Commit Graph

  • 93d4581721
    Workaround a bad module version to fix Dependabot. Matt Moyer 2021-02-16 17:05:33 -0600
  • 0a7c5b0604
    Merge pull request #403 from mattmoyer/add-latest-generated-package Matt Moyer 2021-02-16 15:30:48 -0600
  • acbeb93f79
    Don't lint generated code. Matt Moyer 2021-02-16 13:18:18 -0600
  • 6565265bee
    Use new 'go.pinniped.dev/generated/latest' package. Matt Moyer 2021-02-16 13:00:08 -0600
  • b42a34d822
    Add generated client code for 'latest'. Matt Moyer 2021-02-09 09:46:38 -0600
  • 3ce3403b95
    Update ./hack/update.sh to add a "latest" package. Matt Moyer 2021-02-09 09:45:28 -0600
  • eb19980110
    internal/concierge/impersonator: set user extra impersonation headers Andrew Keesler 2021-02-16 09:09:54 -0500
  • c7905c6638
    internal/concierge/impersonator: fail if impersonation headers set Andrew Keesler 2021-02-16 08:15:50 -0500
  • fdd8ef5835
    internal/concierge/impersonator: handle custom login API group Andrew Keesler 2021-02-15 18:00:10 -0500
  • 25bc8dd8a9
    test/integration: hopefully fix TestImpersonationProxy Andrew Keesler 2021-02-15 18:04:12 -0500
  • 6512ab1351
    internal/concierge/impersonator: don't care about namespace Andrew Keesler 2021-02-11 17:27:27 -0500
  • 5cd60fa5f9 Move starting/stopping impersonation proxy server to a new controller Ryan Richard 2021-02-11 17:22:47 -0800
  • fac571b51a
    Merge pull request #410 from ankeesler/update-copyright Andrew Keesler 2021-02-11 12:26:31 -0500
  • 9b87906a30
    Merge remote-tracking branch 'upstream/main' into impersonation-proxy Andrew Keesler 2021-02-11 10:38:08 -0500
  • c8b1f00107
    generated: include 2021 in copyright Andrew Keesler 2021-02-11 10:52:01 -0500
  • f015ad5852
    Merge pull request #405 from enj/enj/i/cluster_scope_concierge v0.6.0 Mo Khan 2021-02-11 08:50:42 -0500
  • b04fd46319
    Update federation domain logic to use status subresource Monis Khan 2021-02-10 21:46:03 -0500
  • 4c304e4224
    Assert all APIs have a status subresource Monis Khan 2021-02-10 21:20:19 -0500
  • 0a9f446893
    Update credential issuer logic to use status subresource Monis Khan 2021-02-10 20:59:46 -0500
  • 96cec59236
    Generated Monis Khan 2021-02-10 20:03:15 -0500
  • 4faf724c2c
    Make credential issuer status optional Monis Khan 2021-02-10 20:02:36 -0500
  • de88ae2f61
    Fix status related RBAC Monis Khan 2021-02-10 18:02:18 -0500
  • dd3d1c8b1b
    Generated Monis Khan 2021-02-10 17:49:21 -0500
  • 2e9baf9fa6
    Correctly generate status subresource for all CRDs Monis Khan 2021-02-10 17:42:08 -0500
  • ac01186499
    Use API service as owner ref for cluster scoped resources Monis Khan 2021-02-10 11:12:03 -0500
  • 2eb01bd307
    authncache: remove namespace concept Monis Khan 2021-02-09 18:16:22 -0500
  • 741b8fe88d
    Generated Monis Khan 2021-02-09 16:21:17 -0500
  • d25c6d9d0a
    Make kubebuilder CRDs cluster scoped Monis Khan 2021-02-09 16:17:53 -0500
  • 89b00e3702
    Declare war on namespaces Monis Khan 2021-02-09 13:59:32 -0500
  • d2480e6300
    Generated Monis Khan 2021-02-09 12:23:22 -0500
  • 4205e3dedc
    Make concierge APIs cluster scoped Monis Khan 2021-02-09 11:57:34 -0500
  • ee80920ffd
    Merge pull request #409 from mattmoyer/upgrade-debian Matt Moyer 2021-02-10 16:57:09 -0600
  • 45f4a0528c
    Upgrade Debian base images from 10.7 to 10.8. Matt Moyer 2021-02-10 15:56:56 -0600
  • d0266cecdb
    Merge pull request #390 from ankeesler/use-more-middleware Andrew Keesler 2021-02-10 16:38:54 -0500
  • 0fc1f17866
    internal/groupsuffix: mutate TokenCredentialRequest's Authenticator Andrew Keesler 2021-02-04 20:02:59 -0500
  • ae6503e972
    internal/plog: add KObj() and KRef() Andrew Keesler 2021-02-04 20:02:38 -0500
  • 44b7679e9f
    Merge pull request #407 from ankeesler/test-flake Mo Khan 2021-02-10 14:24:44 -0500
  • 12d5b8959d
    test/integration: make TestKubeCertAgent more stable Andrew Keesler 2021-02-10 11:25:08 -0500
  • 5b076e7421
    Merge pull request #404 from ankeesler/remove-deprecated-commands Andrew Keesler 2021-02-10 08:33:00 -0500
  • 1ffe70bbea
    cmd/pinniped: delete get-kubeconfig + exchange-token Andrew Keesler 2021-02-09 11:17:11 -0500
  • e4c49c37b9 Merge branch 'main' into impersonation-proxy Ryan Richard 2021-02-09 13:45:37 -0800
  • 268ca5b7f6 Add config structs in impersonator package Ryan Richard 2021-02-09 13:42:56 -0800
  • cf735715f6
    Merge pull request #394 from enj/enj/i/server_side_tcr_api_group Mo Khan 2021-02-09 16:36:13 -0500
  • 2679d27ced
    Use server scheme to handle credential request API group changes Monis Khan 2021-02-09 15:51:38 -0500
  • 6b71b8d8ad
    Revert server side token credential request API group changes Monis Khan 2021-02-09 15:51:35 -0500
  • 8697488126
    internal/concierge/impersonator: use kubeconfig from kubeclient Andrew Keesler 2021-02-09 15:28:56 -0500
  • dfcc2a1eb8 Introduce clusterhost package to determine whether a cluster has control plane nodes Margo Crawford 2021-02-05 17:01:39 -0800
  • 812f5084a1
    internal/concierge/impersonator: don't mutate ServeHTTP() req Andrew Keesler 2021-02-09 13:25:24 -0500
  • 43da4ab2e0
    SECURITY.md: follow established pattern Andrew Keesler 2021-02-09 09:07:49 -0500
  • b360ee05ab
    Bump debian from 10.7-slim to 10.8-slim dependabot[bot] 2021-02-09 05:58:30 +0000
  • e4d8af6701
    Merge pull request #399 from mattmoyer/upgrade-go Matt Moyer 2021-02-08 18:17:17 -0600
  • d06c935c2c
    Upgrade Go from 1.15.7 to 1.15.8. Matt Moyer 2021-02-08 10:58:51 -0600
  • 9399b5d800
    Merge pull request #395 from enj/enj/i/remove_multierror Mo Khan 2021-02-05 15:14:25 -0500
  • 05a471fdf9
    Migrate callers to k8s.io/apimachinery/pkg/util/errors.NewAggregate Monis Khan 2021-02-05 12:56:05 -0500
  • 81d4e50f94
    Remove multierror package Monis Khan 2021-02-05 12:55:18 -0500
  • 850f030fe3
    Merge pull request #393 from enj/enj/i/no_op_tcr_list Matt Moyer 2021-02-05 11:09:09 -0600
  • f7958ae75b
    Add no-op list support to token credential request Monis Khan 2021-02-05 10:55:19 -0500
  • ee05f155ca
    Merge pull request #392 from ankeesler/flowcontrol-rbac Andrew Keesler 2021-02-05 09:19:50 -0500
  • 2ae631b603
    deploy/concierge: add RBAC for flowschemas and prioritylevelconfigurations Andrew Keesler 2021-02-05 08:19:12 -0500
  • 5ce0dbced0
    Bump golang from 1.15.7 to 1.15.8 dependabot[bot] 2021-02-05 06:01:55 +0000
  • 9c64476aee
    Tweak some small bits in the blog post. Matt Moyer 2021-02-04 17:51:35 -0600
  • b6e98b5783
    Update the get.pinniped.dev redirect to always point at the latest version. Matt Moyer 2021-02-04 17:48:41 -0600
  • 9addb4d6e0
    Merge pull request #385 from vmware-tanzu/credential_request_spec_api_group v0.5.0 Matt Moyer 2021-02-04 16:19:20 -0600
  • 2a921f7090
    Merge branch 'main' into credential_request_spec_api_group Ryan Richard 2021-02-04 13:44:53 -0800
  • bb8b65cca6
    Merge pull request #387 from vmware-tanzu/blog/multiple-pinnipeds Matt Moyer 2021-02-04 15:22:52 -0600
  • 5c331e9002
    Fix go.pinniped.dev redirects. Matt Moyer 2021-02-04 14:51:31 -0600
  • 1382fc6e5f
    Add a v0.5.0 "multiple Pinnipeds" blog post. Matt Moyer 2021-02-03 22:07:09 -0600
  • cc8c917249
    Merge pull request #325 from ankeesler/restart-test Andrew Keesler 2021-02-04 13:07:40 -0500
  • ae498f14b4
    test/integration: ensure no pods restart during integration tests Andrew Keesler 2021-01-12 15:55:31 -0500
  • 288d9c999e Use custom suffix in Spec.Authenticator.APIGroup of TokenCredentialRequest Ryan Richard 2021-02-03 15:49:15 -0800
  • 26922307ad prepare-for-integration-tests.sh: New cmdline option --api_group_suffix Andrew Keesler 2021-02-03 12:07:13 -0800
  • 5549a262b9 Rename client_test.go to concierge_client_test.go Ryan Richard 2021-02-03 12:05:21 -0800
  • 6b46bae6c6 Fixed integration test compile failures after rebase Margo Crawford 2021-02-03 11:32:29 -0800
  • c5df66fbd5
    Merge pull request #383 from enj/enj/i/avoid_scheme_double_register Mo Khan 2021-02-03 13:55:33 -0500
  • 23e8c35918 Revert "CredentialIssuer contains Impersonation Proxy spec" Margo Crawford 2021-02-01 12:43:34 -0800
  • ab60396ac4 CredentialIssuer contains Impersonation Proxy spec Margo Crawford 2021-01-29 16:38:50 -0800
  • 343c275f46 Path to ci bundle rather than the actual value for get kubeconfig Margo Crawford 2021-01-27 15:39:16 -0800
  • 12e41d783f Refactored execCredentialForImpersonationProxy to be shared Margo Crawford 2021-01-26 16:49:03 -0800
  • 2f891b4bfb Add --concierge-use-impersonation-proxy to static login Margo Crawford 2021-01-26 16:08:27 -0800
  • 170b86d0c6 Add happy path test for login oidc Margo Crawford 2021-01-26 13:34:09 -0800
  • 07b7b743b4 Impersonation proxy cli arguments Margo Crawford 2021-01-26 11:39:42 -0800
  • 64aff7b983 Only log user ID, not user name/groups. Matt Moyer 2021-01-22 12:12:12 -0600
  • 1299231a48 Add integration test for impersonation proxy. Matt Moyer 2021-01-22 12:00:27 -0600
  • b6abb022f6 Add initial implementation of impersonation proxy. Margo Crawford 2021-01-19 16:37:02 -0800
  • 300d7bd99c
    Drop duplicate logic for unversioned type registration Monis Khan 2021-02-03 10:20:27 -0500
  • 012bebd66e
    Avoid double registering types in server scheme Monis Khan 2021-02-03 09:21:36 -0500
  • 68904c7924
    FAKE COMMIT DO NOT MERGE Andrew Keesler 2021-02-03 09:04:58 -0500
  • e1d06ce4d8
    internal/mocks/mockroundtripper: we don't need these anymore Andrew Keesler 2021-02-03 08:55:38 -0500
  • 52b98bdb87
    Merge pull request #330 from enj/enj/f/better_middleware Andrew Keesler 2021-02-03 08:53:00 -0500
  • 62c117421a
    internal/kubeclient: fix not found test and request body closing bug Andrew Keesler 2021-02-03 08:19:34 -0500
  • efe1fa89fe Allow multiple Pinnipeds to work on same cluster Monis Khan 2021-01-12 20:27:41 -0500
  • 93d25a349f
    hack: fix docker most recent tag check Andrew Keesler 2021-01-22 08:33:24 -0500
  • 93ebd0f949
    internal/plog: add Enabled() Andrew Keesler 2021-01-26 17:34:27 -0500
  • 74a8005f92
    Merge pull request #376 from mattmoyer/add-csrftoken-test Matt Moyer 2021-02-02 11:02:39 -0600
  • 5b4e58f0b8
    Add some trivial unit tests to internal/oidc/csrftoken. Matt Moyer 2021-02-02 09:29:09 -0600
  • b871a02ca3
    Merge pull request #375 from mattmoyer/test-coverage Matt Moyer 2021-02-01 15:19:37 -0600
  • 6a20bbf607
    Add Codecov configuration file. Matt Moyer 2021-02-01 14:28:01 -0600
  • dfa4d639e6
    Merge pull request #374 from microwavables/main Ryan Richard 2021-01-29 14:15:17 -0800
  • 8b4024bf82 Updated the community meeting info with new zoom link and agenda notes Nanci Lancaster 2021-01-29 16:07:23 -0600
  • d89c6546e7
    Merge pull request #373 from microwavables/main Ryan Richard 2021-01-28 09:49:12 -0800