ContainerImage.Pinniped/internal
Ryan Richard 548977f579 Update group memberships during refresh for upstream OIDC providers
Update the user's group memberships when possible. Note that we won't
always have enough information to be able to update it (see code
comments).
2022-01-14 16:38:21 -08:00
..
apiserviceref Use API service as owner ref for cluster scoped resources 2021-02-10 21:52:08 -05:00
authenticators Move ad specific stuff to controller 2021-12-09 16:16:36 -08:00
certauthority certauthority: tolerate larger clock skew between API server and pinniped 2021-09-21 09:32:24 -04:00
clusterhost Introduce clusterhost package to determine whether a cluster has control plane nodes 2021-02-09 11:16:01 -08:00
concierge Update all deps to latest where possible, bump Kube deps to v0.23.1 2021-12-16 21:15:27 -05:00
config Add impersonationProxyServerPort to the Concierge's static ConfigMap 2021-11-17 13:27:59 -08:00
constable Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
controller Refuse logins when no upstream refresh token and no userinfo endpoint 2022-01-12 18:03:25 -08:00
controllerinit kubecertagent: fix flakey tests 2021-09-16 14:48:04 -04:00
controllerlib test/integration: run parallel tests concurrently with serial tests 2021-08-26 12:59:52 -04:00
controllermanager Update all deps to latest where possible, bump Kube deps to v0.23.1 2021-12-16 21:15:27 -05:00
crud Update all deps to latest where possible, bump Kube deps to v0.23.1 2021-12-16 21:15:27 -05:00
crypto/ptls Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
deploymentref Use API service as owner ref for cluster scoped resources 2021-02-10 21:52:08 -05:00
downward internal/downward: add support for (optional) pod name 2020-12-11 11:49:27 -05:00
dynamiccert Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
endpointaddr Add endpointaddr pkg for parsing host+port inputs. 2021-05-25 16:17:26 -05:00
execcredcache Add CLI caching of cluster-specific credentials. 2021-04-08 14:12:34 -05:00
fositestorage Add struct field for storing upstream access token in downstream session 2022-01-12 18:03:25 -08:00
fositestoragei More adjustments based on PR feedback 2021-04-27 16:54:26 -07:00
groupsuffix Remove unparam linter 2021-08-19 10:20:24 -07:00
here Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
httputil Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
issuer dynamiccert: split into serving cert and CA providers 2021-03-15 12:24:07 -04:00
kubeclient Drop unsafe unwrapper for exec.roundTripper 2021-12-17 08:28:30 -05:00
leaderelection Ensure concierge and supervisor gracefully exit 2021-08-30 20:29:52 -04:00
localuserauthenticator Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
mocks Perform access token based refresh by fetching the userinfo 2022-01-12 18:05:10 -08:00
net/phttp phttp: add generic support for RFC 2616 14.46 warnings headers 2021-11-30 15:11:59 -05:00
oidc Update group memberships during refresh for upstream OIDC providers 2022-01-14 16:38:21 -08:00
ownerref internal/groupsuffix: mutate TokenCredentialRequest's Authenticator 2021-02-10 15:53:44 -05:00
plog Update all deps to latest where possible, bump Kube deps to v0.23.1 2021-12-16 21:15:27 -05:00
psession Revert adding allowAccessTokenBasedRefresh flag to OIDCIdentityProvider 2022-01-12 18:03:25 -08:00
registry Update all deps to latest where possible, bump Kube deps to v0.23.1 2021-12-16 21:15:27 -05:00
secret All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
supervisor/server Update all deps to latest where possible, bump Kube deps to v0.23.1 2021-12-16 21:15:27 -05:00
testutil Perform access token based refresh by fetching the userinfo 2022-01-12 18:05:10 -08:00
upstreamldap Clean up nits in AD code 2021-12-17 08:53:44 -05:00
upstreamoidc Perform access token based refresh by fetching the userinfo 2022-01-12 18:05:10 -08:00
valuelesscontext valuelesscontext: make unit tests more clear 2021-04-30 10:43:29 -04:00