djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
59d67322d3
ContainerImage.Pinniped/internal
History
Monis Khan 59d67322d3
Static validation for OIDC clients 
The following validation is enforced:

1. Names must start with client.oauth.pinniped.dev-
2. Redirect URIs must start with https://
   or http://127.0.0.1
   or http://::1
3. All spec lists must not have duplicates

Added an integration test to assert all static validations.

Signed-off-by: Monis Khan <mok@vmware.com>
2022-06-15 15:09:40 -04:00
..
apiserviceref Use API service as owner ref for cluster scoped resources 2021-02-10 21:52:08 -05:00
authenticators Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
certauthority Bump to go1.18.1 and fix linter errors 2022-04-13 16:43:06 -04:00
clusterhost Introduce clusterhost package to determine whether a cluster has control plane nodes 2021-02-09 11:16:01 -08:00
concierge Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
config Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
constable Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
controller Bump project deps, including kube 0.23.6->0.24.1 and Go 1.18.1->1.18.3 2022-06-07 15:26:30 -04:00
controllerinit kubecertagent: fix flakey tests 2021-09-16 14:48:04 -04:00
controllerlib Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
controllermanager Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
crud Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
crypto/ptls Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
deploymentref Allow configuration of supervisor endpoints 2022-01-18 17:43:45 -05:00
downward internal/downward: add support for (optional) pod name 2020-12-11 11:49:27 -05:00
dynamiccert Bump project deps, including kube 0.23.6->0.24.1 and Go 1.18.1->1.18.3 2022-06-07 15:26:30 -04:00
endpointaddr Add endpointaddr pkg for parsing host+port inputs. 2021-05-25 16:17:26 -05:00
execcredcache Add CLI caching of cluster-specific credentials. 2021-04-08 14:12:34 -05:00
fositestorage Update to github.com/golangci/golangci-lint/cmd/golangci-lint@v1.44.2 2022-03-08 12:28:09 -08:00
fositestoragei More adjustments based on PR feedback 2021-04-27 16:54:26 -07:00
groupsuffix Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
here Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
httputil Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
issuer dynamiccert: split into serving cert and CA providers 2021-03-15 12:24:07 -04:00
kubeclient Bump project deps, including kube 0.23.6->0.24.1 and Go 1.18.1->1.18.3 2022-06-07 15:26:30 -04:00
leaderelection Ensure concierge and supervisor gracefully exit 2021-08-30 20:29:52 -04:00
localuserauthenticator Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
mocks Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
net/phttp Update to github.com/golangci/golangci-lint/cmd/golangci-lint@v1.44.2 2022-03-08 12:28:09 -08:00
oidc Static validation for OIDC clients 2022-06-15 15:09:40 -04:00
ownerref internal/groupsuffix: mutate TokenCredentialRequest's Authenticator 2021-02-10 15:53:44 -05:00
plog Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
psession Supervisor should emit a warning when access token lifetime is too short 2022-01-20 13:48:50 -08:00
registry Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
secret All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
supervisor/server Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
testutil Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
upstreamldap More unit tests for LDAP DNs which contain special chars 2022-05-03 15:43:01 -07:00
upstreamoidc Switch to go.uber.org/zap for JSON formatted logging 2022-05-24 11:17:42 -04:00
valuelesscontext valuelesscontext: make unit tests more clear 2021-04-30 10:43:29 -04:00