Commit Graph

  • 643c60fd7a
    Drop NewKubeConfigInfoPublisherController, start populating strategy frontend from kubecertagent execer controller. Matt Moyer 2021-03-02 12:55:24 -0600
  • 7174f857d8
    Add generated code. Matt Moyer 2021-03-01 16:17:04 -0600
  • 0be2c0d40f
    Add CredentialIssuer "status.strategies[].frontend" field. Matt Moyer 2021-03-01 14:26:43 -0600
  • a75c2194bc Read the names of the impersonation-related resources from the config Ryan Richard 2021-03-02 09:31:24 -0800
  • 41140766f0 Add integration test which demonstrates double impersonation Ryan Richard 2021-03-01 17:53:26 -0800
  • 045c427317 Merge branch 'main' into impersonation-proxy Ryan Richard 2021-03-01 17:03:56 -0800
  • ac404af48f Add .DS_Store files to .gitignore Ryan Richard 2021-03-01 17:03:05 -0800
  • a2ecd05240 Impersonator config controller writes CA cert & key to different Secret Ryan Richard 2021-03-01 17:02:08 -0800
  • a778a5ef81
    Merge pull request #469 from mattmoyer/split-out-credentialissuer-status-helpers Matt Moyer 2021-03-01 18:14:16 -0600
  • c94ee7188c
    Factor out issuerconfig.UpdateStrategy helper. Matt Moyer 2021-03-01 15:41:55 -0600
  • 7ef6a02d0a
    Merge pull request #466 from mattmoyer/bump-dependencies Matt Moyer 2021-03-01 14:16:58 -0600
  • c832cab8d0
    Update internal/oidc/token_exchange.go for latest Fosite version. Matt Moyer 2021-03-01 13:08:41 -0600
  • 234465789b
    Regenerate gomock mocks with v1.5.0. Matt Moyer 2021-03-01 10:08:57 -0600
  • da6d69d807
    Bump github.com/golang/mock from 1.4.4 to 1.5.0 dependabot[bot] 2021-02-25 15:39:55 +0000
  • 04ef7c5456
    Bump github.com/ory/fosite from 0.36.0 to 0.38.0 dependabot[bot] 2021-02-25 15:39:48 +0000
  • f05c3092b5
    Bump github.com/go-openapi/spec from 0.19.9 to 0.20.3 dependabot[bot] 2021-02-25 15:39:25 +0000
  • 2637dc00da
    Bump golang from 1.15.8 to 1.16.0 dependabot[bot] 2021-02-17 05:54:07 +0000
  • e8365d2c57
    Merge pull request #467 from mattmoyer/fix-docs-title Matt Moyer 2021-03-01 11:35:56 -0600
  • dd151b3f50
    Fix missing titles on website docs. Matt Moyer 2021-03-01 11:31:27 -0600
  • f1eeae8c71 Parse out ports from impersonation proxy endpoint config Ryan Richard 2021-02-26 15:01:38 -0800
  • 41e4a74b57 impersonator_config_test.go: more small refactoring of test helpers Ryan Richard 2021-02-26 13:53:30 -0800
  • fa49beb623 Change length of TLS certs and CA. Margo Crawford 2021-02-26 12:05:17 -0800
  • 9bd206cedb impersonator_config_test.go: small refactor of test helpers Margo Crawford 2021-02-26 11:27:19 -0800
  • 5b01e4be2d impersonator_config.go: handle more error cases Ryan Richard 2021-02-26 10:58:56 -0800
  • bbbb40994d Prefer hostnames over IPs when making certs to match load balancer ingress Ryan Richard 2021-02-25 17:03:34 -0800
  • f709da5569 Updated test assertions for new logger version Margo Crawford 2021-02-25 15:18:36 -0800
  • ccb17843c1 Fix some lint errors that resulted from merging main Margo Crawford 2021-02-25 15:06:24 -0800
  • f8111db5ff Merge branch 'main' into impersonation-proxy Ryan Richard 2021-02-25 14:50:40 -0800
  • 3fcde8088c concierge_impersonation_proxy_test.go: Make it work on more clusters Ryan Richard 2021-02-25 14:40:02 -0800
  • f937ae2c07
    Add --concierge-credential-issuer flag to "pinniped get kubeconfig" command. Matt Moyer 2021-02-25 14:16:40 -0600
  • 1c7c22352f
    Switch "get kubeconfig" flags to use --concierge-mode flag instead of boolean flag. Matt Moyer 2021-02-25 11:31:11 -0600
  • 0cae72b391 Get hostname from load balancer ingress to use for impersonator certs Ryan Richard 2021-02-25 11:40:14 -0800
  • 9a8c80f20a Impersonator checks cert addresses when endpoint config is a hostname Margo Crawford 2021-02-25 10:27:19 -0800
  • 1513bd6f10
    Bump github.com/golang/mock from 1.4.4 to 1.5.0 dependabot[bot] 2021-02-25 15:39:55 +0000
  • b72c976c8a
    Bump github.com/ory/fosite from 0.36.0 to 0.38.0 dependabot[bot] 2021-02-25 15:39:48 +0000
  • dfccabac4a
    Bump github.com/go-openapi/spec from 0.19.9 to 0.20.3 dependabot[bot] 2021-02-25 15:39:25 +0000
  • a42e3708aa
    Merge pull request #453 from mattmoyer/bump-dependencies Matt Moyer 2021-02-25 09:33:53 -0600
  • c8fc8a0b65
    Reformat some log-based test assertions. Matt Moyer 2021-02-25 08:11:37 -0600
  • 8fc68a4b21 WIP improved cert management in impersonator config Margo Crawford 2021-02-24 17:08:58 -0800
  • 975d493b8a Fix some small lint errors Margo Crawford 2021-02-24 16:09:15 -0800
  • aee7a7a72b More WIP managing TLS secrets from the impersonation config controller Ryan Richard 2021-02-24 16:03:17 -0800
  • a31c24e5a0
    Bump a bunch of minor dependencies. Matt Moyer 2021-02-24 22:37:31 +0000
  • 943b0ff6ec
    Switch login flags to use --concierge-mode flag instead of boolean flag. Matt Moyer 2021-02-24 17:07:07 -0600
  • 15eac896db
    Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 dependabot[bot] 2021-02-24 22:37:31 +0000
  • d42c533fbb WIP managing TLS secrets from the impersonation config controller Ryan Richard 2021-02-24 10:56:24 -0800
  • 4dbde4cf7f
    Fix TestImpersonationProxy on Kubernetes 1.20 with RootCAConfigMap. Matt Moyer 2021-02-24 12:08:41 -0600
  • 7be8927d5e
    Add generated code for new CredentialIssuer API fields. Matt Moyer 2021-02-24 10:47:06 -0600
  • 96d7743eab
    Add CredentialIssuer API fields for impersonation proxy. Matt Moyer 2021-02-24 10:45:25 -0600
  • 2254f76b30
    Fix a broken link, a typo, and tweak menu text. Matt Moyer 2021-02-24 09:23:21 -0600
  • 852c1b7a27
    Fix some copy-paste errors on install-supervisor.md. Matt Moyer 2021-02-23 16:01:40 -0600
  • 522210adb6
    Merge pull request #447 from mattmoyer/website-security-headers Matt Moyer 2021-02-23 14:39:31 -0600
  • a4089fcc72
    Add security headers to the website. Matt Moyer 2021-02-23 14:26:58 -0600
  • 60034b39a3
    Fix wording on website hero text. Matt Moyer 2021-02-23 12:17:26 -0800
  • 2f7c80a5e0
    Merge pull request #446 from mattmoyer/more-website-tweaks Matt Moyer 2021-02-23 14:13:27 -0600
  • 827e6e0dc0
    More website tweaks. Matt Moyer 2021-02-23 13:55:42 -0600
  • dac1c9939e concierge_impersonation_proxy_test.go: Test all the verbs Margo Crawford 2021-02-23 10:38:02 -0800
  • a6d74ea876
    Merge pull request #443 from mattmoyer/reorg-docs Matt Moyer 2021-02-23 11:12:32 -0600
  • 7a1d92a8d4
    Restructure docs into new layout. Matt Moyer 2021-02-22 17:52:23 -0600
  • f2db76a0d5
    Fix typo in multiple-pinnipeds post. Matt Moyer 2021-02-22 09:36:29 -0600
  • 3721632de2
    Move scope doc out of website to SCOPE.md. Matt Moyer 2021-02-18 10:10:35 -0600
  • 4de949fe18
    Rework docs sidebar to have some nesting. Matt Moyer 2021-02-17 17:02:57 -0600
  • 069b3fba37
    Merge remote-tracking branch 'upstream/main' into impersonation-proxy Andrew Keesler 2021-02-23 12:10:52 -0500
  • e74dd47b1d
    Merge pull request #439 from enj/enj/f/whoami_api Mo Khan 2021-02-23 10:40:38 -0500
  • 6a9f57f83d
    TestWhoAmI: support older clusters (CSR and impersonation) Monis Khan 2021-02-22 23:30:02 -0500
  • 80ff5c1f17 Fix bug which prevented watches from working through impersonator Ryan Richard 2021-02-22 17:23:11 -0800
  • aa22047a0f
    Generated Monis Khan 2021-02-19 13:55:01 -0500
  • abc941097c
    Add WhoAmIRequest Aggregated Virtual REST API Monis Khan 2021-02-19 13:21:10 -0500
  • 4d3be0e39b
    Bump github.com/go-logr/logr from 0.3.0 to 0.4.0 dependabot[bot] 2021-02-22 06:54:46 +0000
  • 62630d6449
    getAggregatedAPIServerScheme: move group version logic internally Monis Khan 2021-02-19 10:10:30 -0500
  • bfaae1113b
    Bump k8s.io/klog/v2 from 2.4.0 to 2.5.0 dependabot[bot] 2021-02-19 16:07:22 +0000
  • f228f022f5
    Merge pull request #435 from enj/enj/c/bump_v0.20.4 Mo Khan 2021-02-19 10:59:40 -0500
  • 1c1decfaf1
    Generated Monis Khan 2021-02-19 10:33:10 -0500
  • 7786c83b0d
    Bump kube deps to v0.20.4 Monis Khan 2021-02-19 10:26:53 -0500
  • 41b75e6977
    Merge pull request #431 from enj/enj-patch-1 Mo Khan 2021-02-19 08:48:06 -0500
  • a54e1145a5
    concierge API service: update groupPriorityMinimum and versionPriority Mo Khan 2021-02-19 07:47:38 -0500
  • 3d1f7c45c9
    Bump k8s.io/apimachinery from 0.20.1 to 0.20.4 dependabot[bot] 2021-02-19 06:11:41 +0000
  • 9ef0a5fcc2
    Bump k8s.io/client-go from 0.20.1 to 0.20.4 dependabot[bot] 2021-02-19 06:11:23 +0000
  • ef08feee54
    Bump k8s.io/apiserver from 0.20.1 to 0.20.4 dependabot[bot] 2021-02-19 06:09:55 +0000
  • b8592a361c Add some comments to concierge_impersonation_proxy_test.go Ryan Richard 2021-02-18 16:27:03 -0800
  • 19881e4d7f Increase how long we wait for loadbalancers to be deleted for int test Margo Crawford 2021-02-18 15:58:27 -0800
  • 126f9c0da3 certs_manager.go: Rename some local variables Ryan Richard 2021-02-18 11:16:34 -0800
  • 7a140bf63c concierge_impersonation_proxy_test.go: add an eventually loop Margo Crawford 2021-02-18 11:08:13 -0800
  • f5fedbb6b2 Add Service resource "delete" permission to Concierge RBAC Ryan Richard 2021-02-18 10:59:58 -0800
  • 957cb2d56c
    Merge remote-tracking branch 'upstream/main' into impersonation-proxy Andrew Keesler 2021-02-18 13:37:28 -0500
  • b3cdc438ce
    internal/concierge/impersonator: reuse kube bearertoken.Authenticator Andrew Keesler 2021-02-18 10:13:24 -0500
  • 499f1ea28b
    Bump k8s.io/apimachinery from 0.20.1 to 0.20.3 dependabot[bot] 2021-02-18 05:59:07 +0000
  • eb0eede37a
    Bump k8s.io/apiserver from 0.20.1 to 0.20.3 dependabot[bot] 2021-02-18 05:58:34 +0000
  • e41e0253a2
    Bump k8s.io/client-go from 0.20.1 to 0.20.3 dependabot[bot] 2021-02-18 05:58:28 +0000
  • 22a3e73bac impersonator_config_test.go: use require.Len() when applicable Margo Crawford 2021-02-17 17:29:56 -0800
  • 0ad91c43f7 ImpersonationConfigController uses servicesinformer Margo Crawford 2021-02-17 17:22:13 -0800
  • 2b208807a6
    Merge pull request #426 from mattmoyer/website-accessibility-tweaks Matt Moyer 2021-02-17 17:28:03 -0600
  • 25f841d063
    Tweak website styles for accessibility. Matt Moyer 2021-02-17 17:08:34 -0600
  • 10b769c676 Fixed integration tests for load balancer capabilities Margo Crawford 2021-02-17 10:32:29 -0800
  • 002925d7d0
    Bump golang from 1.15.8 to 1.16.0 dependabot[bot] 2021-02-17 05:54:07 +0000
  • 67da840097 Add loadbalancer for impersonation proxy when needed Margo Crawford 2021-02-16 15:57:02 -0800
  • 7682759472
    Bump k8s.io/apiserver from 0.20.1 to 0.20.2 dependabot[bot] 2021-02-16 23:15:26 +0000
  • 446b981bfe
    Bump github.com/go-logr/stdr from 0.2.0 to 0.4.0 dependabot[bot] 2021-02-16 23:15:20 +0000
  • 6f26e3c76c
    Bump k8s.io/client-go from 0.20.1 to 0.20.2 dependabot[bot] 2021-02-16 23:15:18 +0000
  • e600065784
    Bump github.com/spf13/cobra from 1.1.1 to 1.1.3 dependabot[bot] 2021-02-16 23:15:00 +0000
  • 42bca6102c
    Bump k8s.io/apimachinery from 0.20.1 to 0.20.2 dependabot[bot] 2021-02-16 23:14:58 +0000