ContainerImage.Pinniped/internal
Ryan Richard 38802c2184 Add a way to set a default supervisor TLS cert for when SNI won't work
- Setting a Secret in the supervisor's namespace with a special name
  will cause it to get picked up and served as the supervisor's TLS
  cert for any request which does not have a matching SNI cert.
- This is especially useful for when there is no DNS record for an
  issuer and the user will be accessing it via IP address. This
  is not how we would expect it to be used in production, but it
  might be useful for other cases.
- Includes a new integration test
- Also suppress all of the warnings about ignoring the error returned by
  Close() in lines like `defer x.Close()` to make GoLand happier
2020-10-27 16:33:08 -07:00
..
certauthority Add a way to set a default supervisor TLS cert for when SNI won't work 2020-10-27 16:33:08 -07:00
client Pass namespace properly in client.ExchangeToken. 2020-09-22 10:03:32 -05:00
concierge Supervisor controllers apply custom labels to JWKS secrets 2020-10-15 12:40:56 -07:00
config Supervisor controllers apply custom labels to JWKS secrets 2020-10-15 12:40:56 -07:00
constable Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
controller Add a way to set a default supervisor TLS cert for when SNI won't work 2020-10-27 16:33:08 -07:00
controllerlib Add Go vanity import paths. 2020-09-18 14:56:24 -05:00
controllermanager Supervisor controllers apply custom labels to JWKS secrets 2020-10-15 12:40:56 -07:00
downward Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
dynamiccert internal/provider -> internal/dynamiccert 2020-09-23 08:29:35 -04:00
here Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
httputil Implement the rest of an OIDC client CLI library. 2020-10-12 16:41:46 -05:00
mocks Implement the rest of an OIDC client CLI library. 2020-10-12 16:41:46 -05:00
multierror Backfill tests to OIDCProviderConfig controller 2020-10-09 10:39:17 -04:00
oidc Add a way to set a default supervisor TLS cert for when SNI won't work 2020-10-27 16:33:08 -07:00
oidcclient Implement refresh flow in ./internal/oidcclient package. 2020-10-22 17:54:31 -05:00
registry/credentialrequest Add support for multiple IDPs selected using IdentityProvider field. 2020-09-22 10:03:31 -05:00
testutil dynamiccertauthority: fix cert expiration test failure 2020-10-23 15:34:25 -04:00