djpbessems
/
ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2,859 Commits 30 Branches 34 Tags 22 MiB
Commit Graph

2859 Commits

Author SHA1 Message Date
Ryan Richard 25d20d4081 Merge branch 'main' into disable_http 2022-04-05 09:00:26 -07:00
Víctor Martínez Bevià dc24397df4 Use vmware-tanzu/carvel instead of the deprecated k14/tap to install deps with brew 2022-04-05 16:43:22 +02:00
Mo Khan c0874706d9
Merge pull request #1106 from enj/enj/i/fips_followup 
Add more details to FIPS comments
 2022-04-01 13:16:50 -04:00
Monis Khan 07066e020d
Explicitly set defaultServing ciphers in FIPS mode 
This is a no-op today, but could change in the future when we add
support for FIPS in non-strict mode.

Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:59:47 -04:00
Monis Khan 3f0753ec5a
Remove duplication in secure TLS tests 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:56:38 -04:00
Monis Khan 15bc6a4a67
Add more details to FIPS comments 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-04-01 10:56:38 -04:00
Mo Khan ce82d799c9
Run OSSF scorecard on release branches 2022-04-01 10:41:23 -04:00
Mo Khan a453522d81
Add OSSF Scorecard GitHub Action 2022-04-01 10:30:01 -04:00
Ryan Richard 51c527a965 Change to camel-case for insecureAcceptExternalUnencryptedHttpRequests 
- Use camel-case in the static configmap
- Parse the value into a boolean in the go struct instead of a string
- Add test for when unsupported value is used in the configmap
- Run the config_test.go tests in parallel
- Update some paragraphs in configure-supervisor.md for clarity
 2022-03-31 16:23:45 -07:00
Ryan Richard ae7aac020a Merge branch 'main' into disable_http 2022-03-30 11:30:32 -07:00
Mo Khan 17e8faa0fe
Have dependabot keep the FIPS dockerfile updated 2022-03-30 13:55:19 -04:00
Mo Khan 6639ce2a1f
Merge pull request #1061 from vmware-tanzu/fips-boringcrypto 
FIPs compatibility
 2022-03-30 13:43:23 -04:00
Margo Crawford 53597bb824 Introduce FIPS compatibility 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-03-29 16:58:41 -07:00
Ryan Richard 0e54ba1a20 Slightly fancier way to prevent old values.yaml names from being used 2022-03-29 14:24:40 -07:00
Ryan Richard b07a4131e5 Merge branch 'main' into disable_http 2022-03-29 12:47:53 -07:00
Mo Khan 2cffea5880
Merge pull request #1099 from vmware-tanzu/remove_supervisorhttpaddress_var 
Remove unused env.SupervisorHTTPAddress integration test var
 2022-03-29 13:36:00 -04:00
Ryan Richard 5f34efc0b7 Empty commit to trigger CI 2022-03-29 09:39:18 -07:00
Ryan Richard cf471d6422 Remove unused env.SupervisorHTTPAddress integration test var 2022-03-29 09:13:44 -07:00
Ryan Richard 3592f80457 Merge branch 'main' into disable_http 2022-03-28 17:03:59 -07:00
Ryan Richard 488f08dd6e Provide a way to override the new HTTP loopback-only validation 
Add new deprecated_insecure_accept_external_unencrypted_http_requests
value in values.yaml. Allow it to be a boolean or a string to make it
easier to use (both --data-value and --data-value-yaml will work).

Also:
- Consider "ip6-localhost" and "ip6-loopback" to be loopback addresses
  for the validation
- Remove unused env.SupervisorHTTPAddress var
- Deprecate the `service_http_*` values in values.yaml by renaming them
  and causing a ytt render error when the old names are used
 2022-03-28 17:03:23 -07:00
Mo Khan cd25cb89c4
Merge pull request #1093 from enj/enj/d/ws1 
Add Workspace ONE Access docs
 2022-03-24 20:24:29 -04:00
Monis Khan 57fb085bef
Add Workspace ONE Access docs 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-03-24 20:17:54 -04:00
Ryan Richard 8d12c1b674 HTTP listener: default disabled and may only bind to loopback interfaces 2022-03-24 15:46:10 -07:00
Mo Khan 9c5adad062
Merge pull request #1092 from vmware-tanzu/remove_oryx_direct_dep 
Remove direct dependency on ory/x
 2022-03-24 15:16:34 -04:00
Mo Khan 4649b8e0e4
Merge pull request #1085 from pnbrown/community-page-update 
Update _index.html
 2022-03-24 14:02:51 -04:00
Ryan Richard 48c5a625a5 Remove our direct dependency on ory/x 
ory/x has new releases very often, sometimes multiple times per week,
causing a lot of noise from dependabot. We were barely using it
directly, so replace our direct usages with equivalent code.
 2022-03-24 10:24:54 -07:00
Ryan Richard 42bd385cbd
Merge pull request #1088 from vmware-tanzu/pty_int_test_flakes 
WIP: Try to fix recent integration test flakes
 2022-03-22 18:10:08 -07:00
Ryan Richard bedf4e5a39 Try to avoid getting a second username prompt in a test in e2e_test.go 2022-03-22 14:23:50 -07:00
Ryan Richard 2715741c2c Increase a test timeout in e2e_test.go 2022-03-22 12:13:10 -07:00
Ryan Richard d20b2056f2
Merge branch 'main' into pty_int_test_flakes 2022-03-22 11:14:19 -07:00
Margo Crawford a9b054e2f4
Merge pull request #1087 from vmware-tanzu/update-install-linter-1.45.0 
Update install-linter.sh to use v1.45.0
 2022-03-22 10:57:34 -07:00
Margo Crawford 051a228a8c Update install-linter.sh to use v1.45.0 
Signed-off-by: Margo Crawford <margaretc@vmware.com>
 2022-03-22 10:29:08 -07:00
Ryan Richard d162e294ed Split up the context timeouts per test in e2e_test.go 2022-03-22 10:17:45 -07:00
Margo Crawford 636d2014a7
Merge pull request #1086 from pnbrown/patch-1 
Update MAINTAINERS.md
 2022-03-21 15:02:05 -07:00
Nigel Brown f981f63b90
Update MAINTAINERS.md 2022-03-21 13:17:14 -05:00
Nigel Brown b5be8c6c9b Update _index.html 
Add current community meeting info
 2022-03-21 13:08:54 -05:00
Ryan Richard ff4ceb5d0b
Merge pull request #1079 from vmware-tanzu/contributor_guide_updates2 
Small updates to CONTRIBUTING.md
 2022-03-21 10:45:17 -07:00
Ryan Richard d24f82fff5
Merge branch 'main' into contributor_guide_updates2 2022-03-21 10:45:10 -07:00
Ryan Richard 0ac37fd169
Merge pull request #1059 from vmware-tanzu/2022-readme 
Update main README.md for 2022
 2022-03-21 10:44:41 -07:00
Ryan Richard bcfddec0a2
Merge branch 'main' into 2022-readme 2022-03-21 10:44:32 -07:00
Ryan Richard b1310877d8 Add docs for how to run specific integration test(s) to CONTRIBUTING.md 2022-03-21 09:33:26 -07:00
Ryan Richard f64779cba7 small updates to CONTRIBUTING.md 2022-03-18 14:27:33 -07:00
anjalitelang c710cfbc70
Update ROADMAP.md 
Changed last updated field for March
 2022-03-18 10:12:50 -04:00
anjalitelang 3052763020
Update ROADMAP.md 
Updated roadmap with current priorities
 2022-03-17 09:36:24 -04:00
Ryan Richard 8b80a01d0a
Merge pull request #1065 from vmware-tanzu/kind-update 
Use kubeadm.k8s.io/v1beta3 in addition to v1beta2 for kind config
 2022-03-16 09:18:40 -07:00
Ryan Richard e465056943 Use both kubeadm.k8s.io/v1beta2 and v1beta3 to allow old versions of K8s 
You can use an older version of K8s on your development workstation
by temporarily editing kind-up.sh to add the `--image` flag. By defining
both v1beta2 and v1beta3 you should continue to be able to use old
versions of K8s in this way with Kind v0.12.0.
 2022-03-15 15:09:39 -07:00
Ryan Richard 16c4c67af1 Use kubeadm.k8s.io/v1beta3 instead of v1beta2 for kind config 
It appears that kind completely ignores kubeadm.k8s.io/v1beta2 config
starting in Kind v0.12.0.

You can observe the config being ignored or used by adding `-v 10` to
the command-line arguments of `kind create cluster` in kind-up.sh.
 2022-03-15 09:37:27 -07:00
Mo Khan c5dce9cab4
Merge pull request #1057 from enj/enj/i/turn_off_http 
Rework or remove tests that rely on the http port
 2022-03-10 20:06:34 -05:00
Monis Khan 8fac6cb9a4
Rework or remove tests that rely on the http port 
Signed-off-by: Monis Khan <mok@vmware.com>
 2022-03-10 19:43:12 -05:00
Ryan Richard 9805f6d6b2 Update main README.md for 2022 2022-03-10 14:23:27 -08:00