djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
521adffb17
ContainerImage.Pinniped/test/integration
History
Monis Khan 521adffb17
impersonation proxy: add nested impersonation support 
This change updates the impersonator logic to use the delegated
authorizer for all non-rest verbs such as impersonate.  This allows
it to correctly perform authorization checks for incoming requests
that set impersonation headers while not performing unnecessary
checks that are already handled by KAS.

The audit layer is enabled to track the original user who made the
request.  This information is then included in a reserved extra
field original-user-info.impersonation-proxy.concierge.pinniped.dev
as a JSON blob.

Signed-off-by: Monis Khan <mok@vmware.com>
2021-04-19 15:52:46 -04:00
..
category_test.go Deflake TestGetPinnipedCategory. 2021-03-30 13:38:33 -05:00
cli_test.go Use a temporary directory for credential cache in CLI tests. 2021-04-08 18:14:21 -05:00
concierge_api_serving_certs_test.go Merge remote-tracking branch 'upstream/main' into impersonation-proxy 2021-03-18 10:36:28 -04:00
concierge_availability_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
concierge_client_test.go Merge remote-tracking branch 'upstream/main' into impersonation-proxy 2021-03-18 10:36:28 -04:00
concierge_credentialissuer_test.go Merge remote-tracking branch 'upstream/main' into impersonation-proxy 2021-03-18 10:36:28 -04:00
concierge_credentialrequest_test.go Merge remote-tracking branch 'upstream/main' into impersonation-proxy 2021-03-18 10:36:28 -04:00
concierge_impersonation_proxy_test.go impersonation proxy: add nested impersonation support 2021-04-19 15:52:46 -04:00
concierge_kubecertagent_test.go Merge remote-tracking branch 'upstream/main' into impersonation-proxy 2021-03-18 10:36:28 -04:00
concierge_kubectl_test.go Rename pinniped-server -> pinniped-concierge 2020-10-06 14:59:03 -04:00
e2e_test.go Remove library.DumpLogs test helper. 2021-03-26 16:43:02 -05:00
kube_api_discovery_test.go Add WhoAmIRequest Aggregated Virtual REST API 2021-02-22 20:02:41 -05:00
kubeclient_test.go Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy 2021-03-04 12:38:00 -06:00
supervisor_discovery_test.go Merge pull request #517 from mattmoyer/deflake-supervisor-oidc-discovery-test 2021-03-29 07:35:58 -07:00
supervisor_healthz_test.go Remove library.AssertNoRestartsDuringTest and make that assertion implicit in library.IntegrationEnv. 2021-03-17 11:18:10 -05:00
supervisor_login_test.go Remove library.DumpLogs test helper. 2021-03-26 16:43:02 -05:00
supervisor_secrets_test.go Remove library.AssertNoRestartsDuringTest and make that assertion implicit in library.IntegrationEnv. 2021-03-17 11:18:10 -05:00
supervisor_storage_garbage_collection_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
supervisor_storage_test.go All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
supervisor_upstream_test.go Remove library.AssertNoRestartsDuringTest and make that assertion implicit in library.IntegrationEnv. 2021-03-17 11:18:10 -05:00
whoami_test.go Merge branch 'main' of github.com:vmware-tanzu/pinniped into impersonation-proxy 2021-03-16 14:35:07 -05:00