ContainerImage.Pinniped/go.mod

module go.pinniped.dev

go 1.14

require (
	cloud.google.com/go v0.60.0 // indirect
	github.com/MakeNowJust/heredoc/v2 v2.0.1
	github.com/coreos/go-oidc/v3 v3.0.0
	github.com/davecgh/go-spew v1.1.1
	github.com/go-logr/logr v0.4.0
	github.com/go-logr/stdr v0.4.0
	github.com/go-openapi/spec v0.20.3
	github.com/gofrs/flock v0.8.0
	github.com/golang/mock v1.5.0
	github.com/google/go-cmp v0.5.5
	github.com/google/gofuzz v1.2.0
	github.com/gorilla/securecookie v1.1.1
	github.com/gorilla/websocket v1.4.2
	github.com/oleiade/reflections v1.0.1 // indirect
	github.com/onsi/ginkgo v1.13.0 // indirect
	github.com/ory/fosite v0.39.0
	github.com/pkg/browser v0.0.0-20201207095918-0426ae3fba23
	github.com/pkg/errors v0.9.1
	github.com/sclevine/agouti v3.0.0+incompatible
	github.com/sclevine/spec v1.4.0
	github.com/spf13/cobra v1.1.3
	github.com/spf13/pflag v1.0.5
	github.com/stretchr/testify v1.7.0
	golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83
	golang.org/x/net v0.0.0-20210226172049-e18ecbb05110
	golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d
	golang.org/x/sync v0.0.0-20201207232520-09787c993a3a
	gopkg.in/square/go-jose.v2 v2.5.1
	k8s.io/api v0.21.0
	k8s.io/apimachinery v0.21.0
	k8s.io/apiserver v0.21.0
	k8s.io/client-go v0.21.0
	k8s.io/component-base v0.21.0
	k8s.io/gengo v0.0.0-20201214224949-b6c5ce23f027
	k8s.io/klog/v2 v2.8.0
	k8s.io/kube-aggregator v0.21.0
	k8s.io/kube-openapi v0.0.0-20210305001622-591a79e4bda7
	k8s.io/utils v0.0.0-20201110183641-67b214c5f920
	sigs.k8s.io/yaml v1.2.0
)

// Workaround a broken module version (see https://github.com/oleiade/reflections/issues/14).
// We need this until none of our deps tries to pull in v1.0.0, otherwise some tools like
// Dependabot will fail on our module.
replace github.com/oleiade/reflections v1.0.0 => github.com/oleiade/reflections v1.0.1

// We were never vulnerable to CVE-2020-26160 but this avoids future issues
// This fork is not particularly better though:
// https://github.com/form3tech-oss/jwt-go/issues/7
// We use the SHA of github.com/form3tech-oss/jwt-go@v3.2.2 to get around "used for two different module paths"
// https://golang.org/issues/26904
replace github.com/dgrijalva/jwt-go v3.2.0+incompatible => github.com/form3tech-oss/jwt-go v0.0.0-20200915135329-9162a5abdbc0
Add Go vanity import paths. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-09-18 19:56:24 +00:00			`module go.pinniped.dev`
Hello, world! 2020-07-03 00:05:59 +00:00
			`go 1.14`
Add a simple /healthz endpoint - Also remove the old hello world code Signed-off-by: Andrew Keesler <akeesler@vmware.com> 2020-07-06 23:07:21 +00:00
Add initial linter configuration. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-07-07 19:35:20 +00:00			`require (`
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-12-17 19:08:15 +00:00			`cloud.google.com/go v0.60.0 // indirect`
Organize Pinniped CLI into subcommands; Add get-kubeconfig subcommand - Add flag parsing and help messages for root command, `exchange-credential` subcommand, and new `get-kubeconfig` subcommand - The new `get-kubeconfig` subcommand is a work in progress in this commit - Also add here.Doc() and here.Docf() to enable nice heredocs in our code 2020-09-12 00:56:05 +00:00			`github.com/MakeNowJust/heredoc/v2 v2.0.1`
Upgrade to github.com/coreos/go-oidc v3.0.0. See https://github.com/coreos/go-oidc/releases/tag/v3.0.0 for release notes. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-01-20 17:54:44 +00:00			`github.com/coreos/go-oidc/v3 v3.0.0`
Merge the `./test` packages back into the main module. We were using this at one point to control which tests ran with `go test ./...`, but now we're also using the `-short` flag to differentiate unit vs. integration tests. Hopefully this will simplify things a bit. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-08-25 15:27:18 +00:00			`github.com/davecgh/go-spew v1.1.1`
Bump a bunch of minor dependencies. Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0) Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 0.3.0 to 0.4.0. - [Release notes](https://github.com/go-logr/logr/releases) - [Commits](https://github.com/go-logr/logr/compare/v0.3.0...v0.4.0) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.4.0...v2.5.0) Bumps [github.com/go-logr/stdr](https://github.com/go-logr/stdr) from 0.2.0 to 0.4.0. - [Release notes](https://github.com/go-logr/stdr/releases) - [Commits](https://github.com/go-logr/stdr/compare/v0.2.0...v0.4.0) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.1 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.1...v1.1.3) Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-02-24 22:37:31 +00:00			`github.com/go-logr/logr v0.4.0`
			`github.com/go-logr/stdr v0.4.0`
Bump github.com/go-openapi/spec from 0.19.9 to 0.20.3 Bumps [github.com/go-openapi/spec](https://github.com/go-openapi/spec) from 0.19.9 to 0.20.3. - [Release notes](https://github.com/go-openapi/spec/releases) - [Commits](https://github.com/go-openapi/spec/compare/v0.19.9...v0.20.3) Signed-off-by: dependabot[bot] <support@github.com> 2021-02-25 15:39:25 +00:00			`github.com/go-openapi/spec v0.20.3`
Add a file-based session cache. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-10-21 17:54:26 +00:00			`github.com/gofrs/flock v0.8.0`
Bump github.com/golang/mock from 1.4.4 to 1.5.0 Bumps [github.com/golang/mock](https://github.com/golang/mock) from 1.4.4 to 1.5.0. - [Release notes](https://github.com/golang/mock/releases) - [Changelog](https://github.com/golang/mock/blob/master/.goreleaser.yml) - [Commits](https://github.com/golang/mock/compare/v1.4.4...v1.5.0) Signed-off-by: dependabot[bot] <support@github.com> 2021-02-25 15:39:55 +00:00			`github.com/golang/mock v1.5.0`
Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.4 to 0.5.5. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](https://github.com/google/go-cmp/compare/v0.5.4...v0.5.5) Signed-off-by: dependabot[bot] <support@github.com> 2021-03-05 05:59:54 +00:00			`github.com/google/go-cmp v0.5.5`
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-12-17 19:08:15 +00:00			`github.com/google/gofuzz v1.2.0`
WIP for saving authorize endpoint state into upstream state param Signed-off-by: Ryan Richard <richardry@vmware.com> 2020-11-11 01:58:00 +00:00			`github.com/gorilla/securecookie v1.1.1`
Add integration test for using WhoAmIRequest through impersonator 2021-03-11 00:57:15 +00:00			`github.com/gorilla/websocket v1.4.2`
Upgrade github.com/oleiade/reflections to v1.0.1. This project overwrote the v1.0.0 tag with a different commit ID, which has caused issues with the Go module sum DB (which accurately detected the issue). This has been one of the reasons why Dependabot is not updating our Go dependencies. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-01-27 19:49:30 +00:00			`github.com/oleiade/reflections v1.0.1 // indirect`
Remove our main module dependency on golangci-lint. We will still pin this in CI via an image dependency. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-12-17 22:30:34 +00:00			`github.com/onsi/ginkgo v1.13.0 // indirect`
Bump github.com/ory/fosite from 0.38.0 to 0.39.0 Bumps [github.com/ory/fosite](https://github.com/ory/fosite) from 0.38.0 to 0.39.0. - [Release notes](https://github.com/ory/fosite/releases) - [Changelog](https://github.com/ory/fosite/blob/master/CHANGELOG.md) - [Commits](https://github.com/ory/fosite/compare/v0.38.0...v0.39.0) Signed-off-by: dependabot[bot] <support@github.com> 2021-03-09 05:50:01 +00:00			`github.com/ory/fosite v0.39.0`
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-12-17 19:08:15 +00:00			`github.com/pkg/browser v0.0.0-20201207095918-0426ae3fba23`
Finished tests for pkce storage and added it to kubestorage - Also fixed some lint errors with v1.33.0 of the linter Signed-off-by: Margo Crawford <margaretc@vmware.com> 2020-12-01 22:53:22 +00:00			`github.com/pkg/errors v0.9.1`
Add initial CLI integration test for OIDC login. This is our first test using a real browser to interact with an upstream provider. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-10-13 15:41:53 +00:00			`github.com/sclevine/agouti v3.0.0+incompatible`
Add placeholder-name CLI - main and unit tests for main - client package to be done in a future commit Signed-off-by: Aram Price <pricear@vmware.com> 2020-07-27 23:49:43 +00:00			`github.com/sclevine/spec v1.4.0`
Bump a bunch of minor dependencies. Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0) Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 0.3.0 to 0.4.0. - [Release notes](https://github.com/go-logr/logr/releases) - [Commits](https://github.com/go-logr/logr/compare/v0.3.0...v0.4.0) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.4.0...v2.5.0) Bumps [github.com/go-logr/stdr](https://github.com/go-logr/stdr) from 0.2.0 to 0.4.0. - [Release notes](https://github.com/go-logr/stdr/releases) - [Commits](https://github.com/go-logr/stdr/compare/v0.2.0...v0.4.0) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.1 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.1...v1.1.3) Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-02-24 22:37:31 +00:00			`github.com/spf13/cobra v1.1.3`
Switch back to an exec-based approach to grab the controller-manager CA. (#65) This switches us back to an approach where we use the Pod "exec" API to grab the keys we need, rather than forcing our code to run on the control plane node. It will help us fail gracefully (or dynamically switch to alternate implementations) when the cluster is not self-hosted. Signed-off-by: Matt Moyer <moyerm@vmware.com> Co-authored-by: Ryan Richard <richardry@vmware.com> 2020-08-19 18:21:07 +00:00			`github.com/spf13/pflag v1.0.5`
Bump a bunch of minor dependencies. Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0) Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 0.3.0 to 0.4.0. - [Release notes](https://github.com/go-logr/logr/releases) - [Commits](https://github.com/go-logr/logr/compare/v0.3.0...v0.4.0) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.4.0...v2.5.0) Bumps [github.com/go-logr/stdr](https://github.com/go-logr/stdr) from 0.2.0 to 0.4.0. - [Release notes](https://github.com/go-logr/stdr/releases) - [Commits](https://github.com/go-logr/stdr/compare/v0.2.0...v0.4.0) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.1 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.1...v1.1.3) Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-02-24 22:37:31 +00:00			`github.com/stretchr/testify v1.7.0`
Upgrade to client-go and apimachinery from Kubernetes 1.21. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-04-09 15:40:23 +00:00			`golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83`
Fix lint errors from a previous commit 2021-03-12 00:21:40 +00:00			`golang.org/x/net v0.0.0-20210226172049-e18ecbb05110`
Checkpoint: write a single negative test using fosite Bringing in fosite to our go.mod introduced those other go.mod changes. Signed-off-by: Andrew Keesler <akeesler@vmware.com> 2020-11-04 15:15:19 +00:00			`golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d`
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-12-17 19:08:15 +00:00			`golang.org/x/sync v0.0.0-20201207232520-09787c993a3a`
gopkg.in/square/go-jose.v2: v2.2.2 -> v2.5.1 We were behind for some reason. Probably makes sense to bump to latest version to get bug fixes and such. 2020-11-04 14:55:18 +00:00			`gopkg.in/square/go-jose.v2 v2.5.1`
Upgrade to client-go and apimachinery from Kubernetes 1.21. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-04-09 15:40:23 +00:00			`k8s.io/api v0.21.0`
			`k8s.io/apimachinery v0.21.0`
			`k8s.io/apiserver v0.21.0`
			`k8s.io/client-go v0.21.0`
			`k8s.io/component-base v0.21.0`
			`k8s.io/gengo v0.0.0-20201214224949-b6c5ce23f027`
Bump k8s.io/klog/v2 from 2.6.0 to 2.8.0 Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.6.0 to 2.8.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.6.0...v2.8.0) Signed-off-by: dependabot[bot] <support@github.com> 2021-03-15 17:36:36 +00:00			`k8s.io/klog/v2 v2.8.0`
Upgrade to client-go and apimachinery from Kubernetes 1.21. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-04-09 15:40:23 +00:00			`k8s.io/kube-aggregator v0.21.0`
			`k8s.io/kube-openapi v0.0.0-20210305001622-591a79e4bda7`
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-12-17 19:08:15 +00:00			`k8s.io/utils v0.0.0-20201110183641-67b214c5f920`
Define initial config file format - Users may want to consume pkg/config to generate configuration files. - This also involved putting config-related utilities in the config package for ease of consumption. - We did not add in versioning into the Config type for now...this is something we will likely do in the future, but it is not deemed necessary this early in the project. - The config file format tries to follow the patterns of Kube. One such example of this is requiring the use of base64-encoded CA bundle PEM bytes instead of a file path. This also slightly simplifies the config file handling because we don't have to 1) read in a file or 2) deal with the error case of the file not being there. - The webhook code from k8s.io/apiserver is really exactly what we want here. If this dependency gets too burdensome, we can always drop it, but the pros outweigh the cons at the moment. - Writing out a kubeconfig to disk to configure the webhook is a little janky, but hopefully this won't hurt performance too much in the year 2020. - Also bonus: call the right Serve() function when starting our servers. Signed-off-by: Andrew Keesler <akeesler@vmware.com> 2020-07-14 15:50:14 +00:00			`sigs.k8s.io/yaml v1.2.0`
Add initial linter configuration. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2020-07-07 19:35:20 +00:00			`)`
Workaround a bad module version to fix Dependabot. Signed-off-by: Matt Moyer <moyerm@vmware.com> 2021-02-16 23:05:33 +00:00
			`// Workaround a broken module version (see https://github.com/oleiade/reflections/issues/14).`
			`// We need this until none of our deps tries to pull in v1.0.0, otherwise some tools like`
			`// Dependabot will fail on our module.`
			`replace github.com/oleiade/reflections v1.0.0 => github.com/oleiade/reflections v1.0.1`
Move to github.com/form3tech-oss/jwt-go Signed-off-by: Monis Khan <mok@vmware.com> 2021-03-18 20:54:55 +00:00
			`// We were never vulnerable to CVE-2020-26160 but this avoids future issues`
			`// This fork is not particularly better though:`
			`// https://github.com/form3tech-oss/jwt-go/issues/7`
			`// We use the SHA of github.com/form3tech-oss/jwt-go@v3.2.2 to get around "used for two different module paths"`
			`// https://golang.org/issues/26904`
			`replace github.com/dgrijalva/jwt-go v3.2.0+incompatible => github.com/form3tech-oss/jwt-go v0.0.0-20200915135329-9162a5abdbc0`