Pinniped is the easy, secure way to log in to your Kubernetes clusters.
Go to file
Ryan Richard 80153f9a80 Allow app to start despite failing to borrow the cluster signing key
- Controller and aggregated API server are allowed to run
- Keep retrying to borrow the cluster signing key in case the failure
  to get it was caused by a transient failure
- The CredentialRequest endpoint will always return an authentication
  failure as long as the cluster signing key cannot be borrowed
- Update which integration tests are skipped to reflect what should
  and should not work based on the cluster's capability under this
  new behavior
- Move CreateOrUpdateCredentialIssuerConfig() and related methods
  to their own file
- Update the CredentialIssuerConfig's Status every time we try to
  refresh the cluster signing key
2020-08-25 18:22:53 -07:00
.github Add additional go.mod directories to dependabot. 2020-08-10 12:09:32 -05:00
cmd Rename project 2020-08-20 10:54:15 -07:00
deploy Upon pod startup, update the Status of CredentialIssuerConfig 2020-08-24 18:07:34 -07:00
hack Upon pod startup, update the Status of CredentialIssuerConfig 2020-08-24 18:07:34 -07:00
internal Allow app to start despite failing to borrow the cluster signing key 2020-08-25 18:22:53 -07:00
kubernetes/1.19 Upon pod startup, update the Status of CredentialIssuerConfig 2020-08-24 18:07:34 -07:00
pkg pkg/config: force api.servingCertificate.renewBeforeSeconds to be positive 2020-08-20 18:21:48 -04:00
test Allow app to start despite failing to borrow the cluster signing key 2020-08-25 18:22:53 -07:00
tools Add generated mock for loginrequest.CertIssuer interface. 2020-07-27 12:33:33 -07:00
.gitignore Hello, world! 2020-07-02 17:05:59 -07:00
.golangci.yaml Fix latent linter issues. 2020-08-06 20:42:20 -05:00
.pre-commit-config.yaml Add a .pre-commit-config.yaml file. 2020-08-14 14:41:11 -05:00
Dockerfile Rename project 2020-08-20 10:54:15 -07:00
LICENSE Add Apache 2.0 license. 2020-07-06 13:50:31 -05:00
README.md Rename project 2020-08-20 10:54:15 -07:00
go.mod Rename project 2020-08-20 10:54:15 -07:00
go.sum Allow app to start despite failing to borrow the cluster signing key 2020-08-25 18:22:53 -07:00

README.md

Pinniped

Image of pinniped

About Pinniped

Pinniped provides authentication for Kubernetes clusters.

Developing

Running Lint

./hack/module.sh lint

Running Tests

./hack/module.sh unittest

Pre-commit hooks

This project uses the pre-commit to agree on some conventions about whitespace/file encoding.

$ brew install pre-commit
[...]
$ pre-commit install
pre-commit installed at .git/hooks/pre-commit

Licence

Pinniped is open source and licenced under Apache License Version 2.0. See LICENSE file.

Copyright 2020 VMware, Inc.