Pinniped is the easy, secure way to log in to your Kubernetes clusters.
Go to file
Jason van Zyl 6491742c3a Minimal changes to allow an alternate deployment mechanism
The purpose of this change is to allow Helm to be used to deploy Pinniped
into the local KinD cluster for the local integration tests. That said,
the change allows any alternate deployment mechanism, I just happen
to be using it with Helm.

All default behavior is preserved. This won't change how anyone uses the
script today, it just allows me not to copy/paste the whole setup for the
integration tests.

Changes:

1) An option called `--alternate-deploy <path-to-deploy-script>` has been
added, that when enabled calls the specified script instead of using ytt
and kapp. The alternate deploy script is called with the app to deploy
and the tag of the docker image to use. We set the default value of
the alternate_deploy variable to undefined, and there is a check that
tests if the alternate deploy is defined. For the superivsor it looks
like this:

```
if [ "$alternate_deploy" != "undefined" ]; then
  log_note "The Pinniped Supervisor will be deployed with $alternate_deploy pinniped-supervisor $tag..."
  $alternate_deploy pinniped-supervisor $tag
else
  normal ytt/kapp deploy
fi
```

2) Additional log_note entries have been added to enumerate all values passed
into the ytt/kapp deploy. Used while I was trying to reach parity in the integration
tests, but I think they are useful for debugging.

3) The manifests produced by ytt and written to /tmp are now named individually.
This is so an easy comparison can be made between manifests produced by a ytt/kapp
run of integration tests and manifests produced by helm run of the integration tests.
If something is not working I have been comparing the manifests after these runs to
find differences.
2022-02-20 10:15:29 -05:00
.github Add the concept of a tracking issue to the proposal process 2022-02-17 10:42:10 -08:00
apis Update comment for skipGroupRefresh 2022-02-17 12:50:28 -08:00
cmd Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
deploy Update comment for skipGroupRefresh 2022-02-17 12:50:28 -08:00
generated Update comment for skipGroupRefresh 2022-02-17 12:50:28 -08:00
hack Minimal changes to allow an alternate deployment mechanism 2022-02-20 10:15:29 -05:00
internal Only run group refresh when the skipGroupRefresh boolean isn't set 2022-02-17 12:50:28 -08:00
pkg CLI requires HTTPS OIDC issuer, authorize, and token URLS 2022-02-16 10:41:51 -08:00
proposals Fix spelling typo in proposals/README.md 2022-02-17 10:59:23 -08:00
public added search functionality to docs on Pinniped.dev 2021-04-09 10:58:39 -05:00
site Merge pull request #1003 from enj/enj/d/dex_password 2022-02-15 15:45:54 -05:00
test Add integration test 2022-02-17 12:50:28 -08:00
.dockerignore dockerignore gets same contents as gitignore 2021-07-26 11:28:25 -07:00
.gitattributes Add .gitattributes as a hint to the GitHub diff viewer. 2020-09-15 11:44:23 -05:00
.gitignore dockerignore gets same contents as gitignore 2021-07-26 11:28:25 -07:00
.golangci.yaml Remove unparam linter 2021-08-19 10:20:24 -07:00
.pre-commit-config.yaml Rename dex namespace, add new ytt value to deploy/tools, and remove Tilt 2021-04-05 15:01:49 -07:00
ADOPTERS.md Add OK a.m.b.a. to adopters.md file 2021-04-14 18:38:11 -05:00
CODE_OF_CONDUCT.md Rename the CoC and contributor guide to the names GitHub recognizes. 2020-10-02 15:53:48 -05:00
CONTRIBUTING.md Fix a typo in CONTRIBUTING.md from a recent commit: comma in wrong place 2022-02-15 16:45:49 -08:00
Dockerfile Bump golang from 1.17.6 to 1.17.7 2022-02-11 01:13:54 +00:00
go.mod Bump Kube to v0.23.3 and rest to latest 2022-02-10 16:15:26 -05:00
go.sum Bump Kube to v0.23.3 and rest to latest 2022-02-10 16:15:26 -05:00
GOVERNANCE.md Auto-format GOVERNANCE.md 2022-02-17 10:08:37 -08:00
LICENSE Add Apache 2.0 license. 2020-07-06 13:50:31 -05:00
MAINTAINERS.md So long and thanks for all the fish 🦭 2021-09-03 12:38:53 -05:00
README.md Updated community and resources pages 2021-12-16 16:02:47 -06:00
ROADMAP.md Update ROADMAP.md 2022-02-03 08:57:47 -05:00
SCOPE.md Move scope doc out of website to SCOPE.md. 2021-02-23 11:11:07 -06:00
SECURITY.md SECURITY.md: follow established pattern 2021-02-09 09:08:19 -05:00

Pinniped Logo

Overview

Pinniped provides identity services to Kubernetes.

  • Easily plug in external identity providers into Kubernetes clusters while offering a simple install and configuration experience. Leverage first class integration with Kubernetes and kubectl command-line.
  • Give users a consistent, unified login experience across all your clusters, including on-premises and managed cloud environments.
  • Securely integrate with an enterprise IDP using standard protocols or use secure, externally managed identities instead of relying on simple, shared credentials.

To learn more, please visit the Pinniped project's website, https://pinniped.dev.

Getting started with Pinniped

Care to kick the tires? It's easy to install and try Pinniped.

Discussion

Got a question, comment, or idea? Please don't hesitate to reach out via GitHub Discussions, GitHub Issues, or in the Kubernetes Slack Workspace within the #pinniped channel.

Contributions

Want to get involved? Contributions are welcome.

Please see the contributing guide for more information about reporting bugs, requesting features, building and testing the code, submitting PRs, and other contributor topics.

Community meetings

Pinniped is better because of our contributors and maintainers. It is because of you that we can bring great software to the community. Please join us during our online community meetings, occurring every first and third Thursday of the month at 9 AM PT / 12 PM ET.

Note: Community meetings are currently paused until early 2022 as we wind down 2021!

Use this Zoom Link to attend and add any agenda items you wish to discuss to the notes document. Join our Google Group to receive invites to this meeting.

If the meeting day falls on a US holiday, please consider that occurrence of the meeting to be canceled.

Adopters

Some organizations and products using Pinniped are featured in ADOPTERS.md. Add your own organization or product here.

Reporting security vulnerabilities

Please follow the procedure described in SECURITY.md.

License

Pinniped is open source and licensed under Apache License Version 2.0. See LICENSE.

Copyright 2020-2021 the Pinniped contributors. All Rights Reserved.