Commit Graph

435 Commits (2871d0b68b7eb78d32c2f8202a60d833cf5b5763)
 

Author SHA1 Message Date
max furman 2871d0b68b bump Docker to latest tag 5 years ago
Max 15c1a6a140
Merge pull request #72 from smallstep/max/ott-db
Add used OTT to DB during authToken step
5 years ago
max furman 81db527f12 NoopDB -> SimpleDB 5 years ago
max furman b73fe8c157 Add used OTT to DB during authToken step 5 years ago
Mariano Cano d9da202c7e
Merge pull request #73 from smallstep/reload
Update CA properties on reload.
5 years ago
Mariano Cano b595c55f0a Update CA properties on reload.
Fixes #71
5 years ago
max furman cff99b0151 Fix images url in top level README 5 years ago
max furman 25c710c056 docs: indent note in distribution.md 5 years ago
max furman cd5c7e7134 dep update cli and add distribution.md back 5 years ago
max furman fe08dcb532 docs: index -> toc 5 years ago
max furman fdfce81dff docs: direct to readme not dir 5 years ago
max furman 8ab04bd503 docs sub repo update 5 years ago
max furman 2b96e7a94c docs: revoke page 5 years ago
max furman a27c2dea7d docs: update revocation doc 5 years ago
max furman e4de7f07e8 docs: Add revocation document 5 years ago
max furman 46c7592f34 db: Omit empty optional fields from JSON 5 years ago
max furman c8fe1ad86d Add database documentation 5 years ago
Max d72e076ca6
Merge pull request #70 from smallstep/max/badger
Update nosql integration
5 years ago
max furman c242602231 reload and shutdown trickery
* Only shutdown the database once.
* Be careful when reloading the CA. Depending on whether the DB has
already been shutdown, and error may be unrecoverable.
5 years ago
max furman cbeca9383b Update nosql integration
* shutdown and reload database on SIGHUP
5 years ago
Mike Maxey b4137053cf
Update GETTING_STARTED.md 5 years ago
Sebastian Tiedtke 3a2ba85126
Flip default for certificate restriction to namespace to false (#60) 5 years ago
Mariano Cano 6af1e95c5b
Merge pull request #64 from smallstep/step-sds
Add token generator to ca package
5 years ago
Mariano Cano c2c9798149 Fix review issues. 5 years ago
Mariano Cano 46b9b117e3 Add test for provisioner type. 5 years ago
Mariano Cano 13783301ce Remove test for unnecessary method. 5 years ago
Mariano Cano b4739c185d Remove unnecessary method GetCertificateRenewer. 5 years ago
Mariano Cano fa216ccaad Use SetTransport method. 5 years ago
max furman 3f50933823 docs: Fix bad formatting 5 years ago
max furman 81a50a26e4 docs: added archlinux install and distribution info 5 years ago
Mariano Cano de1114c3c6 Merge branch 'master' into step-sds 5 years ago
Mariano Cano c248b00c72 Use square/go-jose instead of fork. 5 years ago
Mariano Cano 43c5831582 Merge branch 'master' into step-sds 5 years ago
max furman b3196d74dd final cli bump 5 years ago
max furman 110e07706f update cli dep 5 years ago
max furman 9977eff153 bump cli dep and fix text error msg 5 years ago
max furman ff20d9f5af Fix composite literal uses unkeyed field 5 years ago
max furman ab4d569f36 Add /revoke API with interface db backend 5 years ago
Mariano Cano f1cd493ae9 Merge branch 'master' into step-sds 5 years ago
Mariano Cano 07ff7d9807 Update cli dependency. 5 years ago
Mariano Cano ba640234db Use master branch. 5 years ago
Mariano Cano 27eddbff2a
Merge pull request #59 from smallstep/update-go-jose
Update go jose
5 years ago
Mariano Cano b489687245
Merge pull request #57 from smallstep/update-docker
Docker docs
5 years ago
Mariano Cano 572bf0de96
Merge branch 'master' into update-docker 5 years ago
Mariano Cano b171e57c86 Use github.com/maraino/go-jose fork. 5 years ago
Mariano Cano ee9069a32d Fix typos. 5 years ago
max furman 730433fca0 docs: docker bit of grammar adjustment. 5 years ago
Max 82aa425d15
link step certificates 5 years ago
Sebastian Tiedtke 840916ae1b
Note about usage instructions 5 years ago
Justin 351c01cf7e Do not allow pods in one namespace to create certificates for hostnames from another namespace. (#54)
* Do not allow pods in one namespace to create certificates for hostnames from another namespace.

* Make cluster domain configurable, clean up shouldMutate() logic, and make namespace restrictions configurable with restrictCertificatesToNamespace.

* Return certificate hostname validation errors in the admission webhook response.

* Appease the gometalinter.
5 years ago