42 Commits (7101fbb0ee939d24756695508845e78e41a1cb59)

Author	SHA1	Message	Date
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2 years ago
max furman	4c7a2ce3eb	Fix errors.As linter warnings	2 years ago
max furman	7c5e5b2b87	Even more linter fixes	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	23b8f45b37	Address gosec warnings ... Most if not all false positives	2 years ago
Herman Slatman	9797b3350e	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	b7e11da480	Merge branch 'master' into feat/linkedra	2 years ago
Herman Slatman	2fbdf7d5b0	Merge branch 'master' into herman/allow-deny	2 years ago
Panagiotis Siatras	00634fb648	api/render, api/log: initial implementation of the packages (#860) ... * api/render: initial implementation of the package * acme/api: refactored to support api/render * authority/admin: refactored to support api/render * ca: refactored to support api/render * api: refactored to support api/render * api/render: implemented Error * api: refactored to support api/render.Error * acme/api: refactored to support api/render.Error * authority/admin: refactored to support api/render.Error * ca: refactored to support api/render.Error * ca: fixed broken tests * api/render, api/log: moved error logging to this package * acme: refactored Error so that it implements render.RenderableError * authority/admin: refactored Error so that it implements render.RenderableError * api/render: implemented RenderableError * api/render: added test coverage for Error * api/render: implemented statusCodeFromError * api: refactored RootsPEM to work with render.Error * acme, authority/admin: fixed pointer receiver name for consistency * api/render, errs: moved StatusCoder & StackTracer to the render package	2 years ago
Mariano Cano	6851842841	Fix unit tests.	2 years ago
vijayjt	7b605b2d16	Support Azure tokens from managed identities not associated with a VM	2 years ago
Herman Slatman	dc23fd23bf	Merge branch 'master' into herman/allow-deny-next	2 years ago
Mariano Cano	082734474b	Merge pull request #845 from vijayjt/azure-user-mi-token ... WIP: Support Azure tokens generated by managed identities	2 years ago
Mariano Cano	4690fa64ed	Add public methods to retrieve the provisioner extensions.	2 years ago
Mariano Cano	389815642d	Fix tests: certs are truncated to seconds.	2 years ago
Mariano Cano	259e95947c	Add support for the provisioner controller ... The claimer, audiences and custom callback methods are now managed by the provisioner controller in an uniform way.	2 years ago
Herman Slatman	af53a17bb4	Merge branch 'master' into herman/allow-deny	2 years ago
vijayjt	e699244291	Support Azure tokens from managed identities not associated with a VM	2 years ago
vijayjt	4a10f2c584	Rename new fields as per feedback to remove AAD from the name	2 years ago
vijayjt	8b68bedffa	Add support for validation of certificate requests using Azure subscription and AAD object IDs. See #735	2 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2 years ago
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	9e5762fe06	Allow the reuse of azure token if DisableTrustOnFirstUse is true ... Azure caches tokens for 24h and we cannot issue a new certificate for the same instance in that period of time. The meaning of this parameter is to allow the signing of multiple certificate in one instance. This is possible in GCP, because we get a new token, and is possible in AWS because we can generate a new one. On Azure there was no other way to do it unless you wait for 24h. Fixes #656	3 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	0c8376a7f6	Fix existing unit tests.	4 years ago
max furman	71d87b4e61	wip	4 years ago
Mariano Cano	f868e07a76	Allow to use custom principals on cloud provisioners. ... Fixes #203	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	4 years ago
Mariano Cano	d4627d1282	Make provisioner tests compile, they are still failing.	4 years ago
Mariano Cano	396b4222aa	Implement validator for ssh keys. ... Fixes #100	5 years ago
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	5 years ago
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer ... * Fixes #94 * In the future this should be configurable by provisioner	5 years ago
Mariano Cano	7983aa8661	Add azure ssh tests.	5 years ago
Mariano Cano	f8cacc11b1	Fix tests.	5 years ago
Mariano Cano	900ab9cc12	Allow custom common names in cloud identity provisioners.	5 years ago
Mariano Cano	423d505d04	Replace subscriptions with resource groups.	5 years ago
Mariano Cano	803d81d332	Improve azure unit tests.	5 years ago
Mariano Cano	4c5fec06bf	Require TenantID in azure, add some tests.	5 years ago