Commit Graph

  • fcd8c585c3
    test/integration: update "kubectl port-forward" test to use non-privileged port Andrew Keesler 2021-03-11 13:04:36 -0500
  • a918e9fb97 concierge_impersonation_proxy_test.go: Fix lint error in previous commit Ryan Richard 2021-03-11 10:04:24 -0800
  • 34accc3dee Test using a service account token to auth to the impersonator Ryan Richard 2021-03-11 10:01:17 -0800
  • 61d64fc4c6 Use ioutil.ReadFile instead of os.ReadFile Ryan Richard 2021-03-11 08:58:54 -0800
  • b793b9a17e
    test/integration: add 'kubectl logs' test to TestImpersonationProxy Andrew Keesler 2021-03-11 10:42:12 -0500
  • 7b1ecf79a6
    Fix race between err chan send and re-queue Monis Khan 2021-03-11 10:13:07 -0500
  • 32b038c639
    test/integration: add 'kubectl cp' test to TestImpersonationProxy Andrew Keesler 2021-03-11 10:02:28 -0500
  • d13bb07b3e Add integration test for using WhoAmIRequest through impersonator Ryan Richard 2021-03-10 16:57:15 -0800
  • 24396b6af1 Use gorilla websocket library so squid proxy works Margo Crawford 2021-03-10 15:49:09 -0800
  • 006dc8aa79 Small test refactor Ryan Richard 2021-03-10 14:50:46 -0800
  • 2a2e2f532b Remove an integration test that is covered elsewhere now Ryan Richard 2021-03-10 14:17:20 -0800
  • 1078bf4dfb Don't pass credentials when testing impersonation proxy port is closed Ryan Richard 2021-03-10 13:08:15 -0800
  • c14621428f
    Merge pull request #485 from vmware-tanzu/pabloschuhmacher-patch-2 Matt Moyer 2021-03-10 12:43:55 -0800
  • 6582c23edb Fix a race detector error in a unit test Monis Khan 2021-03-10 11:24:42 -0800
  • 0b300cbe42 Use TokenCredentialRequest instead of base64 token with impersonator Ryan Richard 2021-03-10 10:30:06 -0800
  • a63f88b424
    supervisor: use HTTPS probes Monis Khan 2021-03-09 22:30:26 -0500
  • 876f0a55d8
    Create ROADMAP.md in actual markdown Pablo Schuhmacher 2021-03-09 18:41:40 -0800
  • db5ca3d758
    Create ROADMAP.md Pablo Schuhmacher 2021-03-09 17:42:03 -0800
  • c853707889 Added integration test for using websockets via the impersonation proxy Margo Crawford 2021-03-09 16:58:44 -0800
  • 005133fbfb
    Add more debug logging when waiting for pending strategies. Matt Moyer 2021-03-09 16:56:53 -0600
  • 0cb1538b39
    Fix linter warnings, including a bit of refactoring. Matt Moyer 2021-03-09 15:16:46 -0600
  • 0abe10e6b2
    Add new behavior to "pinniped get kubeconfig" to wait for pending strategies to become non-pending. Matt Moyer 2021-03-09 14:48:16 -0600
  • 7a3ebbefee
    Merge branch 'main' into enj-patch-2 Mo Khan 2021-03-09 14:37:38 -0500
  • 91b4f5ee76
    supervisor: use HTTPS probes Mo Khan 2021-03-09 14:35:58 -0500
  • 883b90923d Add integration test for kubectl port-forward with impersonation Margo Crawford 2021-03-09 11:32:27 -0800
  • d6a0dfa497
    Add some debug logging when "pinniped get kubeconfig" fails to find a successful strategy. Matt Moyer 2021-03-09 12:39:44 -0600
  • 29d5e43220
    Fix minor typo in e2e_test.go. Matt Moyer 2021-03-09 12:12:52 -0600
  • eef1fd0c64
    Merge pull request #481 from vmware-tanzu/dependabot/go_modules/github.com/ory/fosite-0.39.0 Matt Moyer 2021-03-09 07:51:27 -0600
  • b2be83ee45
    Bump github.com/ory/fosite from 0.38.0 to 0.39.0 dependabot[bot] 2021-03-09 05:50:01 +0000
  • b20a8358d3
    Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy Matt Moyer 2021-03-08 15:16:40 -0600
  • a58b460bcb
    Switch TestImpersonationProxy to get clients from library.NewKubeclient instead of directly from kubernetes.NewForConfig. Matt Moyer 2021-03-08 15:03:34 -0600
  • 8fd6a71312
    Use simpler prefix matching for impersonation headers. Matt Moyer 2021-03-08 14:36:29 -0600
  • 6efbd81f75
    Rename this flag types for consistency. Matt Moyer 2021-03-08 14:33:38 -0600
  • a059d8dfce
    Refactor "get kubeconfig" a bit more to clean things up. Matt Moyer 2021-03-08 14:31:13 -0600
  • 8c0a073cb6
    Fix this constant name to match its value. Matt Moyer 2021-03-08 13:31:16 -0600
  • 389cd3486b
    Rework "pinniped get kubeconfig" so that --concierge-mode can be used even when auto-discovering other parameters. Matt Moyer 2021-03-08 11:43:56 -0600
  • eac108aee5
    Merge pull request #478 from vmware-tanzu/prepare-script-macos-big-sur Matt Moyer 2021-03-08 10:02:52 -0600
  • 49ec16038c Add integration test for using "kubectl exec" through the impersonator Ryan Richard 2021-03-05 16:14:45 -0800
  • 4bd68b1fa1 Use LC_ALL=C instead of LC_CTYPE=C because it works on Big Sur Margo Crawford 2021-03-05 15:25:52 -0800
  • 73419313ee
    Log when the validation eventually succeeds. Matt Moyer 2021-03-05 16:59:43 -0600
  • 4750d7d7d2
    The stderr from "pinniped get kubeconfig" is no longer empty. Matt Moyer 2021-03-05 16:57:24 -0600
  • ba0dc3bf52
    Remove this test retry loop since the "get kubeconfig" step should now wait. Matt Moyer 2021-03-05 16:39:57 -0600
  • 5d8594b285
    Add validation step to "pinniped get kubeconfig". Matt Moyer 2021-03-05 16:35:42 -0600
  • ce1b6303d9
    Add an "--output" flag to "pinniped get kubeconfig". Matt Moyer 2021-03-05 15:53:30 -0600
  • 36bc679142
    Add diagnostic logging to "pinniped get kubeconfig". Matt Moyer 2021-03-05 15:52:17 -0600
  • c4f6fd5b3c
    Add a bit nicer assertion helper in testutil/testlogger. Matt Moyer 2021-03-05 15:49:45 -0600
  • 52f58477b8
    Wait for the ELB to become available _before_ starting the kubectl command. Matt Moyer 2021-03-05 09:32:49 -0600
  • d848499176
    Close this HTTP response body in TestE2EFullIntegration. Matt Moyer 2021-03-05 08:45:25 -0600
  • c3b7d21037
    Be less picky about what error code is returned here. Matt Moyer 2021-03-05 08:39:48 -0600
  • 832bc2726e
    Merge pull request #477 from vmware-tanzu/dependabot/go_modules/github.com/google/go-cmp-0.5.5 Matt Moyer 2021-03-05 08:20:51 -0600
  • 3833ba0430
    Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 dependabot[bot] 2021-03-05 05:59:54 +0000
  • ec133b9743 Resolve some new linter errors Ryan Richard 2021-03-04 17:44:01 -0800
  • d8c6894cbc All controller unit tests should not cancel context until test is over Ryan Richard 2021-03-04 17:25:43 -0800
  • b102aa8991 In unit test, wait for obj from informer instead of resource version Ryan Richard 2021-03-04 15:36:51 -0800
  • 9eb97e2683 Use Eventually when making tls connections and avoid resource version 0 Ryan Richard 2021-03-04 13:52:34 -0800
  • fea626b654
    Remove this proxy-related test code that we ended up not needing. Matt Moyer 2021-03-04 17:19:59 -0600
  • 16163b989b
    Use regular http.Client in this test. Matt Moyer 2021-03-04 17:18:24 -0600
  • 165fce67af
    Use the unversioned REST client for this check. Matt Moyer 2021-03-04 16:23:39 -0600
  • 6a8f377781
    Fix a linter warning. Matt Moyer 2021-03-04 16:16:03 -0600
  • d24cf4b8a7
    Go back to testing entirely through the proxy, but add a retry loop during the first connection. Matt Moyer 2021-03-04 16:05:56 -0600
  • 34e15f03c3
    Simplify const declarations in flag_types.go. Matt Moyer 2021-03-04 15:17:42 -0600
  • 274e6281a8
    Whoops, missed these fixes in test/library/env.go. Matt Moyer 2021-03-04 15:21:17 -0600
  • 7146cb3880
    Remove old debug-make-impersonation-token command. Matt Moyer 2021-03-04 15:02:42 -0600
  • 9dfbe60253
    Do the kubeconfig proxy environment injection, but actually render back out the YAML. Matt Moyer 2021-03-04 14:41:20 -0600
  • 1734280a19
    Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy Matt Moyer 2021-03-04 12:38:00 -0600
  • 9a0f75980d
    Set a special proxy environment just for the "pinniped login oidc" command in the E2E test. Matt Moyer 2021-03-04 12:35:29 -0600
  • ddd1d29e5d
    Fix "pinniped get kubeconfig" strategy detection to pick the _first_ working strategy. Matt Moyer 2021-03-04 12:24:57 -0600
  • 03f09c6870
    Allow TestE2EFullIntegration to run on clusters where only the impersonation proxy works (again). Matt Moyer 2021-03-03 16:49:33 -0600
  • f99c186c55
    Merge pull request #475 from vmware-tanzu/dependabot/go_modules/k8s.io/klog/v2-2.6.0 Matt Moyer 2021-03-04 10:04:08 -0600
  • 14b8def320
    Bump k8s.io/klog/v2 from 2.5.0 to 2.6.0 dependabot[bot] 2021-03-04 06:10:36 +0000
  • 5697adc36a Revert "Allow TestE2EFullIntegration to run on clusters where only the impersonation proxy works." Ryan Richard 2021-03-03 17:24:10 -0800
  • 9c1c760f56 Always clean up the ConfigMap at the end of the impersonator int test Ryan Richard 2021-03-03 16:23:07 -0800
  • 48f2ae9eb4 Fix a typo in concierge_impersonation_proxy_test.go Ryan Richard 2021-03-03 15:17:45 -0800
  • 7c9aff3278
    Allow TestE2EFullIntegration to run on clusters where only the impersonation proxy works. Matt Moyer 2021-03-03 16:49:33 -0600
  • 58607c7e81 Update TestCredentialIssuer int test to ignore ImpersonationProxy type Ryan Richard 2021-03-03 14:19:24 -0800
  • 1b3103c9b5 Remove a nolint comment to satisfy the version of the linter used in CI Ryan Richard 2021-03-03 13:37:03 -0800
  • 666c0b0e18 Use CredentialIssuer for URL/CA discovery in impersonator int test Ryan Richard 2021-03-03 12:53:23 -0800
  • f0fc84c922 Add new allowed values to field validations on CredentialIssuer Ryan Richard 2021-03-03 12:30:21 -0800
  • 7b7901af36 Add -timeout 0 when describing how to run integration tests Ryan Richard 2021-03-03 12:08:40 -0800
  • 57453773ea CONTRIBUTING.md: remove mention of Tilt, since it isn't working well Ryan Richard 2021-03-03 12:06:44 -0800
  • f4fcb9bde6
    Sort CredentialIssuer strategies in preferred order. Matt Moyer 2021-03-03 14:03:27 -0600
  • 2c19580ad4
    Add CLI caching of Concierge temporary credentials. Matt Moyer 2021-03-03 12:09:52 -0600
  • 0799a538dc change FromString to Parse so TargetPort parses correctly Margo Crawford 2021-03-03 11:11:58 -0800
  • 4f700d4811
    Merge pull request #473 from enj/enj/r/oidc_discovery_json Mo Khan 2021-03-03 14:12:33 -0500
  • d7edc41c24
    oidc discovery: encode metadata once and reuse Monis Khan 2021-03-03 13:37:43 -0500
  • 333a3ab4c2 impersonator_config_test.go: Add another unit test Ryan Richard 2021-03-03 09:37:08 -0800
  • 730092f39c impersonator_config.go: refactor to clean up cert name handling Ryan Richard 2021-03-03 09:22:35 -0800
  • d3599c541b Fill in the frontend field of CredentialIssuer status for impersonator Ryan Richard 2021-03-02 16:51:35 -0800
  • 454f35ccd6 Edit a comment on a type and run codegen Ryan Richard 2021-03-02 16:00:49 -0800
  • 27daf0a2fe Increase timeout for creating load balancer in impersonation proxy test Margo Crawford 2021-03-02 15:49:01 -0800
  • 8bf03257f4 Add new impersonation-related constants to api types and run codegen Ryan Richard 2021-03-02 15:27:54 -0800
  • 1ad2c38509 Impersonation controller updates CredentialIssuer on every call to Sync Ryan Richard 2021-03-02 14:48:58 -0800
  • 84cc42b2ca Remove tls field from the impersonator config Ryan Richard 2021-03-02 12:23:32 -0800
  • 4c68050706 Allow all headers besides impersonation-* through impersonation proxy Margo Crawford 2021-03-02 14:56:54 -0800
  • aa826a1579
    Merge pull request #472 from mattmoyer/deflake-getpinnipedcategory-test Matt Moyer 2021-03-02 16:42:23 -0600
  • 60f92d5fe2
    Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy Matt Moyer 2021-03-02 16:06:19 -0600
  • df27c2e1fc
    Use randomly generated API groups in TestKubeClientOwnerRef. Matt Moyer 2021-03-02 15:41:21 -0600
  • 45f57939af
    Make TestGetPinnipedCategory more resilient. Matt Moyer 2021-03-02 14:17:27 -0600
  • 30f5f66090
    Merge pull request #471 from vmware-tanzu/change-credentialissuer-strategies-api Matt Moyer 2021-03-02 15:39:41 -0600
  • 2a29303e3f
    Fix label handling in kubecertagent controllers. Matt Moyer 2021-03-02 13:59:46 -0600