github/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-04-15 07:06:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
727 Commits 33 Branches 52 Tags
e8f433643fa023d6d9375a600db436eb4d3ffc4e
Commit Graph
46 Commits
Author SHA1 Message Date
Andrew Keesler 259ffb5267 Checkpoint: write a single negative test using fosite 
Bringing in fosite to our go.mod introduced those other go.mod changes.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-11-04 10:15:19 -05:00
Andrew Keesler 0bbf55e46f gopkg.in/square/go-jose.v2: v2.2.2 -> v2.5.1 
We were behind for some reason. Probably makes sense to bump to
latest version to get bug fixes and such.
 2020-11-04 09:55:18 -05:00
Matt Moyer 50d80489be Add initial CLI integration test for OIDC login. 
This is our first test using a real browser to interact with an upstream provider.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-10-13 10:41:53 -05:00
Matt Moyer 38501ff763 Add initial "pinniped alpha login oidc" partial implementation. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-10-06 12:42:29 -05:00
Matt Moyer ec3e4cae68 Upgrade client-go, et al from 1.19.0 to 1.19.2. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-09-24 09:21:10 -05:00
Ryan RichardandGitHub db98f2810f Merge pull request #98 from suzerain-io/get_kubeconfig_cli 
Organize Pinniped CLI into subcommands; Add get-kubeconfig subcommand
 2020-09-15 13:34:14 -07:00
Matt Moyer 92372d20a9 Tidy go.mod/go.sum. 
I accidentally missed this in bbef017989 and it's not currently part of our CI linting.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-09-15 14:14:44 -05:00
Matt Moyer bbef017989 Add a testlogger util package for testing go-logr. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-09-14 13:23:06 -05:00
Ryan Richard da7c981f14 Organize Pinniped CLI into subcommands; Add get-kubeconfig subcommand 
- Add flag parsing and help messages for root command,
  `exchange-credential` subcommand, and new `get-kubeconfig` subcommand
- The new `get-kubeconfig` subcommand is a work in progress in this
  commit
- Also add here.Doc() and here.Docf() to enable nice heredocs in
  our code
 2020-09-11 17:56:05 -07:00
Ryan Richard 20b21e8639 Prefactor: Move updating of APIService to a separate controller 
- The certs manager controller, along with its sibling certs expirer
  and certs observer controllers, are generally useful for any process
  that wants to create its own CA and TLS certs, but only if the
  updating of the APIService is not included in those controllers
- So that functionality for updating APIServices is moved to a new
  controller which watches the same Secret which is used by those
  other controllers
- Also parameterize `NewCertsManagerController` with the service name
  and the CA common name to make the controller more reusable
 2020-09-08 16:36:49 -07:00
Matt MoyerandGitHub ab82b2ea64 Merge pull request #86 from suzerain-io/dependabot/go_modules/github.com/golangci/golangci-lint-1.31.0 
Bump github.com/golangci/golangci-lint from 1.30.0 to 1.31.0
 2020-09-08 08:40:52 -05:00
dependabot[bot]andGitHub 9c8d30fa86 Bump github.com/golangci/golangci-lint from 1.30.0 to 1.31.0 
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.30.0 to 1.31.0.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/golangci/golangci-lint/compare/v1.30.0...v1.31.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-09-08 06:07:24 +00:00
dependabot[bot]andGitHub 1d004a7326 Bump github.com/go-logr/logr from 0.2.0 to 0.2.1 
Bumps [github.com/go-logr/logr](https://github.com/go-logr/logr) from 0.2.0 to 0.2.1.
- [Release notes](https://github.com/go-logr/logr/releases)
- [Commits](https://github.com/go-logr/logr/compare/v0.2.0...v0.2.1)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-09-07 05:49:14 +00:00
Matt MoyerandGitHub f49317d7e4 Add some generated API documentation. (#81) 
Add some generated API documentation using https://github.com/elastic/crd-ref-docs which is now packaged in the codegen image.
 2020-08-31 11:27:39 -05:00
dependabot[bot]andGitHub 0c5d38090e Bump github.com/golang/mock from 1.4.3 to 1.4.4 
Bumps [github.com/golang/mock](https://github.com/golang/mock) from 1.4.3 to 1.4.4.
- [Release notes](https://github.com/golang/mock/releases)
- [Changelog](https://github.com/golang/mock/blob/master/.goreleaser.yml)
- [Commits](https://github.com/golang/mock/compare/v1.4.3...v1.4.4)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-08-28 22:21:11 +00:00
Matt MoyerandGitHub cd00aad610 Merge pull request #78 from suzerain-io/dependabot/go_modules/github.com/google/go-cmp-0.5.2 
Bump github.com/google/go-cmp from 0.5.0 to 0.5.2
 2020-08-28 17:18:03 -05:00
dependabot[bot]andGitHub b5f7ff2e33 Bump k8s.io/klog/v2 from 2.2.0 to 2.3.0 
Bumps [k8s.io/klog/v2](https://github.com/kubernetes/klog) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes/klog/compare/v2.2.0...v2.3.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-08-28 22:03:22 +00:00
dependabot[bot]andGitHub 21fd807037 Bump github.com/google/go-cmp from 0.5.0 to 0.5.2 
Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.0 to 0.5.2.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](https://github.com/google/go-cmp/compare/v0.5.0...v0.5.2)

Signed-off-by: dependabot[bot] <support@github.com>
 2020-08-28 22:03:10 +00:00
Matt Moyer a503fa8673 Pull controller-go back into this repository as internal/controllerlib. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-08-28 13:07:47 -05:00
Matt Moyer 9d9b56073c Update Kubernetes versions. 
- Upgrade from `1.19.0-rc.0` to the newly-release `1.19.0`.

- Downgrade from `1.18.6` to `1.18.2` to match some downstream consumers.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-08-27 13:06:05 -05:00
Matt Moyer 8f93fbb87b Make ./pkg/client into an internal package using the native k8s client. 
This should simplify our build/test setup quite a bit, since it means we have only a single module (at the top level) with all hand-written code. I'll leave `module.sh` alone for now but we may be able to simplify that a bit more.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-08-27 11:48:18 -05:00
Matt Moyer 8b36f2e8ae Convert code to use the new generated packages. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-08-24 14:42:27 -05:00
Matt MoyerGitHubRyan Richard
 		1b9a70d089 Switch back to an exec-based approach to grab the controller-manager CA. (#65) 
This switches us back to an approach where we use the Pod "exec" API to grab the keys we need, rather than forcing our code to run on the control plane node. It will help us fail gracefully (or dynamically switch to alternate implementations) when the cluster is not self-hosted.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
Co-authored-by: Ryan Richard <richardry@vmware.com>
 2020-08-19 13:21:07 -05:00
Andrew Keesler 6e46ff345a Run ./hack/module.sh tidy 
I'm assuming if any of this is wrong, someone will yell at me...

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-08-14 09:16:48 -04:00
Matt Moyer cbe4c1b370 Pull placeholder-name-api back into this repo as a library. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-08-06 20:09:15 -05:00
Matt Moyer ad55f9e310 Pull placeholder-name-client-go back into this repo as a library. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-08-06 19:38:13 -05:00
Ryan Richard cf56c67329 Move LoginDiscoveryConfig to the crds.placeholder.suzerain-io.github.io group 
- Also includes bumping the api and client-go dependencies to the newer
  version which also moved LoginDiscoveryConfig to the
  crds.placeholder.suzerain-io.github.io group in the generated code
 2020-07-31 17:22:12 -07:00
Ryan Richard 9fe82ec5f1 Merge remote-tracking branch 'upstream/main' into discovery_doc 2020-07-31 16:38:40 -07:00
aram price bd594e19ff Update -api and -client-go dependencies 
- pulls in chage to make ExpirationTimestamp mandatory on
  LoginRequestCredential
 2020-07-30 20:05:32 -07:00
Ryan Richard 2e05e032ee Merge remote-tracking branch 'upstream/main' into discovery_doc 2020-07-30 17:28:35 -07:00
Ryan RichardandAndrew Keesler 5aebb76146 Make the PublisherController use informers 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-07-30 14:34:13 -07:00
Andrew Keesler 9a859875a7 logindiscovery: add tests for conditional update and error cases 
- Also add some log lines for better observability of behavior.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-07-30 10:39:15 -04:00
Andrew KeeslerandRyan Richard a5f7de429d First commit of PublisherController 
- Also upgrade go-client and api dependencies, and add controller-go as a dependency

Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-07-29 17:22:25 -07:00
Ryan RichardandMatt Moyer 27cd82065b Add placeholder-name CLI 
- main and unit tests for main
- client package to be done in a future commit

Signed-off-by: Aram Price <pricear@vmware.com>
 2020-07-28 15:15:59 -05:00
Matt MoyerandRyan Richard 6dfae48b65 Add generated mock for loginrequest.CertIssuer interface. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-07-27 12:33:33 -07:00
Ryan RichardandAram Price 9af3637403 Bump version of -api dependency 
Signed-off-by: Aram Price <pricear@vmware.com>
 2020-07-23 17:12:25 -07:00
Ryan Richard 6a93de3931 More validations and error handling for create LoginRequest endpoint 2020-07-23 16:01:55 -07:00
Mo KhanandGitHub 5fdc20886d Initial aggregated API server (#15) 
Add initial aggregated API server (squashed from a bunch of commits).

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
Signed-off-by: Aram Price <pricear@vmware.com>
Signed-off-by: Ryan Richard <richardry@vmware.com>
 2020-07-23 10:05:21 -05:00
Matt Moyer 092cc26789 Refactor app.go and wire in autoregistration. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-07-17 12:10:33 -05:00
Matt Moyer a3bce5f42e Add autoregistration package to manage APIService. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-07-17 10:53:13 -05:00
Monis Khan ffa417f745 Bump kube deps to v0.19.0-rc.0 
Signed-off-by: Monis Khan <mok@vmware.com>
 2020-07-15 16:47:02 -04:00
Andrew Keesler 63f5416b21 Define initial config file format 
- Users may want to consume pkg/config to generate configuration files.
- This also involved putting config-related utilities in the config
  package for ease of consumption.
- We did not add in versioning into the Config type for now...this is
  something we will likely do in the future, but it is not deemed
  necessary this early in the project.
- The config file format tries to follow the patterns of Kube. One such
  example of this is requiring the use of base64-encoded CA bundle PEM
  bytes instead of a file path. This also slightly simplifies the config
  file handling because we don't have to 1) read in a file or 2) deal
  with the error case of the file not being there.

- The webhook code from k8s.io/apiserver is really exactly what we want
  here. If this dependency gets too burdensome, we can always drop it,
  but the pros outweigh the cons at the moment.
- Writing out a kubeconfig to disk to configure the webhook is a little
  janky, but hopefully this won't hurt performance too much in the year
  2020.

- Also bonus: call the right *Serve*() function when starting our
  servers.

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-07-14 11:50:28 -04:00
Monis Khan a544f7d7bf Add integration test to check app is running 
Signed-off-by: Monis Khan <mok@vmware.com>
 2020-07-09 15:30:59 -04:00
Andrew Keesler 619ae2b178 Add -c/--config flag 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-07-08 13:06:44 -04:00
Matt Moyer 9bcd532c19 Add initial linter configuration. 
Signed-off-by: Matt Moyer <moyerm@vmware.com>
 2020-07-07 14:55:50 -05:00
Ryan RichardandAndrew Keesler 57a22f99aa Add a simple /healthz endpoint 
- Also remove the old hello world code

Signed-off-by: Andrew Keesler <akeesler@vmware.com>
 2020-07-06 16:07:21 -07:00