ContainerImage.Pinniped/internal/controller
Ryan Richard d0ced1fd74 WIP towards revoking upstream refresh tokens during GC
- Discover the revocation endpoint of the upstream provider in
  oidc_upstream_watcher.go and save it into the cache for future use
  by the garbage collector controller
- Adds RevokeRefreshToken to UpstreamOIDCIdentityProviderI
- Implements the production version of RevokeRefreshToken
- Implements test doubles for RevokeRefreshToken for future use in
  garbage collector's unit tests
- Prefactors the crud and session storage types for future use in the
  garbage collector controller
- See remaining TODOs in garbage_collector.go
2021-10-22 14:32:26 -07:00
..
apicerts Do not rotate impersonation proxy signer CA unless necessary 2021-10-06 12:03:49 -04:00
authenticator jwtcachefiller: update to use CAContentProvider 2021-08-09 19:16:25 -04:00
conditionsutil Split package upstreamwatchers into four packages 2021-05-12 14:00:39 -07:00
impersonatorconfig Do not rotate impersonation proxy signer CA unless necessary 2021-10-06 12:03:49 -04:00
issuerconfig When merging CredentialIssuer updates, don't overwrite LastUpdated. 2021-05-27 17:09:12 -05:00
kubecertagent kubecertagent: attempt to load signer as long as agent labels match 2021-09-21 16:20:56 -04:00
supervisorconfig WIP towards revoking upstream refresh tokens during GC 2021-10-22 14:32:26 -07:00
supervisorstorage WIP towards revoking upstream refresh tokens during GC 2021-10-22 14:32:26 -07:00
controller_test.go Clean this test up a trivial amount using require.Implementsf(). 2020-12-17 08:38:16 -06:00
utils.go Upstream Watcher Controller Syncs less often by adjusting its filters 2020-12-18 15:41:18 -08:00