djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b2bdf01152
ContainerImage.Pinniped/internal
History
Monis Khan 1e1789f6d1
Allow configuration of supervisor endpoints 
This change allows configuration of the http and https listeners
used by the supervisor.

TCP (IPv4 and IPv6 with any interface and port) and Unix domain
socket based listeners are supported.  Listeners may also be
disabled.

Binding the http listener to TCP addresses other than 127.0.0.1 or
::1 is deprecated.

The deployment now uses https health checks.  The supervisor is
always able to complete a TLS connection with the use of a bootstrap
certificate that is signed by an in-memory certificate authority.

To support sidecar containers used by service meshes, Unix domain
socket based listeners include ACLs that allow writes to the socket
file from any runAsUser specified in the pod's containers.

Signed-off-by: Monis Khan <mok@vmware.com>
2022-01-18 17:43:45 -05:00
..
apiserviceref Use API service as owner ref for cluster scoped resources 2021-02-10 21:52:08 -05:00
authenticators Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
certauthority certauthority: tolerate larger clock skew between API server and pinniped 2021-09-21 09:32:24 -04:00
clusterhost Introduce clusterhost package to determine whether a cluster has control plane nodes 2021-02-09 11:16:01 -08:00
concierge Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
config Allow configuration of supervisor endpoints 2022-01-18 17:43:45 -05:00
constable Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
controller Merge branch 'main' into ldap_and_activedirectory_status_conditions_bug 2022-01-14 16:50:34 -08:00
controllerinit kubecertagent: fix flakey tests 2021-09-16 14:48:04 -04:00
controllerlib test/integration: run parallel tests concurrently with serial tests 2021-08-26 12:59:52 -04:00
controllermanager Allow configuration of supervisor endpoints 2022-01-18 17:43:45 -05:00
crud Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
crypto/ptls Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
deploymentref Allow configuration of supervisor endpoints 2022-01-18 17:43:45 -05:00
downward internal/downward: add support for (optional) pod name 2020-12-11 11:49:27 -05:00
dynamiccert Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
endpointaddr Add endpointaddr pkg for parsing host+port inputs. 2021-05-25 16:17:26 -05:00
execcredcache Add CLI caching of cluster-specific credentials. 2021-04-08 14:12:34 -05:00
fositestorage Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
fositestoragei More adjustments based on PR feedback 2021-04-27 16:54:26 -07:00
groupsuffix Remove unparam linter 2021-08-19 10:20:24 -07:00
here Save 2 lines by using inline-style comments for Copyright 2020-09-16 10:35:19 -04:00
httputil Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
issuer dynamiccert: split into serving cert and CA providers 2021-03-15 12:24:07 -04:00
kubeclient Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
leaderelection Ensure concierge and supervisor gracefully exit 2021-08-30 20:29:52 -04:00
localuserauthenticator Force the use of secure TLS config 2021-11-17 16:55:35 -05:00
mocks Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
net/phttp phttp: add generic support for RFC 2616 14.46 warnings headers 2021-11-30 15:11:59 -05:00
oidc Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
ownerref internal/groupsuffix: mutate TokenCredentialRequest's Authenticator 2021-02-10 15:53:44 -05:00
plog Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
psession Revert adding allowAccessTokenBasedRefresh flag to OIDCIdentityProvider 2022-01-12 18:03:25 -08:00
registry Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
secret All controller unit tests should not cancel context until test is over 2021-03-04 17:26:01 -08:00
supervisor/server Allow configuration of supervisor endpoints 2022-01-18 17:43:45 -05:00
testutil Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
upstreamldap Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
upstreamoidc Merge branch 'main' into upstream_access_revocation_during_gc 2022-01-14 10:49:22 -08:00
valuelesscontext valuelesscontext: make unit tests more clear 2021-04-30 10:43:29 -04:00