Commit Graph

  • 152838e998 CONTRIBUTING.md: add missing integration test dependencies Margo Crawford 2020-12-17 13:59:23 -05:00
  • 9183c3897f Merge pull request #281 from mattmoyer/upgrade-dex Matt Moyer 2020-12-17 12:50:36 -06:00
  • b009cee877 Add Margo and Mo as maintainers of Pinniped Andrew Keesler 2020-12-17 13:37:20 -05:00
  • 41832369fd Upgrade the Dex we use for local testing to v2.27.0. Matt Moyer 2020-12-14 10:56:57 -06:00
  • cc5cb394e0 Merge pull request #143 from enj/enj/i/cache_mutation_detector_unit Matt Moyer 2020-12-17 10:09:02 -06:00
  • b60542f0d1 Clean this test up a trivial amount using require.Implementsf(). Matt Moyer 2020-12-16 21:09:02 -06:00
  • dc8e7a2f39 Enable cache mutation detector in unit tests Monis Khan 2020-10-02 22:40:23 -04:00
  • 34e6e7567f Merge pull request #295 from ankeesler/fix-secret-status Matt Moyer 2020-12-17 08:26:23 -06:00
  • 04d54e622a Only set single secret status field in FederationDomainSecretsController Andrew Keesler 2020-12-17 07:41:53 -05:00
  • 4c6e1e5fb3 supervisor_login_test.go: wait for the /jwks.json endpoint to be ready Ryan Richard 2020-12-16 17:59:39 -08:00
  • b2b906f4fe supervisor_discovery_test.go: make test timeouts longer to avoid flakes Ryan Richard 2020-12-16 15:13:02 -08:00
  • 40586b255c Merge pull request #293 from vmware-tanzu/rename-oidcprovider-and-upstreamoidcprovider Margo Crawford 2020-12-16 14:58:33 -08:00
  • 196e43aa48 Rename off of main Margo Crawford 2020-12-16 14:27:09 -08:00
  • fbe1a202c2 Merge pull request #283 from vmware-tanzu/username-and-subject-claims Matt Moyer 2020-12-16 15:23:34 -06:00
  • 7dae166a69 Merge branch 'main' into username-and-subject-claims Matt Moyer 2020-12-16 15:23:19 -06:00
  • 72ce69410e Merge pull request #273 from vmware-tanzu/secret-generation Matt Moyer 2020-12-16 15:22:23 -06:00
  • 7bb0d649c0 Merge pull request #290 from mattmoyer/rename-token-exchange-scope Matt Moyer 2020-12-16 15:22:05 -06:00
  • c110e173ac Merge pull request #286 from mattmoyer/upgrade-debian-base-image Matt Moyer 2020-12-16 15:21:31 -06:00
  • 111f6513ac Upgrade base images to Debian 10.7-slim. Matt Moyer 2020-12-15 13:37:11 -06:00
  • 5367fd9fcb Trigger CI Matt Moyer 2020-12-16 15:13:28 -06:00
  • 095ba14cc8 Merge remote-tracking branch 'upstream/main' into secret-generation Andrew Keesler 2020-12-16 15:40:34 -05:00
  • 446863ad96 Merge pull request #292 from ankeesler/golang-debian-bump Andrew Keesler 2020-12-16 15:38:12 -05:00
  • 8527c363bb Rename the "pinniped.sts.unrestricted" scope to "pinniped:request-audience". Matt Moyer 2020-12-15 21:59:57 -06:00
  • 05127f4cfb Merge pull request #291 from mattmoyer/tweak-oidcclient-timeouts Matt Moyer 2020-12-16 14:23:32 -06:00
  • 653224c2ad types_jwt.go.tmpl: Replace spaces with tabs Ryan Richard 2020-12-16 12:21:30 -08:00
  • 406fc95501 Empty commit to trigger CI Margo Crawford 2020-12-16 11:49:59 -08:00
  • 01b6bf7850 Tweak timeouts in oidcclient package. Matt Moyer 2020-12-15 22:11:49 -06:00
  • 2840e4e152 Merge pull request #288 from mattmoyer/fixup-securityheaders Matt Moyer 2020-12-16 13:46:28 -06:00
  • 3948bb76d8 Be more lax in some of our test assertions. Matt Moyer 2020-12-16 13:15:38 -06:00
  • 24c01d3e54 Add an integration test to verify security headers on the supervisor authorize endpoint. Matt Moyer 2020-12-15 21:42:11 -06:00
  • 74e52187a3 Simplify securityheader package by merging header fields. Matt Moyer 2020-12-15 21:38:55 -06:00
  • 602f3c59ba Fix a regression in securityheader package. Matt Moyer 2020-12-15 21:34:34 -06:00
  • a33dace80b Upgrade golang (1.15.5 -> 1.15.6) Aram Price 2020-12-16 13:31:54 -05:00
  • 1d4012cabf jwtcachefiller_test.go: don't assert about time zones in errors Margo Crawford 2020-12-16 10:17:17 -08:00
  • dcb19150fc Nest claim configs one level deeper in JWTAuthenticatorSpec Ryan Richard 2020-12-16 09:42:19 -08:00
  • bc1dc0805e Merge pull request #289 from mattmoyer/fix-secret-type-doc-comment Matt Moyer 2020-12-16 10:09:05 -06:00
  • fec80113c7 Revert "Retry a couple of times if we fail to get a token from the Supervisor" Andrew Keesler 2020-12-16 08:26:44 -05:00
  • 5bdbfe1bc6 test/integration: more verbosity to try to track down flakes... Andrew Keesler 2020-12-16 08:23:54 -05:00
  • 404ff93102 Fix documentation comment for the UpstreamOIDCProvider's spec.client.secretName type. Matt Moyer 2020-12-15 21:52:07 -06:00
  • 78df80f128 Tests ensure OIDCProvider secrets exist aram price 2020-12-15 18:26:27 -08:00
  • 40c6a67631 Merge branch 'main' into username-and-subject-claims Ryan Richard 2020-12-15 18:09:44 -08:00
  • 91af51d38e Fix integration tests to work with the username and sub claims Ryan Richard 2020-12-15 17:16:08 -08:00
  • a10d219049 Pass through custom groups claim and username claim Margo Crawford 2020-12-15 16:11:53 -08:00
  • 0758ecfea8 Tests wait for OIDCProvider secrets to be set Andrew Keesler 2020-12-15 15:46:55 -08:00
  • 05ab8f375e Default to "username" claim in jwtcachefiller Ryan Richard 2020-12-15 14:37:38 -08:00
  • 0bd428e45d test/integration: more logging to track down flakes Aram Price 2020-12-15 16:49:24 -05:00
  • 720bc7ae42 jwtcachefiller_test.go: refactor and remove "if short skip" check Margo Crawford 2020-12-15 13:33:49 -08:00
  • 056afc17bd Merge remote-tracking branch 'upstream/main' into secret-generation Andrew Keesler 2020-12-15 15:55:46 -05:00
  • 35bb76ea82 Ensure labels are set correct on generated Supervisor secret Andrew Keesler 2020-12-15 15:55:14 -05:00
  • 3d4717b772 Merge pull request #285 from vmware-tanzu/log-unexpected-upstream Andrew Keesler 2020-12-15 15:30:20 -05:00
  • 2b7685fa23 Merge branch 'main' into log-unexpected-upstream Andrew Keesler 2020-12-15 15:30:05 -05:00
  • 9d9040944a Secrets owned by Deployment have Controller: false Andrew Keesler 2020-12-15 12:05:06 -08:00
  • 2b2f1bbfc9 Merge pull request #276 from mattmoyer/extended-e2e-cli Matt Moyer 2020-12-15 13:23:51 -06:00
  • 2edcdc92f4 Log when unexpected Upstream OIDC Providers found aram price 2020-12-15 10:49:13 -08:00
  • 0e60c93cef Add UsernameClaim and GroupsClaim to JWTAuthenticator CRD spec Ryan Richard 2020-12-15 10:36:19 -08:00
  • 0b38d6c763 Add TestE2EFullIntegration test which combines supervisor, concierge, and CLI. Matt Moyer 2020-12-15 12:26:54 -06:00
  • ff49647de4 Add some missing test logs in test/library/client.go. Matt Moyer 2020-12-15 12:26:33 -06:00
  • e0eba9d5a6 Refactor library.CreateTestJWTAuthenticator() so we can also use the supervisor as an upstream. Matt Moyer 2020-12-15 12:25:31 -06:00
  • 5ad3c65ae1 Close the right pipe output in runPinnipedLoginOIDC. Matt Moyer 2020-12-15 12:24:28 -06:00
  • aca9af748b Cleanup TestSuccessfulCredentialRequest and TestCLILoginOIDC a little. Matt Moyer 2020-12-15 12:23:52 -06:00
  • 8cdcb89cef Add a library.PinnipedCLIPath() test helper, with caching. Matt Moyer 2020-12-15 12:19:42 -06:00
  • 70fd330178 Add library.CreateTestClusterRoleBinding test helper. Matt Moyer 2020-12-15 11:49:45 -06:00
  • ad5e257600 Add a library.RandHex() test helper. Matt Moyer 2020-12-15 11:47:04 -06:00
  • 4088793cc5 Add a .ProxyEnv() helper on the test environment. Matt Moyer 2020-12-15 11:45:40 -06:00
  • b6edc3dc08 Replace TestCLIGetKubeconfig with TestCLIGetKubeconfigStaticToken. Matt Moyer 2020-12-14 18:42:02 -06:00
  • fe4e2d620d Update TestCLIGetKubeconfig to ignore stderr output from get-kubeconfig. Matt Moyer 2020-12-14 13:25:03 -06:00
  • f9691208d5 Add library.NewRestConfigFromKubeconfig() test helper. Matt Moyer 2020-12-14 18:41:11 -06:00
  • 71850419c1 Overhaul pinniped CLI subcommands. Matt Moyer 2020-12-14 18:38:19 -06:00
  • dfbb5b60de Remove pinniped get-kubeconfig CLI subcommand. Matt Moyer 2020-12-14 18:37:32 -06:00
  • 3b5f00439c Remove pinniped exchange-credential CLI subcommand. Matt Moyer 2020-12-11 15:48:50 -06:00
  • 9b7fe01648 Add a new ./pkg/conciergeclient package to replace ./internal/client. Matt Moyer 2020-12-11 15:28:19 -06:00
  • 2e784e006c Merge remote-tracking branch 'upstream/main' into secret-generation Andrew Keesler 2020-12-15 13:24:33 -05:00
  • 08cf2f7cd1 Merge pull request #284 from ankeesler/oidcprovider-enum-values Andrew Keesler 2020-12-15 13:23:16 -05:00
  • be4e34d0c0 Retry a couple of times if we fail to get a token from the Supervisor Andrew Keesler 2020-12-15 11:30:06 -05:00
  • 50f9b434e7 SameIssuerHostMustUseSameSecret is a valid OIDCProvider status Andrew Keesler 2020-12-15 11:00:44 -05:00
  • 43bb7117b7 Allow upstream group claim values to be either arrays or strings Ryan Richard 2020-12-15 08:34:24 -08:00
  • 7320928235 Get rid of TODOs in code by punting on them Andrew Keesler 2020-12-15 09:58:23 -05:00
  • d2498c96e0 Merge remote-tracking branch 'upstream/main' into secret-generation Andrew Keesler 2020-12-15 09:27:23 -05:00
  • 82ae98d9d0 Set secret names on OIDCProvider status field Andrew Keesler 2020-12-15 09:13:01 -05:00
  • 60d4a7beac Test more filters in SupervisorSecretsController (see 6e8d564013) Andrew Keesler 2020-12-15 07:58:33 -05:00
  • 9a3e60d4df go.mod: unnecessary dependency slipped in (c3f73ff) Andrew Keesler 2020-12-15 07:56:31 -05:00
  • e03e344dcd SecretHelper depends less on OIDCProvider aram price 2020-12-14 19:35:45 -08:00
  • bf86bc3383 Rename for clarity aram price 2020-12-14 18:36:56 -08:00
  • 16dfab0aff token_handler_test.go: Add tests for username and groups custom claims Ryan Richard 2020-12-14 18:27:14 -08:00
  • b799515f84 Pull symmetricsecrethelper package up to generator aram price 2020-12-14 17:38:01 -08:00
  • 417e6b1fee Merge pull request #282 from vmware-tanzu/security-headers Ryan Richard 2020-12-14 17:22:09 -08:00
  • afcd5e3e36 WIP: Adjust subject and username claims Margo Crawford 2020-12-14 17:05:53 -08:00
  • b1ee434ddf Rename in preparation for refactor aram price 2020-12-14 16:23:17 -08:00
  • 6e8d564013 Test filters in SupervisorSecretsController aram price 2020-12-14 16:08:48 -08:00
  • 16907e4453 Add Cache-Control, Pragma, Expires, and X-DNS-Prefetch-Control headers Ryan Richard 2020-12-14 15:28:32 -08:00
  • 9c79adcb26 Rename and move some code to perpare for refactor Andrew Keesler 2020-12-14 14:24:13 -08:00
  • 5b7a86ecc1 Integration test for Supervisor secret controllers Aram Price 2020-12-14 15:53:12 -05:00
  • cae0023234 Merge remote-tracking branch 'upstream/main' into secret-generation Andrew Keesler 2020-12-14 11:44:01 -05:00
  • 2f28d2a96b Synchronize the OIDCProvider secrets cache Andrew Keesler 2020-12-14 11:32:11 -05:00
  • e3ea141bf3 Reuse helper filter in generic secret gen controller Andrew Keesler 2020-12-14 10:37:27 -05:00
  • b043dae149 Finish first implementation of generic secret generator controller Andrew Keesler 2020-12-14 10:36:45 -05:00
  • 3ca877f1df WIP - preliminary OIDCProviderSecrets controller aram price 2020-12-11 20:49:10 -08:00
  • 3e31668eb0 Refactor some utilitiy methods for sharing. aram price 2020-12-11 20:48:45 -08:00
  • 9e2213cbae Rename for clarity aram price 2020-12-11 16:05:08 -08:00
  • a5c07042c1 Merge pull request #279 from vmware-tanzu/fosite-settings Ryan Richard 2020-12-11 18:19:50 -08:00