Joshua Casey
64f1bff13f
Use Conditions from apimachinery, specifically k8s.io/apimachinery/pkg/apis/meta/v1.Conditions
2023-09-11 10:13:39 -07:00
Joshua Casey
dc61d132cf
Address PR feedback, especially to check that the CA bundle is some kind of valid cert
2023-08-03 14:57:21 -05:00
Joshua Casey
8df9033bfc
Add CredentialIssuer.Spec.ImpersonationProxy.TLS to configure an externally provided TLS secret
2023-08-03 14:57:21 -05:00
Ryan Richard
0a1f966886
Add ActiveDirectoryIdentityProvider.spec.groupSearch.userAttributeForFilter
...
Add the field to the tmpl file and run codegen.
Also update the count of the fields of our APIs in an integration test.
2023-05-31 11:09:08 -07:00
Ryan Richard
bad5e60a8e
Add LDAPIdentityProvider.spec.groupSearch.userAttributeForFilter
...
Add the field to the tmpl file and run codegen.
Also update the count of the fields of our APIs in an integration test.
2023-05-25 09:52:15 -07:00
Ryan Richard
8ff6ef32e9
Allow additional claims to map into an ID token issued by the supervisor
...
- Specify mappings on OIDCIdentityProvider.spec.claims.additionalClaimMappings
- Advertise additionalClaims in the OIDC discovery endpoint under claims_supported
Co-authored-by: Ryan Richard <richardry@vmware.com>
Co-authored-by: Joshua Casey <joshuatcasey@gmail.com>
2023-01-13 14:59:50 -08:00
Ryan Richard
b65f872dcd
Configure printer columns for OIDCClient CRD
2022-07-21 16:40:03 -07:00
Ryan Richard
be85e1ed0a
TotalClientSecrets field gets omitempty and becomes int32
2022-07-14 09:30:03 -07:00
Ryan Richard
93939ccbd8
OIDCClient watcher controller updates based on PR feedback
2022-07-06 10:34:24 -07:00
Ryan Richard
5aa0d91267
New controller watches OIDCClients and updates validation Conditions
2022-06-17 13:11:26 -04:00
Monis Khan
59d67322d3
Static validation for OIDC clients
...
The following validation is enforced:
1. Names must start with client.oauth.pinniped.dev-
2. Redirect URIs must start with https://
or http://127.0.0.1
or http://::1
3. All spec lists must not have duplicates
Added an integration test to assert all static validations.
Signed-off-by: Monis Khan <mok@vmware.com>
2022-06-15 15:09:40 -04:00
Margo Crawford
0c1f48cbc1
Move oidcclient into config.supervisor.pinniped.dev
...
Signed-off-by: Margo Crawford <margaretc@vmware.com>
2022-06-13 15:48:54 -07:00
Ryan Richard
77f37b5a57
run codegen
2022-06-08 09:41:35 -07:00
Ryan Richard
e78c7d4e0e
update kube codegen versions and add 1.24 codegen
...
Signed-off-by: Monis Khan <mok@vmware.com>
2022-06-07 15:26:30 -04:00
