Commit Graph

  • d856221f56 Edit some comments in concierge_impersonation_proxy_test.go Ryan Richard 2021-03-19 09:36:05 -0700
  • f519f0cb09
    impersonator: disallow clients from setting the X-Forwarded-For header Monis Khan 2021-03-19 15:35:06 -0400
  • c03fe2d1fe
    Use http2 for all non-upgrade requests Monis Khan 2021-03-19 13:39:55 -0400
  • 2749044625
    test/integration: unparallelize impersonation kubectl test Andrew Keesler 2021-03-19 13:31:28 -0400
  • f73c70d8f9
    test/integration: use Ryan's 20x rule to harden simple access tests Andrew Keesler 2021-03-19 13:18:10 -0400
  • ebd5e45fa6
    test/integration: wait for convergence at end of impersonation test Andrew Keesler 2021-03-19 12:54:37 -0400
  • 6154883855
    test/integration: add temporary debug 'kubectl attach' logging Andrew Keesler 2021-03-19 10:42:11 -0400
  • ebe01a5aef
    test/integration: catch early 'kubectl attach' return Andrew Keesler 2021-03-19 09:59:24 -0400
  • cc8ee1407c
    Bump k8s.io/client-go from 0.20.4 to 0.20.5 dependabot[bot] 2021-03-19 06:00:12 +0000
  • c337994575
    Bump k8s.io/component-base from 0.20.4 to 0.20.5 dependabot[bot] 2021-03-19 05:59:39 +0000
  • 026bcc7fdf
    Bump k8s.io/kube-aggregator from 0.20.4 to 0.20.5 dependabot[bot] 2021-03-19 05:59:30 +0000
  • 95b23f20e2
    Bump k8s.io/apiserver from 0.20.4 to 0.20.5 dependabot[bot] 2021-03-19 05:59:13 +0000
  • 579717b8e6
    Bump k8s.io/api from 0.20.4 to 0.20.5 dependabot[bot] 2021-03-19 05:58:51 +0000
  • 28d00ce67b
    Merge remote-tracking branch 'upstream/main' into impersonation-proxy Andrew Keesler 2021-03-18 20:13:49 -0400
  • 50e4531215
    Merge pull request #505 from enj/enj/i/jwt-go_cve Mo Khan 2021-03-18 19:34:19 -0400
  • 1a9922d050
    test/integration: poll more quickly in f2a48aee Andrew Keesler 2021-03-18 17:53:14 -0400
  • f2a48aee2b
    test/integration: increase timeout to a minute to see if it helps Andrew Keesler 2021-03-18 17:48:00 -0400
  • d162cb9adf
    Move to github.com/form3tech-oss/jwt-go Monis Khan 2021-03-18 16:54:55 -0400
  • 14a28bec24
    test/integration: fix second assertion from dae62929 Andrew Keesler 2021-03-18 16:34:30 -0400
  • dae62929e0
    test/integration: error assertions pass w/ and w/o middleware Andrew Keesler 2021-03-18 15:33:47 -0400
  • c22ac17dfe
    internal/concierge/impersonator: use http/2.0 as much as we can Andrew Keesler 2021-03-18 15:32:33 -0400
  • 08c446a3e1 Use openssl to generate the test user password instead of /dev/urandom Ryan Richard 2021-03-18 11:20:33 -0700
  • bd8c243636 concierge_impersonation_proxy_test.go: small refactor Ryan Richard 2021-03-18 10:44:37 -0700
  • e4bf6e068f Add a comment to impersonator.go Ryan Richard 2021-03-18 10:00:06 -0700
  • 120e46b5f7
    test/integration: fix race condition Monis Khan 2021-03-18 11:24:02 -0400
  • 257d69045d
    Reuse internal/concierge/scheme Andrew Keesler 2021-03-18 10:40:59 -0400
  • 05a188d4cd
    Merge remote-tracking branch 'upstream/main' into impersonation-proxy Andrew Keesler 2021-03-18 10:36:28 -0400
  • 205c22ddbe
    impersonator config: catch panics when running impersonator Monis Khan 2021-03-18 10:28:16 -0400
  • aa79bc7609
    internal/concierge/impersonator: ensure log statement is printed Andrew Keesler 2021-03-18 10:14:11 -0400
  • a36914f5ca
    Merge pull request #476 from ankeesler/whoami-cli Andrew Keesler 2021-03-18 09:46:48 -0400
  • cc8f0b623c
    test/integration: add pinniped whoami tests Andrew Keesler 2021-03-04 14:46:18 -0500
  • de6837226e
    cmd/pinniped: add whoami command Andrew Keesler 2021-03-04 13:34:59 -0500
  • 3a32833306
    Merge pull request #503 from mattmoyer/rework-restart-assertions-helper Matt Moyer 2021-03-17 14:38:39 -0700
  • 74df6d138b
    Memoize library.IntegrationEnv so it's only constructed once per test. Matt Moyer 2021-03-17 12:47:38 -0500
  • 0dd2b358fb
    Extend assertNoRestartsDuringTest to dump logs from containers that restarted. Matt Moyer 2021-03-17 11:46:55 -0500
  • 6520c5a3a1
    Extend library.DumpLogs() to dump logs from the previous container, if one exists. Matt Moyer 2021-03-17 11:24:59 -0500
  • 5a43a5d53a
    Remove library.AssertNoRestartsDuringTest and make that assertion implicit in library.IntegrationEnv. Matt Moyer 2021-03-17 11:08:01 -0500
  • 897340860b Small refactor to impersonation proxy integration test Margo Crawford 2021-03-16 16:57:28 -0700
  • 4d2035ab2a
    Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy Matt Moyer 2021-03-16 18:19:40 -0500
  • d85135c12e
    Merge pull request #501 from mattmoyer/deflake-get-category-test Matt Moyer 2021-03-16 16:18:22 -0700
  • 30a392b900
    Improve the reliability of TestGetPinnipedCategory. Matt Moyer 2021-03-16 17:22:28 -0500
  • 4ab3c64b70
    Merge pull request #500 from mattmoyer/deflake-cert-rotation-test Mo Khan 2021-03-16 17:03:07 -0400
  • 2515b2d710
    Make TestAPIServingCertificateAutoCreationAndRotation more reliable. Matt Moyer 2021-03-16 14:59:59 -0500
  • 10a1e29e15
    Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy Matt Moyer 2021-03-16 14:35:07 -0500
  • 2319606cd2
    Fix some nits from the previous commit that I accidentally merged before fixing. Matt Moyer 2021-03-16 13:54:29 -0500
  • 10168ab2e7
    Merge pull request #499 from vmware-tanzu/add-anon-auth-capability Matt Moyer 2021-03-16 12:21:47 -0700
  • c5b784465b
    Describe "anonymousAuthenticationSupported" test cluster capability and add more managed cluster types. Matt Moyer 2021-03-16 13:54:29 -0500
  • 236dbdb2c4
    impersonator: test UID impersonation and header canonicalization Monis Khan 2021-03-16 12:59:07 -0400
  • 6887d0aca2 Repeat the method and url in the log line for the userinfo username Ryan Richard 2021-03-15 17:10:55 -0700
  • 64e0dbb481 Sleep for 1 minute 10 seconds instead of a minute in timeout test Margo Crawford 2021-03-15 16:31:54 -0700
  • e47543233c Merge branch 'main' into impersonation-proxy Ryan Richard 2021-03-15 16:28:25 -0700
  • 2460568be3 Add some debug logging Ryan Richard 2021-03-15 16:11:45 -0700
  • 1b31489347 Add prepare-impersonator-on-kind.sh for manually starting impersonator Ryan Richard 2021-03-15 16:08:42 -0700
  • ab6452ace7 Remove linting from pre-commit because it is slow and messes up GoLand Ryan Richard 2021-03-15 16:25:45 -0700
  • c46aa1c29d
    Merge pull request #490 from vmware-tanzu/dependabot/docker/golang-1.16.2 Matt Moyer 2021-03-15 15:08:03 -0700
  • 939ea30030 Make all tests but disable test parallelized Margo Crawford 2021-03-15 14:34:09 -0700
  • efd973fa17 Test waiting for a minute and keeping connection open Andrew Keesler 2021-03-15 12:28:53 -0700
  • 4f671f5dca
    dynamiccert: unit test with DynamicServingCertificateController Monis Khan 2021-03-15 16:59:51 -0400
  • a5384a6e38 Merge branch 'main' into impersonation-proxy Ryan Richard 2021-03-15 13:06:36 -0700
  • e64f2fe7fb
    Bump golang from 1.16.1 to 1.16.2 dependabot[bot] 2021-03-15 19:55:44 +0000
  • 035362f4d3
    Merge pull request #494 from vmware-tanzu/dependabot/go_modules/k8s.io/klog/v2-2.8.0 Matt Moyer 2021-03-15 12:54:46 -0700
  • 8065a8d2e6 TestKubeCertAgent waits for CredentialIssuer strategy to be successful Ryan Richard 2021-03-15 11:42:57 -0700
  • e22ad6171a Fix a race detector warning by re-declaring err in a t.Cleanup() Ryan Richard 2021-03-15 09:37:19 -0700
  • c2b0acf241
    Bump k8s.io/klog/v2 from 2.6.0 to 2.8.0 dependabot[bot] 2021-03-15 17:36:36 +0000
  • 00694c9cb6
    dynamiccert: split into serving cert and CA providers Monis Khan 2021-03-15 12:24:07 -0400
  • dc96f398da
    Merge pull request #497 from mattmoyer/ignore-local-user-authenticator-coverage Matt Moyer 2021-03-15 08:46:28 -0700
  • 755a87cdbb
    Ignore test coverage for local-user-authenticator. Matt Moyer 2021-03-15 10:43:17 -0500
  • c538a4e8e8
    Merge pull request #495 from mattmoyer/add-golangci-lint-to-pre-commit-hooks Matt Moyer 2021-03-15 08:23:09 -0700
  • 41949d8e07
    Add golangci-lint to .pre-commit-config.yaml. Matt Moyer 2021-03-15 10:16:49 -0500
  • 4c162be8bf
    impersonator: add comment about long running func Monis Khan 2021-03-15 09:43:06 -0400
  • b530cef3b1
    impersonator: encode proper API status on failure Monis Khan 2021-03-13 20:25:23 -0500
  • c82f568b2c certauthority.go: Refactor issuing client versus server certs Ryan Richard 2021-03-12 16:09:16 -0800
  • 5e4746e96b
    impersonator: match kube API server long running func Monis Khan 2021-03-12 16:36:37 -0500
  • 077aa8a42e
    Fix a copy-paste typo in the ImpersonationProxyInfo JSON field name. Matt Moyer 2021-03-12 13:23:24 -0600
  • d509e7012e Add eventually loop to port-forward test Margo Crawford 2021-03-12 10:44:11 -0800
  • 8c0bafd5be
    impersonator: prep work for future SA token support Monis Khan 2021-03-12 10:33:30 -0500
  • 12b13b1ea5
    impersonator: wire in genericapiserver.Config Monis Khan 2021-03-12 09:56:34 -0500
  • 5b1dc0abdf
    test/integration: add some more debugging to kubectl impersonation test Andrew Keesler 2021-03-12 10:45:36 -0500
  • 253e0f8e9a
    test/integration: TestImpersonationProxy/websocket_client passes on my machine now Andrew Keesler 2021-03-12 09:54:59 -0500
  • 9bf786ac31
    Bump k8s.io/klog/v2 from 2.6.0 to 2.7.0 dependabot[bot] 2021-03-12 05:51:10 +0000
  • 87f2899047 impersonator_test.go: small refactor of previous commit Ryan Richard 2021-03-11 17:24:52 -0800
  • 6ddf4c04e6 impersonator_test.go: Test failed and anonymous auth Ryan Richard 2021-03-11 17:11:38 -0800
  • 1d68841c78 impersonator_test.go: Test one more thing and small refactors Ryan Richard 2021-03-11 16:44:08 -0800
  • f77c92560f Rewrite impersonator_test.go, add missing argument to IssuePEM() Ryan Richard 2021-03-11 16:27:16 -0800
  • c12a23725d Fix lint errors from a previous commit Ryan Richard 2021-03-11 16:21:40 -0800
  • d5beba354b
    Merge pull request #487 from vmware-tanzu/dependabot/docker/golang-1.16.1 Matt Moyer 2021-03-11 16:12:07 -0800
  • 71712b2d00 Add test for http2 Andrew Keesler 2021-03-11 15:49:24 -0800
  • ad3f04a982
    Bump golang from 1.16.0 to 1.16.1 dependabot[bot] 2021-03-11 22:25:17 +0000
  • a52455504f
    Capitalize "Concierge" in these error messages as well, for consistency. Matt Moyer 2021-03-11 16:18:15 -0600
  • 4f154100ff
    Remove "--concierge-mode" flag from "pinniped login [...]" commands. Matt Moyer 2021-03-11 16:14:56 -0600
  • d2d9b1e49e
    Stop outputting "--concierge-mode" from "pinniped get kubeconfig". Matt Moyer 2021-03-11 16:13:29 -0600
  • c9ce067a0e
    Captialize "API" in this error message. Matt Moyer 2021-03-11 16:11:46 -0600
  • 1af25552a0
    Update ROADMAP.md Pablo Schuhmacher 2021-03-11 13:58:34 -0800
  • a64786a728
    Fix TestCLIGetKubeconfigStaticToken for new CLI log output. Matt Moyer 2021-03-11 15:47:39 -0600
  • 2d28d1da19
    Implement all optional methods in dynamic certs provider Monis Khan 2021-03-11 16:20:25 -0500
  • 78fdc59d2d
    Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy Matt Moyer 2021-03-11 14:56:11 -0600
  • 29d7f406f7 Test double impersonation as the cluster admin Ryan Richard 2021-03-11 12:52:39 -0800
  • 3449b896d6
    Merge pull request #488 from mattmoyer/add-retries-for-supervisor-discovery-tests Matt Moyer 2021-03-11 12:22:22 -0800
  • 22ca2da1ff
    test/integration: add "kubectl attach" test to TestImpersonationProxy Margo Crawford 2021-03-11 15:10:16 -0500
  • e98c6dfdd8
    Add retries to TestSupervisorTLSTerminationWithSNI and TestSupervisorOIDCDiscovery. Matt Moyer 2021-03-11 13:18:15 -0600