djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
e450a348c5
ContainerImage.Pinniped/go.mod

58 lines
2.4 KiB
Modula-2
Raw Normal View History

Add Go vanity import paths. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-09-18 19:56:24 +00:00
module go.pinniped.dev
Hello, world!
2020-07-03 00:05:59 +00:00
go 1.14
Add a simple /healthz endpoint - Also remove the old hello world code Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-07-06 23:07:21 +00:00
Add initial linter configuration. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-07-07 19:35:20 +00:00
require (
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-12-17 19:08:15 +00:00
cloud.google.com/go v0.60.0 // indirect
Organize Pinniped CLI into subcommands; Add get-kubeconfig subcommand - Add flag parsing and help messages for root command, `exchange-credential` subcommand, and new `get-kubeconfig` subcommand - The new `get-kubeconfig` subcommand is a work in progress in this commit - Also add here.Doc() and here.Docf() to enable nice heredocs in our code
2020-09-12 00:56:05 +00:00
github.com/MakeNowJust/heredoc/v2 v2.0.1
Upgrade to github.com/coreos/go-oidc v3.0.0. See https://github.com/coreos/go-oidc/releases/tag/v3.0.0 for release notes. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-01-20 17:54:44 +00:00
github.com/coreos/go-oidc/v3 v3.0.0
Merge the `./test` packages back into the main module. We were using this at one point to control which tests ran with `go test ./...`, but now we're also using the `-short` flag to differentiate unit vs. integration tests. Hopefully this will simplify things a bit. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-08-25 15:27:18 +00:00
github.com/davecgh/go-spew v1.1.1
Bump a bunch of minor dependencies. Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0) Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 0.3.0 to 0.4.0. - [Release notes](https://github.com/go-logr/logr/releases) - [Commits](https://github.com/go-logr/logr/compare/v0.3.0...v0.4.0) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.4.0...v2.5.0) Bumps [github.com/go-logr/stdr](https://github.com/go-logr/stdr) from 0.2.0 to 0.4.0. - [Release notes](https://github.com/go-logr/stdr/releases) - [Commits](https://github.com/go-logr/stdr/compare/v0.2.0...v0.4.0) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.1 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.1...v1.1.3) Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-02-24 22:37:31 +00:00
github.com/go-logr/logr v0.4.0
github.com/go-logr/stdr v0.4.0
Bump github.com/go-openapi/spec from 0.19.9 to 0.20.3 Bumps [github.com/go-openapi/spec](https://github.com/go-openapi/spec) from 0.19.9 to 0.20.3. - [Release notes](https://github.com/go-openapi/spec/releases) - [Commits](https://github.com/go-openapi/spec/compare/v0.19.9...v0.20.3) Signed-off-by: dependabot[bot] <support@github.com>
2021-02-25 15:39:25 +00:00
github.com/go-openapi/spec v0.20.3
Add a file-based session cache. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-10-21 17:54:26 +00:00
github.com/gofrs/flock v0.8.0
Bump github.com/golang/mock from 1.4.4 to 1.5.0 Bumps [github.com/golang/mock](https://github.com/golang/mock) from 1.4.4 to 1.5.0. - [Release notes](https://github.com/golang/mock/releases) - [Changelog](https://github.com/golang/mock/blob/master/.goreleaser.yml) - [Commits](https://github.com/golang/mock/compare/v1.4.4...v1.5.0) Signed-off-by: dependabot[bot] <support@github.com>
2021-02-25 15:39:55 +00:00
github.com/golang/mock v1.5.0
Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.4 to 0.5.5. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](https://github.com/google/go-cmp/compare/v0.5.4...v0.5.5) Signed-off-by: dependabot[bot] <support@github.com>
2021-03-05 05:59:54 +00:00
github.com/google/go-cmp v0.5.5
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-12-17 19:08:15 +00:00
github.com/google/gofuzz v1.2.0
WIP for saving authorize endpoint state into upstream state param Signed-off-by: Ryan Richard <richardry@vmware.com>
2020-11-11 01:58:00 +00:00
github.com/gorilla/securecookie v1.1.1
Add integration test for using WhoAmIRequest through impersonator
2021-03-11 00:57:15 +00:00
github.com/gorilla/websocket v1.4.2
Upgrade github.com/oleiade/reflections to v1.0.1. This project overwrote the v1.0.0 tag with a different commit ID, which has caused issues with the Go module sum DB (which accurately detected the issue). This has been one of the reasons why Dependabot is not updating our Go dependencies. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-01-27 19:49:30 +00:00
github.com/oleiade/reflections v1.0.1 // indirect
Remove our main module dependency on golangci-lint. We will still pin this in CI via an image dependency. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-12-17 22:30:34 +00:00
github.com/onsi/ginkgo v1.13.0 // indirect
Bump github.com/ory/fosite from 0.38.0 to 0.39.0 Bumps [github.com/ory/fosite](https://github.com/ory/fosite) from 0.38.0 to 0.39.0. - [Release notes](https://github.com/ory/fosite/releases) - [Changelog](https://github.com/ory/fosite/blob/master/CHANGELOG.md) - [Commits](https://github.com/ory/fosite/compare/v0.38.0...v0.39.0) Signed-off-by: dependabot[bot] <support@github.com>
2021-03-09 05:50:01 +00:00
github.com/ory/fosite v0.39.0
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-12-17 19:08:15 +00:00
github.com/pkg/browser v0.0.0-20201207095918-0426ae3fba23
Finished tests for pkce storage and added it to kubestorage - Also fixed some lint errors with v1.33.0 of the linter Signed-off-by: Margo Crawford <margaretc@vmware.com>
2020-12-01 22:53:22 +00:00
github.com/pkg/errors v0.9.1
Add initial CLI integration test for OIDC login. This is our first test using a real browser to interact with an upstream provider. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-10-13 15:41:53 +00:00
github.com/sclevine/agouti v3.0.0+incompatible
Add placeholder-name CLI - main and unit tests for main - client package to be done in a future commit Signed-off-by: Aram Price <pricear@vmware.com>
2020-07-27 23:49:43 +00:00
github.com/sclevine/spec v1.4.0
Bump a bunch of minor dependencies. Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0) Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 0.3.0 to 0.4.0. - [Release notes](https://github.com/go-logr/logr/releases) - [Commits](https://github.com/go-logr/logr/compare/v0.3.0...v0.4.0) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.4.0...v2.5.0) Bumps [github.com/go-logr/stdr](https://github.com/go-logr/stdr) from 0.2.0 to 0.4.0. - [Release notes](https://github.com/go-logr/stdr/releases) - [Commits](https://github.com/go-logr/stdr/compare/v0.2.0...v0.4.0) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.1 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.1...v1.1.3) Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-02-24 22:37:31 +00:00
github.com/spf13/cobra v1.1.3
Switch back to an exec-based approach to grab the controller-manager CA. (#65) This switches us back to an approach where we use the Pod "exec" API to grab the keys we need, rather than forcing our code to run on the control plane node. It will help us fail gracefully (or dynamically switch to alternate implementations) when the cluster is not self-hosted. Signed-off-by: Matt Moyer <moyerm@vmware.com> Co-authored-by: Ryan Richard <richardry@vmware.com>
2020-08-19 18:21:07 +00:00
github.com/spf13/pflag v1.0.5
Bump a bunch of minor dependencies. Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0) Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 0.3.0 to 0.4.0. - [Release notes](https://github.com/go-logr/logr/releases) - [Commits](https://github.com/go-logr/logr/compare/v0.3.0...v0.4.0) Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.4.0 to 2.5.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.4.0...v2.5.0) Bumps [github.com/go-logr/stdr](https://github.com/go-logr/stdr) from 0.2.0 to 0.4.0. - [Release notes](https://github.com/go-logr/stdr/releases) - [Commits](https://github.com/go-logr/stdr/compare/v0.2.0...v0.4.0) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.1.1 to 1.1.3. - [Release notes](https://github.com/spf13/cobra/releases) - [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md) - [Commits](https://github.com/spf13/cobra/compare/v1.1.1...v1.1.3) Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-02-24 22:37:31 +00:00
github.com/stretchr/testify v1.7.0
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-12-17 19:08:15 +00:00
golang.org/x/crypto v0.0.0-20201217014255-9d1352758620
Fix lint errors from a previous commit
2021-03-12 00:21:40 +00:00
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110
Checkpoint: write a single negative test using fosite Bringing in fosite to our go.mod introduced those other go.mod changes. Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-11-04 15:15:19 +00:00
golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-12-17 19:08:15 +00:00
golang.org/x/sync v0.0.0-20201207232520-09787c993a3a
gopkg.in/square/go-jose.v2: v2.2.2 -> v2.5.1 We were behind for some reason. Probably makes sense to bump to latest version to get bug fixes and such.
2020-11-04 14:55:18 +00:00
gopkg.in/square/go-jose.v2 v2.5.1
Upgrade to prereleased Kubernetes v1.20.5++ dependencies. These commits include security fixes (CVE-2021-3121) for code generated by github.com/gogo/protobuf. We expect this fix to also land in v1.20.6, but we don't want to wait for it. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-03-31 17:50:19 +00:00
k8s.io/api v0.0.0-20210329192759-4cbcd86ea749
k8s.io/apimachinery v0.21.0-alpha.0.0.20210329192153-640a6275d2b0
k8s.io/apiserver v0.0.0-20210330222258-23775f4efbdf
k8s.io/client-go v0.0.0-20210329194426-720ea497dc06
k8s.io/component-base v0.0.0-20210329195309-e1576f54c4ca
Allow multiple Pinnipeds to work on same cluster Yes, this is a huge commit. The middleware allows you to customize the API groups of all of the *.pinniped.dev API groups. Some notes about other small things in this commit: - We removed the internal/client package in favor of pkg/conciergeclient. The two packages do basically the same thing. I don't think we use the former anymore. - We re-enabled cluster-scoped owner assertions in the integration tests. This code was added in internal/ownerref. See a0546942 for when this assertion was removed. - Note: the middlware code is in charge of restoring the GV of a request object, so we should never need to write mutations that do that. - We updated the supervisor secret generation to no longer manually set an owner reference to the deployment since the middleware code now does this. I think we still need some way to make an initial event for the secret generator controller, which involves knowing the namespace and the name of the generated secret, so I still wired the deployment through. We could use a namespace/name tuple here, but I was lazy. Signed-off-by: Andrew Keesler <akeesler@vmware.com> Co-authored-by: Ryan Richard <richardry@vmware.com>
2021-01-13 01:27:41 +00:00
k8s.io/gengo v0.0.0-20201113003025-83324d819ded
Bump k8s.io/klog/v2 from 2.6.0 to 2.8.0 Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.6.0 to 2.8.0. - [Release notes](https://github.com/kubernetes/klog/releases) - [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md) - [Commits](https://github.com/kubernetes/klog/compare/v2.6.0...v2.8.0) Signed-off-by: dependabot[bot] <support@github.com>
2021-03-15 17:36:36 +00:00
k8s.io/klog/v2 v2.8.0
Upgrade to prereleased Kubernetes v1.20.5++ dependencies. These commits include security fixes (CVE-2021-3121) for code generated by github.com/gogo/protobuf. We expect this fix to also land in v1.20.6, but we don't want to wait for it. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-03-31 17:50:19 +00:00
k8s.io/kube-aggregator v0.0.0-20210329201137-c9d5b747f33b
Add generated client code for 'latest'. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-02-09 15:46:38 +00:00
k8s.io/kube-openapi v0.0.0-20201113171705-d219536bb9fd
Update all modules. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-12-17 19:08:15 +00:00
k8s.io/utils v0.0.0-20201110183641-67b214c5f920
Define initial config file format - Users may want to consume pkg/config to generate configuration files. - This also involved putting config-related utilities in the config package for ease of consumption. - We did not add in versioning into the Config type for now...this is something we will likely do in the future, but it is not deemed necessary this early in the project. - The config file format tries to follow the patterns of Kube. One such example of this is requiring the use of base64-encoded CA bundle PEM bytes instead of a file path. This also slightly simplifies the config file handling because we don't have to 1) read in a file or 2) deal with the error case of the file not being there. - The webhook code from k8s.io/apiserver is really exactly what we want here. If this dependency gets too burdensome, we can always drop it, but the pros outweigh the cons at the moment. - Writing out a kubeconfig to disk to configure the webhook is a little janky, but hopefully this won't hurt performance too much in the year 2020. - Also bonus: call the right *Serve*() function when starting our servers. Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-07-14 15:50:14 +00:00
sigs.k8s.io/yaml v1.2.0
Add initial linter configuration. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-07-07 19:35:20 +00:00
)
Workaround a bad module version to fix Dependabot. Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-02-16 23:05:33 +00:00
// Workaround a broken module version (see https://github.com/oleiade/reflections/issues/14).
// We need this until none of our deps tries to pull in v1.0.0, otherwise some tools like
// Dependabot will fail on our module.
replace github.com/oleiade/reflections v1.0.0 => github.com/oleiade/reflections v1.0.1
Move to github.com/form3tech-oss/jwt-go Signed-off-by: Monis Khan <mok@vmware.com>
2021-03-18 20:54:55 +00:00
// We were never vulnerable to CVE-2020-26160 but this avoids future issues
// This fork is not particularly better though:
// https://github.com/form3tech-oss/jwt-go/issues/7
// We use the SHA of github.com/form3tech-oss/jwt-go@v3.2.2 to get around "used for two different module paths"
// https://golang.org/issues/26904
replace github.com/dgrijalva/jwt-go v3.2.0+incompatible => github.com/form3tech-oss/jwt-go v0.0.0-20200915135329-9162a5abdbc0
Reference in New Issue Copy Permalink