Merge branch 'main' into impersonation-proxy Ryan Richard 2021-02-09 13:45:37 -08:00
  • 268ca5b7f6 Add config structs in impersonator package Ryan Richard 2021-02-09 13:42:56 -08:00
  • cf735715f6 Merge pull request #394 from enj/enj/i/server_side_tcr_api_group Mo Khan 2021-02-09 16:36:13 -05:00
  • 2679d27ced Use server scheme to handle credential request API group changes Monis Khan 2021-02-09 15:51:38 -05:00
  • 6b71b8d8ad Revert server side token credential request API group changes Monis Khan 2021-02-09 15:51:35 -05:00
  • 8697488126 internal/concierge/impersonator: use kubeconfig from kubeclient Andrew Keesler 2021-02-09 15:28:56 -05:00
  • dfcc2a1eb8 Introduce clusterhost package to determine whether a cluster has control plane nodes Margo Crawford 2021-02-05 17:01:39 -08:00
  • 812f5084a1 internal/concierge/impersonator: don't mutate ServeHTTP() req Andrew Keesler 2021-02-09 13:25:24 -05:00
  • 43da4ab2e0 SECURITY.md: follow established pattern Andrew Keesler 2021-02-09 09:07:49 -05:00
  • e4d8af6701 Merge pull request #399 from mattmoyer/upgrade-go Matt Moyer 2021-02-08 18:17:17 -06:00
  • d06c935c2c Upgrade Go from 1.15.7 to 1.15.8. Matt Moyer 2021-02-08 10:58:51 -06:00
  • 9399b5d800 Merge pull request #395 from enj/enj/i/remove_multierror Mo Khan 2021-02-05 15:14:25 -05:00
  • 05a471fdf9 Migrate callers to k8s.io/apimachinery/pkg/util/errors.NewAggregate Monis Khan 2021-02-05 12:56:05 -05:00
  • 81d4e50f94 Remove multierror package Monis Khan 2021-02-05 12:55:18 -05:00
  • 850f030fe3 Merge pull request #393 from enj/enj/i/no_op_tcr_list Matt Moyer 2021-02-05 11:09:09 -06:00
  • f7958ae75b Add no-op list support to token credential request Monis Khan 2021-02-05 10:55:19 -05:00
  • ee05f155ca Merge pull request #392 from ankeesler/flowcontrol-rbac Andrew Keesler 2021-02-05 09:19:50 -05:00
  • 2ae631b603 deploy/concierge: add RBAC for flowschemas and prioritylevelconfigurations Andrew Keesler 2021-02-05 08:19:12 -05:00
  • 9c64476aee Tweak some small bits in the blog post. Matt Moyer 2021-02-04 17:51:35 -06:00
  • b6e98b5783 Update the get.pinniped.dev redirect to always point at the latest version. Matt Moyer 2021-02-04 17:48:41 -06:00
  • 9addb4d6e0 Merge pull request #385 from vmware-tanzu/credential_request_spec_api_group v0.5.0 Matt Moyer 2021-02-04 16:19:20 -06:00
  • 2a921f7090 Merge branch 'main' into credential_request_spec_api_group Ryan Richard 2021-02-04 13:44:53 -08:00
  • bb8b65cca6 Merge pull request #387 from vmware-tanzu/blog/multiple-pinnipeds Matt Moyer 2021-02-04 15:22:52 -06:00
  • 5c331e9002 Fix go.pinniped.dev redirects. Matt Moyer 2021-02-04 14:51:31 -06:00
  • 1382fc6e5f Add a v0.5.0 "multiple Pinnipeds" blog post. Matt Moyer 2021-02-03 22:07:09 -06:00
  • cc8c917249 Merge pull request #325 from ankeesler/restart-test Andrew Keesler 2021-02-04 13:07:40 -05:00
  • ae498f14b4 test/integration: ensure no pods restart during integration tests Andrew Keesler 2021-01-12 15:55:31 -05:00
  • 288d9c999e Use custom suffix in Spec.Authenticator.APIGroup of TokenCredentialRequest Ryan Richard 2021-02-03 15:49:15 -08:00
  • 26922307ad prepare-for-integration-tests.sh: New cmdline option --api_group_suffix Andrew Keesler 2021-02-03 12:07:13 -08:00
  • 5549a262b9 Rename client_test.go to concierge_client_test.go Ryan Richard 2021-02-03 12:05:21 -08:00
  • 6b46bae6c6 Fixed integration test compile failures after rebase Margo Crawford 2021-02-03 11:32:29 -08:00
  • c5df66fbd5 Merge pull request #383 from enj/enj/i/avoid_scheme_double_register Mo Khan 2021-02-03 13:55:33 -05:00
  • 23e8c35918 Revert "CredentialIssuer contains Impersonation Proxy spec" Margo Crawford 2021-02-01 12:43:34 -08:00
  • ab60396ac4 CredentialIssuer contains Impersonation Proxy spec Margo Crawford 2021-01-29 16:38:50 -08:00
  • 343c275f46 Path to ci bundle rather than the actual value for get kubeconfig Margo Crawford 2021-01-27 15:39:16 -08:00
  • 12e41d783f Refactored execCredentialForImpersonationProxy to be shared Margo Crawford 2021-01-26 16:49:03 -08:00
  • 2f891b4bfb Add --concierge-use-impersonation-proxy to static login Margo Crawford 2021-01-26 16:08:27 -08:00
  • 170b86d0c6 Add happy path test for login oidc Margo Crawford 2021-01-26 13:34:09 -08:00
  • 07b7b743b4 Impersonation proxy cli arguments Margo Crawford 2021-01-26 11:39:42 -08:00
  • 64aff7b983 Only log user ID, not user name/groups. Matt Moyer 2021-01-22 12:12:12 -06:00
  • 1299231a48 Add integration test for impersonation proxy. Matt Moyer 2021-01-22 12:00:27 -06:00
  • b6abb022f6 Add initial implementation of impersonation proxy. Margo Crawford 2021-01-19 16:37:02 -08:00
  • 300d7bd99c Drop duplicate logic for unversioned type registration Monis Khan 2021-02-03 10:20:27 -05:00
  • 012bebd66e Avoid double registering types in server scheme Monis Khan 2021-02-03 09:21:36 -05:00
  • e1d06ce4d8 internal/mocks/mockroundtripper: we don't need these anymore Andrew Keesler 2021-02-03 08:55:38 -05:00
  • 52b98bdb87 Merge pull request #330 from enj/enj/f/better_middleware Andrew Keesler 2021-02-03 08:53:00 -05:00
  • 62c117421a internal/kubeclient: fix not found test and request body closing bug Andrew Keesler 2021-02-03 08:19:34 -05:00
  • efe1fa89fe Allow multiple Pinnipeds to work on same cluster Monis Khan 2021-01-12 20:27:41 -05:00
  • 93d25a349f hack: fix docker most recent tag check Andrew Keesler 2021-01-22 08:33:24 -05:00
  • 93ebd0f949 internal/plog: add Enabled() Andrew Keesler 2021-01-26 17:34:27 -05:00
  • 74a8005f92 Merge pull request #376 from mattmoyer/add-csrftoken-test Matt Moyer 2021-02-02 11:02:39 -06:00
  • 5b4e58f0b8 Add some trivial unit tests to internal/oidc/csrftoken. Matt Moyer 2021-02-02 09:29:09 -06:00
  • b871a02ca3 Merge pull request #375 from mattmoyer/test-coverage Matt Moyer 2021-02-01 15:19:37 -06:00
  • 6a20bbf607 Add Codecov configuration file. Matt Moyer 2021-02-01 14:28:01 -06:00
  • dfa4d639e6 Merge pull request #374 from microwavables/main Ryan Richard 2021-01-29 14:15:17 -08:00
  • 8b4024bf82 Updated the community meeting info with new zoom link and agenda notes Nanci Lancaster 2021-01-29 16:07:23 -06:00
  • d89c6546e7 Merge pull request #373 from microwavables/main Ryan Richard 2021-01-28 09:49:12 -08:00
  • 2710591429 Updated text on community meetings and added YouTube link Nanci Lancaster 2021-01-28 11:22:44 -06:00
  • 02815cfb26 Revert "Use GitHub's "latest" handling so this doesn't get out of sync." Matt Moyer 2021-01-28 10:28:46 -06:00
  • 3f7cb5d9f8 Merge pull request #372 from mattmoyer/fix-redirects-version Matt Moyer 2021-01-28 10:26:51 -06:00
  • 46ad41e813 Use GitHub's "latest" handling so this doesn't get out of sync. Matt Moyer 2021-01-28 10:25:33 -06:00
  • d4eca3a82a Fix get.pinniped.dev latest version redirects. Matt Moyer 2021-01-28 10:23:48 -06:00
  • c03a088399 Merge pull request #370 from mattmoyer/cleanup-docs Matt Moyer 2021-01-28 10:17:46 -06:00
  • f81dda4eda Add syntax highlighting CSS. Matt Moyer 2021-01-28 09:48:32 -06:00
  • 1ceef5874e Clean up docs using https://get.pinniped.dev redirects. Matt Moyer 2021-01-28 09:24:11 -06:00
  • 1b224bc4f2 Merge pull request #369 from mattmoyer/cleanup-go-sum Matt Moyer 2021-01-28 10:09:06 -06:00
  • 530d6961c2 Prune unused versions from go.sum. Matt Moyer 2021-01-28 09:03:00 -06:00
  • fe500882ef Merge pull request #365 from mattmoyer/upgrade-oleiade-reflections-dep Matt Moyer 2021-01-27 15:56:49 -06:00
  • 8358c26107 Upgrade github.com/oleiade/reflections to v1.0.1. Matt Moyer 2021-01-27 13:49:30 -06:00
  • ad9a187522 Merge pull request #335 from mattmoyer/optimize-dockerfile Matt Moyer 2021-01-27 11:35:42 -06:00
  • 8a41419b94 Optimize image build using .dockerignore and BuildKit features. Matt Moyer 2021-01-15 11:23:36 -06:00
  • 6ef7ec21cd Merge branch 'release-0.4' into main Ryan Richard 2021-01-25 15:13:14 -08:00
  • b77297c68d Validate the upstream email_verified claim when it makes sense v0.4.1 Ryan Richard 2021-01-25 09:53:52 -08:00
  • df1d15ebd1 Merge pull request from GHSA-wp53-6256-whf9 Ryan Richard 2021-01-22 12:46:53 -08:00
  • b3732e8b6c Trivial change to a comment Ryan Richard 2021-01-22 12:43:35 -08:00
  • 7e887666ce Merge pull request #349 from microwavables/main Matt Moyer 2021-01-21 15:15:01 -06:00
  • d6e6f51ced Add Google Group for meetings Nanci Lancaster 2021-01-21 14:57:14 -06:00
  • 9e21de9c47 Merge pull request #347 from mattmoyer/upgrade-go-oidc-library Matt Moyer 2021-01-21 14:39:22 -06:00
  • 04c4cd9534 Upgrade to github.com/coreos/go-oidc v3.0.0. Matt Moyer 2021-01-20 11:54:44 -06:00
  • 5821faec03 Merge pull request #342 from vmware-tanzu/pre-commit-fix Matt Moyer 2021-01-21 12:02:11 -06:00
  • 8bca244d59 Merge pull request #345 from vmware-tanzu/dependabot/docker/golang-1.15.7 Matt Moyer 2021-01-21 11:31:06 -06:00
  • 79fa96cfbc Bump golang from 1.15.6 to 1.15.7 dependabot[bot] 2021-01-21 13:56:04 +00:00
  • b5cbe018e3 Allow passing multiple redirect URIs to Dex Ryan Richard 2021-01-20 17:06:50 -05:00
  • 33f4b671d1 Merge pull request #327 from ankeesler/reenable-max-inflight-checks Andrew Keesler 2021-01-19 18:29:38 -05:00
  • 50c3e4c00f Merge branch 'main' into reenable-max-inflight-checks Andrew Keesler 2021-01-19 18:14:27 -05:00
  • 5486427d88 Merge pull request #344 from vmware-tanzu/wire-api-group-suffix Andrew Keesler 2021-01-19 18:06:12 -05:00
  • 906bfa023c test: wire API group suffix through to tests Andrew Keesler 2021-01-19 13:50:22 -05:00
  • 1c3518e18a cmd/pinniped: wire API group suffix through to client components Andrew Keesler 2021-01-19 11:29:15 -05:00