djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,471 Commits 30 Branches 34 Tags 22 MiB
730092f39c
Commit Graph

1471 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Monis Khan
bba0f3a230
Always set an owner ref back to our deployment 
This change updates our clients to always set an owner ref when:

1. The operation is a create
2. The object does not already have an owner ref set

Signed-off-by: Monis Khan <mok@vmware.com>
 2021-01-07 15:25:40 -05:00
Margo Crawford
9b8e4f4d5b
Merge pull request #315 from vmware-tanzu/kube-versions-1.20.0 
Kubernetes 1.20.0 generated code
 2021-01-07 10:47:52 -08:00
Margo Crawford
b7cd026bd6 Merge branch 'main' of github.com:vmware-tanzu/pinniped into kube-versions-1.20.0 2021-01-07 10:30:40 -08:00
Margo Crawford
553e25cbb7 Add generated/1.20 directory 2021-01-07 10:29:56 -08:00
Margo Crawford
988eee82cf
Merge pull request #314 from vmware-tanzu/kube-versions-1.20.0 
Add kubernetes 1.20 to kube-versions.txt
 2021-01-07 09:57:36 -08:00
Margo Crawford
da1bf06764 Add kubernetes 1.20 to kube-versions.txt 2021-01-07 09:51:45 -08:00
Andrew Keesler
13d17ba352
Merge pull request #312 from ankeesler/credential-issuer-test-timing 
test/integration: fix intermittent failures on GKE
 2021-01-06 14:58:06 -05:00
Andrew Keesler
3d8616e75f
test/integration: fix intermittent failures on GKE 
See comment. This is at least a first step to make our GKE acceptance
environment greener. Previously, this test assumed that the Pinniped-under-test
had been deployed in (roughly) the last 10 minutes, which is not an assumption
that we make anywhere else in the integration test suite.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2021-01-06 12:09:11 -05:00
Margo Crawford
e7884d8793
Merge pull request #313 from vmware-tanzu/copyright-year 
Copyright year validation in linter and pre-commit hook
 2021-01-06 09:08:19 -08:00
Margo Crawford
19d592566d
Merge branch 'main' into copyright-year 2021-01-06 09:03:13 -08:00
Margo Crawford
afa140b6a6 Add more text explaining what copyright notice should look like 2021-01-05 16:06:59 -08:00
Margo Crawford
ea6ebd0226 Got pre-commit to check for correct copyright year 2021-01-05 15:53:14 -08:00
Andrew Keesler
53a185083c Hopefully triggering the precommit hook 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2021-01-05 14:15:46 -08:00
Margo Crawford
f1e177fee7 Copyright year precommit hook 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2021-01-05 14:02:28 -08:00
Andrew Keesler
75bc5bdc7e Linter allows range of years in copyright 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2021-01-05 13:35:09 -08:00
Margo Crawford
0d4588aa8d
Merge pull request #311 from vmware-tanzu/dont-block-owner-deletion 
Remove blockOwnerDeletion from the supervisor secrets
 2021-01-05 13:18:39 -08:00
Andrew Keesler
40753d1454 Remove blockOwnerDeletion from the supervisor secrets 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2021-01-05 10:44:36 -08:00
Andrew Keesler
dd3c990a51
Merge pull request #310 from vmware-tanzu/supervisor-demo 
Supervisor demo
 2021-01-05 09:57:53 -05:00
Andrew Keesler
ef74ba7238
Re-export arch diagram to embed images 
I followed the steps in site/content/docs/img/README.md.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2021-01-05 08:44:10 -05:00
Andrew Keesler
b4415a05d0
I don't _think_ we need this picture anymore 
See f25b4a3.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2021-01-05 08:36:26 -05:00
Margo Crawford
7817d15657 Remove image width constraint on architecture diagram 2021-01-04 17:08:47 -08:00
Margo Crawford
f25b4a3e12 De-duped architecture diagram references 2021-01-04 16:47:34 -08:00
Margo Crawford
8422659ee5 Fixed typos and issues with the demo code 
- Also cleaned up some wording
 2021-01-04 16:23:24 -08:00
Margo Crawford
ef828cf2e1
Add rough draft of supervisor demo 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2021-01-04 15:31:53 -05:00
Ryan Richard
546b8b5d25
Merge pull request #305 from vmware-tanzu/quiet-secrets-controllers 
Sync Secret-watching controller less often by adjusting their filters to be more specific
 2020-12-18 18:21:51 -08:00
Ryan Richard
a7f383f610
Merge branch 'main' into quiet-secrets-controllers 2020-12-18 18:20:54 -08:00
Ryan Richard
116c8dd6c5 SupervisorSecretsController Syncs less often by adjusting its filters 
- Only watches Secrets of type
  "secrets.pinniped.dev/supervisor-csrf-signing-key"

Signed-off-by: Aram Price <pricear@vmware.com>
 2020-12-18 15:57:12 -08:00
Aram Price
1b5e8c3439 Upstream Watcher Controller Syncs less often by adjusting its filters 
- Only watches Secrets of type "secrets.pinniped.dev/oidc-client"

Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-12-18 15:41:18 -08:00
Margo Crawford
80031deab7
Merge pull request #297 from vmware-tanzu/supervisor-docs 
Update docs for Supervisor
 2020-12-18 15:36:00 -08:00
Margo Crawford
a005b8dce1
Merge branch 'main' into supervisor-docs 2020-12-18 15:34:34 -08:00
aram price
cc5af1a810 Fix lint error 
Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-12-18 15:28:56 -08:00
Ryan Richard
23be766c8b Move const to file-of-use and replce dup string 
Signed-off-by: aram price <pricear@vmware.com>
 2020-12-18 15:14:51 -08:00
Ryan Richard
2f518b8b7c TLSCertObserverController Syncs less often by adjusting its filters 
- Only watches Secrets of type "kubernetes.io/tls"

Signed-off-by: Aram Price <pricear@vmware.com>
 2020-12-18 15:10:48 -08:00
Margo Crawford
6cae776e48 Change image reference on README, 
Also clarified some wording between authenticators and identity providers
 2020-12-18 15:09:50 -08:00
aram price
cff2dc1379 Reorder functions 2020-12-18 15:08:55 -08:00
Ryan Richard
fc250f98d0 Adjust func grouping 2020-12-18 14:58:39 -08:00
Matt Moyer
8177db3601
Merge pull request #306 from mattmoyer/website-updates 
Fix a website typo and add an "Installing Pinniped" docs page.
 2020-12-18 16:55:14 -06:00
Aram Price
b3e428c9de Several more controllers Sync less often by adjusting their filters 
- JWKSWriterController
- JWKSObserverController
- FederationDomainSecretsController for HMAC keys
- FederationDomainSecretsController for state signature key
- FederationDomainSecretsController for state encryption key

Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-12-18 14:55:05 -08:00
Margo Crawford
afc39cd2f7 Tweak image descriptions 2020-12-18 14:54:30 -08:00
Margo Crawford
7c9f40b6d9 Merge branch 'main' of github.com:vmware-tanzu/pinniped into supervisor-docs 2020-12-18 14:49:44 -08:00
Matt Moyer
8313ffcf7f
Add "Installing Pinniped" docs page. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-18 16:44:20 -06:00
Andrew Keesler
0b12b30cb1 Updated diagrams and architecture text 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2020-12-18 14:13:29 -08:00
Matt Moyer
c27d02a929
Fix a typo on the Project Scope page. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-12-18 13:48:12 -06:00
Margo Crawford
4dbd8c9cae
Update Concierge-only demo for v0.3.0 release 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-12-18 13:06:09 -05:00
Ryan Richard
1056cef384 Sync garbage collector controller less often by adjusting its filters 
- Only sync on add/update of secrets in the same namespace which
  have the "storage.pinniped.dev/garbage-collect-after" annotation, and
  also during a full resync of the informer whenever secrets in the
  same namespace with that annotation exist.
- Ignore deleted secrets to avoid having this controller trigger itself
  unnecessarily when it deletes a secret. This controller is never
  interested in deleted secrets, since its only job is to delete
  existing secrets.
- No change to the self-imposed rate limit logic. That still applies
  because secrets with this annotation will be created and updated
  regularly while the system is running (not just during rare system
  configuration steps).
 2020-12-18 09:36:28 -08:00
Andrew Keesler
40d93ff33b
site/content/docs/architecture.md: another coat of paint with Supervisor updates 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-12-18 09:39:36 -05:00
Andrew Keesler
1af06bbcc9
De-dup markdown docs by deleting them in site/ tree 
I'm not sure if these docs are used anywhere in our website, but I don't think
that they are. I'm assuming someone or something will yell if these should not
be deleted. These docs also live at the root of the repo, and the duplicate
versions are already drifting out of sync from one another.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-12-18 08:11:14 -05:00
Ryan Richard
6c210b67d4
Merge pull request #301 from vmware-tanzu/typed-secrets 
Put a Type on all of the Secrets that we create in the supervisor
 2020-12-17 17:42:20 -08:00
Ryan Richard
3a4405659e
Merge branch 'main' into typed-secrets 2020-12-17 17:42:04 -08:00
aram price
187bd9060c All FederationDomain Secrets have distinct Types 
Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-12-17 17:07:38 -08:00