Commit Graph

  • 1c3545e234
    Bump distroless/static from 07869ab to bca3c20 dependabot[bot] 2021-10-28 01:02:33 +0000
  • c494f65b84
    Update ROADMAP.md anjalitelang 2021-10-27 10:43:31 -0400
  • 6c47c3327a Add hint to hack/prepare-for-integration-tests.sh Margo Crawford 2021-10-26 16:25:34 -0700
  • 3f698d24e5
    Merge pull request #878 from enj/enj/i/cli_link Mo Khan 2021-10-26 17:42:53 -0400
  • 2ba5d51120
    Change default install hint to use get.pinniped.dev/cli Monis Khan 2021-10-26 14:56:49 -0400
  • c3060e3474
    Merge pull request #872 from anjaltelang/main Margo Crawford 2021-10-26 13:41:17 -0700
  • 59256264ec Changing the architecture.md weight back to 100 Anjali Telang 2021-10-26 16:34:32 -0400
  • 3aa14accd7
    Merge pull request #875 from siddhant94/add-install-hint-kubeconfig Mo Khan 2021-10-26 15:38:39 -0400
  • f93cdcb9c5 Merge remote-tracking branch 'upstream/main' into main Anjali Telang 2021-10-26 15:29:56 -0400
  • 1b6b4106db
    Add --install-hint flag to get kubeconfig command vagrant 2021-10-22 09:36:37 +0000
  • f25d2870ce
    Merge pull request #874 from enj/enj/i/distroless_nonroot Mo Khan 2021-10-25 16:54:47 -0400
  • 7921a58988
    Use 65532 instead of 1001 as non-root user Monis Khan 2021-10-25 16:21:54 -0400
  • 7d30bfc22c
    Start using CodeQL Mo Khan 2021-10-25 16:05:12 -0400
  • bdb199c53a
    Merge pull request #858 from vmware-tanzu/upstream_refresh Mo Khan 2021-10-25 12:32:35 -0400
  • 1e17418585
    TestSupervisorUpstreamOIDCDiscovery: include AdditionalAuthorizeParametersValid condition Monis Khan 2021-10-25 10:21:51 -0400
  • d0ced1fd74 WIP towards revoking upstream refresh tokens during GC Ryan Richard 2021-10-22 14:32:26 -0700
  • 303b1f07d3 Fix mistake in previous commit Ryan Richard 2021-10-22 14:06:31 -0700
  • e0db59fd09 More small updates based on PR feedback Ryan Richard 2021-10-22 10:23:21 -0700
  • 867853016f Merge branch 'main' into upstream_refresh Ryan Richard 2021-10-22 09:23:52 -0700
  • be6c335bb8
    Update ROADMAP.md anjalitelang 2021-10-21 10:16:54 -0400
  • b3a1dcd634
    Update ROADMAP.md anjalitelang 2021-10-21 10:10:19 -0400
  • dec43289f6 Lots of small updates based on PR feedback Ryan Richard 2021-10-20 15:53:25 -0700
  • 7ec0304472 Add offline_access scope for integration tests when using Dex Ryan Richard 2021-10-19 12:25:51 -0700
  • a22507f835 Architecture should be on top of the docs page Anjali Telang 2021-10-19 13:46:30 -0400
  • d3ade82f3f Update docs Ryan Richard 2021-10-19 09:48:40 -0700
  • c43e019d3a Change default of additionalScopes and disallow "hd" in additionalAuthorizeParameters Ryan Richard 2021-10-18 16:41:31 -0700
  • d68bebeb49 Merge branch 'main' into upstream_refresh Ryan Richard 2021-10-18 15:35:46 -0700
  • c51d7c08b9 Add a comment that might be useful some day Ryan Richard 2021-10-18 15:35:22 -0700
  • ddb23bd2ed Add upstream refresh related config to OIDCIdentityProvider CRD Ryan Richard 2021-10-14 15:49:44 -0700
  • 9e05d175a7 Add integration test: upstream refresh failure during downstream refresh Ryan Richard 2021-10-13 15:12:19 -0700
  • a34dae549b When performing an upstream refresh, use the configured http client Ryan Richard 2021-10-13 14:05:00 -0700
  • 79ca1d7fb0 Perform an upstream refresh during downstream refresh for OIDC upstreams Ryan Richard 2021-10-13 12:31:20 -0700
  • bc6da55e96
    Merge pull request #860 from vmware-tanzu/dependabot/docker/golang-1.17.2 Mo Khan 2021-10-11 13:23:37 -0400
  • 1bd346cbeb Require refresh tokens for upstream OIDC and save more session data Margo Crawford 2021-10-08 15:48:21 -0700
  • d1d954bb3b
    Bump golang from 1.17.1 to 1.17.2 dependabot[bot] 2021-10-08 01:03:52 +0000
  • 43244b6599 Do not pass through downstream prompt param Margo Crawford 2021-10-06 16:30:30 -0700
  • c6f1d29538 Use PinnipedSession type instead of fosite's DefaultSesssion type Ryan Richard 2021-10-06 15:28:13 -0700
  • a2cafb251a
    Merge pull request #857 from vmware-tanzu/impersonation-proxy-supported-clusters Margo Crawford 2021-10-06 11:40:24 -0700
  • e0b62a46bb
    Merge branch 'main' into impersonation-proxy-supported-clusters Margo Crawford 2021-10-06 11:36:45 -0700
  • 4aa66b9667
    Update site/content/docs/reference/supported-clusters.md Margo Crawford 2021-10-06 11:23:29 -0700
  • 11797db866 Change description of impersonation proxy strategy in supported clusters. Margo Crawford 2021-10-06 11:08:17 -0700
  • c2c966b761
    Merge pull request #856 from enj/enj/i/impersonation_proxy_signer_expiration Mo Khan 2021-10-06 13:51:52 -0400
  • 4bf715758f
    Do not rotate impersonation proxy signer CA unless necessary Monis Khan 2021-10-06 11:46:54 -0400
  • 946419fc18
    Update ROADMAP.md anjalitelang 2021-10-05 19:31:33 -0400
  • c92b467061
    fips: set MinVersion to tls.VersionTLS12 Monis Khan 2021-10-05 11:10:59 -0400
  • 0bf8cdbd52
    DROP: work around CI confirm-version check Monis Khan 2021-10-05 09:45:16 -0400
  • 780692d856
    DROP: temp del nofips for linter Monis Khan 2021-10-05 09:34:57 -0400
  • f012fdf971
    Force enable boringcrypto Monis Khan 2021-10-04 12:53:25 -0400
  • 2b9a869633
    Merge pull request #851 from vmware-tanzu/dependabot/docker/distroless/static-7cb5539 Mo Khan 2021-10-01 08:26:29 -0400
  • 19cecc3235
    Bump distroless/static from be5d77c to 7cb5539 dependabot[bot] 2021-09-30 17:09:57 +0000
  • 6e41c10584
    Merge pull request #854 from enj/enj/i/do_not_truncate_x509 Mo Khan 2021-09-30 12:44:19 -0400
  • 266d64f7d1
    Do not truncate x509 errors Monis Khan 2021-09-29 09:26:29 -0400
  • 725b35196f
    Merge pull request #853 from enj/enj/i/oidc_log_claims Mo Khan 2021-09-28 20:11:05 -0400
  • 03bbc54023
    upstreamoidc: log claim keys at debug level Monis Khan 2021-09-28 11:51:01 -0400
  • ad8610fa03
    Merge pull request #852 from enj/enj/i/user_info_cleanup Mo Khan 2021-09-28 12:56:26 -0400
  • e86488615a
    upstreamoidc: directly detect user info support Monis Khan 2021-09-28 11:29:20 -0400
  • ee0e2402b1
    Merge pull request #845 from vmware-tanzu/crd_printcolumns Mo Khan 2021-09-21 23:19:07 -0400
  • ddf5e566b0 Update a comment Ryan Richard 2021-09-21 14:07:08 -0700
  • bb08e7635b Merge branch 'main' into crd_printcolumns Ryan Richard 2021-09-21 14:05:30 -0700
  • 3bde085c57
    Merge pull request #846 from enj/enj/i/faster_kube_cert Mo Khan 2021-09-21 17:03:23 -0400
  • 0d6bf9db3e
    kubecertagent: attempt to load signer as long as agent labels match Monis Khan 2021-09-20 12:39:31 -0400
  • f700246bfa Allow focused integration tests to be run from the GoLand UI again Ryan Richard 2021-09-21 12:04:45 -0700
  • fca183b203 Show DefaultStrategy as a new printer column for CredentialIssuer Ryan Richard 2021-09-21 12:01:30 -0700
  • cd613f3849
    auth_handler: always request consent on upstream OIDC IDP code flow Monis Khan 2021-09-21 12:04:12 -0400
  • 1b2a116518 Merge branch 'main' into crd_printcolumns Ryan Richard 2021-09-21 09:36:46 -0700
  • 9851035e40
    Merge pull request #847 from enj/enj/i/tcr_log Mo Khan 2021-09-21 12:36:16 -0400
  • aa5ff162b4
    Merge pull request #849 from enj/enj/i/clock_skew Mo Khan 2021-09-21 12:18:49 -0400
  • 933697f045
    Merge pull request #848 from vmware-tanzu/tests_use_certificatesv1 Mo Khan 2021-09-21 12:13:22 -0400
  • 91c8f747f4
    certauthority: tolerate larger clock skew between API server and pinniped Monis Khan 2021-09-21 09:19:50 -0400
  • 4e98c1bbdb Tests use CertificatesV1 when available, otherwise use CertificatesV1beta1 Ryan Richard 2021-09-20 17:14:58 -0700
  • 0a31f45812 Update the AdditionalPrinterColumns of the CRDs, and add a test for it Ryan Richard 2021-09-20 12:47:39 -0700
  • e65817ad5b
    token credential request: fix trace log kind Monis Khan 2021-09-20 15:34:05 -0400
  • 0caffab235 remove duplicate cleanup func Margo Crawford 2021-09-17 11:39:15 -0700
  • 247475c184 Changes to supervisor_login_test: Margo Crawford 2021-09-17 10:35:13 -0700
  • 43ba6ba686
    Merge pull request #842 from enj/enj/t/kube_cert_flake Mo Khan 2021-09-16 16:38:07 -0400
  • 09467d3e24
    kubecertagent: fix flakey tests Monis Khan 2021-09-16 10:03:43 -0400
  • 95b9782549
    Update config.yaml Ryan Richard 2021-09-16 11:43:40 -0700
  • 454b792afb
    Update ROADMAP.md v0.12.0 anjalitelang 2021-09-16 08:46:03 -0400
  • cb4085bfd9
    Merge pull request #840 from vmware-tanzu/mod_tidy Ryan Richard 2021-09-15 14:47:22 -0700
  • 9b0dc92025
    Merge branch 'main' into mod_tidy Ryan Richard 2021-09-15 14:47:12 -0700
  • 7859a7b5c2
    Merge pull request #839 from vmware-tanzu/deployment_selectors Ryan Richard 2021-09-15 14:46:31 -0700
  • 137841e44e
    prevent kapp from altering the selector of our services Monis Khan 2021-09-15 16:08:49 -0400
  • bdcf468e52 Add log statement for when kube cert agent key has been loaded Ryan Richard 2021-09-15 14:02:18 -0700
  • efaca05999
    prevent kapp from altering the selector of our services Monis Khan 2021-09-15 16:08:49 -0400
  • 316e6171d4
    Enable aggregator routing on kind clusters Monis Khan 2021-09-15 14:48:46 -0400
  • 04544b3d3c Update TestKubeCertAgent to use new "v3" label value Ryan Richard 2021-09-15 11:09:07 -0700
  • 85102b0118 ran go mod tidy Ryan Richard 2021-09-15 09:21:46 -0700
  • 55de160551 Bump the version number of the kube cert agent label Ryan Richard 2021-09-14 15:26:11 -0700
  • cec9f3c4d7 Improve the selectors of Deployments and Services Ryan Richard 2021-09-14 13:35:10 -0700
  • 16f562e81c
    Merge pull request #838 from vmware-tanzu/dependabot/docker/golang-1.17.1 Ryan Richard 2021-09-13 14:30:15 -0700
  • 92ccc0ec84
    Bump golang from 1.17.0 to 1.17.1 dependabot[bot] 2021-09-13 01:13:32 +0000
  • 74175f2518
    Merge pull request #836 from vmware-tanzu/search-base-caching Margo Crawford 2021-09-10 11:42:03 -0700
  • 0a1ee9e37c Remove unused functions Margo Crawford 2021-09-08 10:34:42 -0700
  • 05f5bac405 ValidatedSettings is all or nothing Margo Crawford 2021-09-07 11:45:32 -0700
  • 0195894a50 Test fix for ldap upstream watcher Margo Crawford 2021-09-02 17:34:18 -0700
  • 27c1d2144a Make sure search base in the validatedSettings cache is properly updated when the bind secret changes Margo Crawford 2021-09-02 17:17:15 -0700
  • 88aba645b8
    Merge pull request #837 from mattmoyer/so-long-and-thanks-for-all-the-fish Matt Moyer 2021-09-03 10:49:35 -0700
  • 402c213183
    So long and thanks for all the fish 🦭 Matt Moyer 2021-09-03 12:38:53 -0500
  • 17acc7caa6
    Merge pull request #834 from anjaltelang/main Mo Khan 2021-09-02 19:16:08 -0400
  • 6b7a230ca5
    Merge pull request #835 from mattmoyer/fix-readonly-fields Matt Moyer 2021-09-02 15:23:26 -0700