Commit Graph

32 Commits (23b8f45b37e8541de9d08aeb4e7e17fa260fcf27)

Author SHA1 Message Date
Mariano Cano 23b8f45b37 Address gosec warnings
Most if not all false positives
2 years ago
Mariano Cano 4690fa64ed Add public methods to retrieve the provisioner extensions. 2 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano f919535475 Add an extra way to distinguish Azure and Azure OIDC tokens.
We used to distinguish these tokens using the azp claim, but this
claim does not appear on new azure oidc tokens, at least on some
configurations.

This change will try to load by audience (client id) if the token
contains an email, required for OIDC.
3 years ago
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
Herman Slatman 339039768c Refactor SCEP authority initialization and clean some code 3 years ago
max furman 638766c615 wip 3 years ago
max furman 4f3e5ef64d wip 3 years ago
max furman 5d09d04d14 wip 3 years ago
max furman ce9af5c20f Standardize k8ssa check on issuer name 4 years ago
Mariano Cano ba918100d0 Use go.step.sm/crypto/jose
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
max furman 8f07ff6a39 Add kubernetes service account provisioner 5 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
max furman 44e864030d Remove debug logging 5 years ago
max furman e3826dd1c3 Add ACME CA capabilities 5 years ago
Mariano Cano 8f8c862c04 Fix spelling errors. 5 years ago
Mariano Cano b88a2f1373 Fix provisioner id in LoadByCertificate 5 years ago
Mariano Cano 0a756ce9d0 Use on GCP audiences with the format https://<ca-url>#<provisioner-type>/<provisioner-name>
Fixes smallstep/step#156
5 years ago
Mariano Cano 89eeada2a2 Add support for loading azure tokens by tenant id. 5 years ago
Mariano Cano b6a5ebcfc9 Move code to switch default. 5 years ago
Mariano Cano a7f06c765d Fix load of gcp and aws provisioner by certificate. 5 years ago
Mariano Cano f794dbeb93 Add support for GCP identity tokens. 5 years ago
max furman ab4d569f36 Add /revoke API with interface db backend 5 years ago
Mariano Cano 23e6de57a2 Address comments in code review. 5 years ago
Mariano Cano 2a5430fee1 Complete tests for collection. 5 years ago
Mariano Cano 9f7f871f25 Add noop provisioner and use it if a provisioner cannot been found from a cert. 5 years ago
Mariano Cano 507fd01062 Remove provisioner intermediate type. 5 years ago
Mariano Cano fb77397fc7 Add new options to locate or list provisioners. 5 years ago
Mariano Cano 62dab7b6b8 Rename interface method. 5 years ago
Mariano Cano 5a8f78d9d0 Add support to collection to load the encrypted keys. 5 years ago
Mariano Cano dd0376657c Move collection to a new file. 5 years ago