Commit Graph

  • 6063674623 Merge pull request #130 from mattmoyer/add-cla-doc Matt Moyer 2020-09-22 14:20:19 -05:00
  • d574fe05ba Add a section about our CLA. Matt Moyer 2020-09-22 14:15:14 -05:00
  • 4369cc9ff2 Merge pull request #129 from mattmoyer/test-fixes Matt Moyer 2020-09-22 13:33:40 -05:00
  • adf263b566 Harden some tests against slow IDP controllers using Eventually(). Matt Moyer 2020-09-22 11:50:00 -05:00
  • 4edda802e5 Avoid a bug where long test names overflow the max label length. Matt Moyer 2020-09-22 11:23:34 -05:00
  • db9a97721f Merge remote-tracking branch 'upstream/main' into 1-19-exec-strategy Andrew Keesler 2020-09-22 11:54:47 -04:00
  • 3578d7cb9a Merge pull request #128 from mattmoyer/add-idp-selector Matt Moyer 2020-09-22 10:51:44 -05:00
  • 83920db502 Merge remote-tracking branch 'upstream/main' into 1-19-exec-strategy Andrew Keesler 2020-09-22 11:39:07 -04:00
  • 1a4f9e3466 kubecertagent: get integration tests passing again Andrew Keesler 2020-09-22 11:38:13 -04:00
  • e574a99c5e Add an integration test that tries to use a non-existent IDP. Matt Moyer 2020-09-22 10:02:32 -05:00
  • 16ef2baf8a Sort idpcache keys to make things as deterministic as possible. Matt Moyer 2020-09-22 09:50:34 -05:00
  • 9beb3855b5 Create webhooks per-test and explicitly in demo.md instead of with ytt in ./deploy. Matt Moyer 2020-09-21 19:55:04 -05:00
  • 81f2362543 Remove fallback support for implicitly choosing an IDP in TokenCredentialRequest. Matt Moyer 2020-09-21 17:42:27 -05:00
  • 07f0181fa3 Add IDP selection to get-kubeconfig command. Matt Moyer 2020-09-21 17:41:30 -05:00
  • 481308215d Pass namespace properly in client.ExchangeToken. Matt Moyer 2020-09-21 17:31:07 -05:00
  • 381fd51e13 Refactor get_kubeconfig.go. Matt Moyer 2020-09-21 15:42:54 -05:00
  • 541336b997 Fix docstring for exchange credential CLI. Matt Moyer 2020-09-21 13:02:59 -05:00
  • 6cdd4a9506 Add support for multiple IDPs selected using IdentityProvider field. Matt Moyer 2020-09-21 11:37:54 -05:00
  • fbe0551426 Add IDP selector support in client code. Matt Moyer 2020-09-17 17:11:47 -05:00
  • 164f64a370 Add IdentityProvider field to TokenCredentialRequestSpec. Matt Moyer 2020-09-17 11:18:29 -05:00
  • 526be79b11 Finish WIP from previous commits: agent pods created in install namespace Ryan Richard 2020-09-21 17:15:36 -07:00
  • 820f1e977e Continue the WIP from the previous commit: finish adding second informer Ryan Richard 2020-09-21 16:37:22 -07:00
  • 50258fc569 WIP: start to create kube-cert-agent pods in namespace Andrew Keesler 2020-09-21 16:27:00 -04:00
  • 0d3ad0085d Fix lint error from previous commit Ryan Richard 2020-09-21 12:30:53 -07:00
  • cfb76a538c Refactor kubectl exec test in TestCLI to avoid assuming any RBAC settings Ryan Richard 2020-09-21 11:40:11 -07:00
  • e18b6fdddc deploy: add kube-cert-agent deployment knobs Andrew Keesler 2020-09-21 14:16:32 -04:00
  • 5a608cc84c Add kube-cert-agent controller for getting kube API keypair Andrew Keesler 2020-09-21 14:16:14 -04:00
  • 49145791cc Merge pull request #127 from vmware-tanzu/rename_stuff Ryan Richard 2020-09-18 16:58:44 -07:00
  • 6989e5da63 Merge branch 'main' into rename_stuff Ryan Richard 2020-09-18 16:39:58 -07:00
  • a2365b1cce Remove -count 1 from unit test running in module.sh Ryan Richard 2020-09-18 15:58:22 -07:00
  • 80a520390b Rename many of resources that are created in Kubernetes by Pinniped Ryan Richard 2020-09-18 15:56:50 -07:00
  • 86e1c99dcd Merge pull request #126 from mattmoyer/remove-old-apis Matt Moyer 2020-09-18 17:52:14 -05:00
  • 78ac27c262 Remove deprecated "pinniped.dev" API group. Matt Moyer 2020-09-18 17:15:04 -05:00
  • f86a5244a6 Merge pull request #125 from mattmoyer/remove-old-apis Pinny 2020-09-18 16:55:09 -05:00
  • 907ccb68f5 Move CredentialIssuerConfig into new "config.pinniped.dev" API group. Matt Moyer 2020-09-18 16:38:45 -05:00
  • 98490b1a1b Merge pull request #124 from mattmoyer/add-vanity-imports Matt Moyer 2020-09-18 15:18:32 -05:00
  • 2d4d7e588a Add Go vanity import paths. Matt Moyer 2020-09-18 14:56:24 -05:00
  • 24f962f1b8 Ignore a lint err in cli_test.go Ryan Richard 2020-09-18 10:52:31 -07:00
  • 2ecb43154b Enhance TestCLI integration test so it can catch mistakes with env vars Ryan Richard 2020-09-18 10:27:15 -07:00
  • dba951fe89 Note that CLI warning can be ignored in demo.md Ryan Richard 2020-09-18 09:24:04 -07:00
  • 245854b85a Update demo.md Ryan Richard 2020-09-18 09:11:56 -07:00
  • 5867f3699c Merge pull request #123 from ankeesler/kubernetes-deep-equal Andrew Keesler 2020-09-18 07:48:57 -04:00
  • 7d5f57f923 PR template is not working, so trying moving it up one directory Ryan Richard 2020-09-17 16:36:33 -07:00
  • 2d497cbd36 Update the demo; most importantly remove the base64 decoding of the CA Ryan Richard 2020-09-17 16:08:45 -07:00
  • eabe51c446 local-user-authenticator can be deployed from a private registry image Ryan Richard 2020-09-17 16:07:31 -07:00
  • a479450940 CLI's get-kubeconfig subcommand now also sets PINNIPED_NAMESPACE env var Ryan Richard 2020-09-17 16:05:56 -07:00
  • b523e5832c internal/controller/issuerconfig: use Kubernetes DeepEqual Andrew Keesler 2020-09-17 17:35:14 -04:00
  • 079e07a51f Fix mistake in ytt/kapp command in demo.md Ryan Richard 2020-09-17 14:07:18 -07:00
  • 025940d4f1 Merge pull request #121 from mattmoyer/switch-orgs Matt Moyer 2020-09-17 13:24:56 -05:00
  • 8c9c1e206d Update module/package names to match GitHub org switch. Matt Moyer 2020-09-17 12:56:54 -05:00
  • 4c9cbf0706 Remove mention of things not yet implemented from architecture.md Ryan Richard 2020-09-17 09:10:19 -07:00
  • a70a4766d2 Merge pull request #92 from suzerain-io/dependabot/docker/golang-1.15.2 Matt Moyer 2020-09-17 10:24:04 -05:00
  • 1741f832eb Merge pull request #114 from mattmoyer/new-token-credential-request-api Matt Moyer 2020-09-17 10:23:22 -05:00
  • b3327d7522 Switch our client over to use the new TokenCredentialRequest API. Matt Moyer 2020-09-16 15:03:54 -05:00
  • 10793ac11f Allow anonymous access to TokenCredentialRequests. Matt Moyer 2020-09-16 15:03:36 -05:00
  • 7ce760a5dd Register a second APIService for the login.pinniped.dev. Matt Moyer 2020-09-16 15:00:03 -05:00
  • af034befb0 Paramaterize the APIService name in apiServiceUpdaterController rather than hardcoding. Matt Moyer 2020-09-16 14:59:23 -05:00
  • a8487b78c9 Add some conversions to allow our REST handler to handle both old and new credential request APIs. Matt Moyer 2020-09-16 14:57:18 -05:00
  • 58bf93b10c Add a new login.pinniped.dev API group with TokenCredentialRequest. Matt Moyer 2020-09-16 09:04:20 -05:00
  • f464e03380 Generate code against 1.17.11 Andrew Keesler 2020-09-17 10:33:33 -04:00
  • efbe3a26c1 Merge pull request #111 from suzerain-io/contributor_guide_updates Ryan Richard 2020-09-16 16:48:26 -07:00
  • 4f59d9286c Update community meeting link to one which requires a host to be present Andrew Keesler 2020-09-16 16:39:59 -07:00
  • 6c75de9334 Use public container images for codegen as as defaults when deploying Andrew Keesler 2020-09-16 15:46:51 -07:00
  • f425eed07c Small edits to PR template file Ryan Richard 2020-09-16 09:06:36 -07:00
  • 7a975d98fb First draft of a PR template file. Ryan Richard 2020-09-16 08:56:18 -07:00
  • 635ecd7b1a Merge branch 'main' into contributor_guide_updates Ryan Richard 2020-09-16 08:32:34 -07:00
  • 29305777bb Bump golang from 1.15.1 to 1.15.2 dependabot[bot] 2020-09-16 14:59:35 +00:00
  • 6d0b83aabf Merge pull request #113 from ankeesler/pinniped-copyright Andrew Keesler 2020-09-16 10:58:40 -04:00
  • 6ba712d612 Fix copyright format in hack/header.txt Andrew Keesler 2020-09-16 10:42:26 -04:00
  • eab5c2b86b Save 2 lines by using inline-style comments for Copyright Andrew Keesler 2020-09-16 10:19:51 -04:00
  • e7b389ae6c Update copyright to reference Pinniped contributors Andrew Keesler 2020-09-16 10:05:51 -04:00
  • e51e51dfd4 Add link to public Pinniped Biweekly Community Meeting agenda/notes doc Ryan Richard 2020-09-15 18:19:20 -07:00
  • cd0194cb68 Contributor guide updates Ryan Richard 2020-09-15 17:59:40 -07:00
  • a73f14e03d Revert "Fake README update to test a change to the PR pipeline" Ryan Richard 2020-09-15 16:43:04 -07:00
  • e3b8c3b611 Fake README update to test a change to the PR pipeline Ryan Richard 2020-09-15 16:41:39 -07:00
  • da9f24cf30 Merge pull request #99 from ankeesler/arch-doc Ryan Richard 2020-09-15 16:20:31 -07:00
  • 67de7f5646 Further explain the webhook API in architecture.md Ryan Richard 2020-09-15 16:18:48 -07:00
  • 43c69ec339 Update the architecture diagram Ryan Richard 2020-09-15 16:07:09 -07:00
  • 014fb518bc Change one usage of "external" back to "upstream" Ryan Richard 2020-09-15 14:04:05 -07:00
  • 321c6a5392 Merge remote-tracking branch 'origin/main' into arch-doc Ryan Richard 2020-09-15 14:02:21 -07:00
  • db98f2810f Merge pull request #98 from suzerain-io/get_kubeconfig_cli Ryan Richard 2020-09-15 13:34:14 -07:00
  • 062dfa3e75 Merge pull request #100 from ankeesler/adopters-doc Andrew Keesler 2020-09-15 16:20:35 -04:00
  • 1244a950e7 Merge pull request #108 from mattmoyer/cleanup-credential-request-api Matt Moyer 2020-09-15 15:03:07 -05:00
  • 8df910361c Clean up CredentialRequest types.go. Matt Moyer 2020-09-15 14:10:46 -05:00
  • 37da441e96 Merge pull request #107 from mattmoyer/tidy-go-modules Matt Moyer 2020-09-15 14:29:39 -05:00
  • 6faf224e20 Merge pull request #105 from mattmoyer/extend-readiness-check Matt Moyer 2020-09-15 14:27:42 -05:00
  • 92372d20a9 Tidy go.mod/go.sum. Matt Moyer 2020-09-15 13:57:35 -05:00
  • 12f0997193 Wait for informers to sync before we pass readiness check. Matt Moyer 2020-09-15 13:52:08 -05:00
  • e428877473 Merge pull request #106 from mattmoyer/fix-webhook-base64-encoding Matt Moyer 2020-09-15 14:12:02 -05:00
  • cecd691a84 Add demo instructions Ryan Richard 2020-09-15 12:10:20 -07:00
  • 1c7b3c3072 Fix base64 encoding style in webhookcachefiller. Matt Moyer 2020-09-15 13:54:19 -05:00
  • b1ea04b036 Merge pull request #83 from mattmoyer/add-idp-config-crd Matt Moyer 2020-09-15 12:53:31 -05:00
  • 36a66f4e8b Merge pull request #104 from ankeesler/maintainers-doc Andrew Keesler 2020-09-15 13:31:15 -04:00
  • b39160e4c4 Add some log output to TestCredentialIssuerConfig for troubleshooting. Matt Moyer 2020-09-15 12:04:46 -05:00
  • a22b414b58 MAINTAINERS.md: add initial draft Andrew Keesler 2020-09-15 11:12:31 -04:00
  • 8de046a561 Remove static webhook config options. Matt Moyer 2020-09-14 10:48:11 -05:00
  • f7c9ae8ba3 Validate tokens using the new dynamic IDP cache instead of the static config. Matt Moyer 2020-09-14 10:47:16 -05:00
  • 75ea0f48d9 Add a controller to clean up stale entries in the idpcache.Cache. Matt Moyer 2020-09-14 10:42:42 -05:00
  • acfc5acfb2 Add a controller to fill the idpcache.Cache from WebhookIdentityProvider objects. Matt Moyer 2020-09-14 10:41:36 -05:00
  • 6506a82b19 Add a cache of active IDPs, which implements authenticator.Token. Matt Moyer 2020-09-14 09:36:06 -05:00