62 Commits (7101fbb0ee939d24756695508845e78e41a1cb59)

Author	SHA1	Message	Date
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2 years ago
Mariano Cano	5df1694250	Add endpoint id for the RA certificate ... In a linked RA mode, send an endpoint id to group the server certificates.	2 years ago
Mariano Cano	6b5d3dca95	Add provisioner name to RA info	2 years ago
Mariano Cano	9408d0f24b	Send RA provisioner information to the CA	2 years ago
Mariano Cano	df8ffb35af	Remove unnecessary database in provisioner config.	2 years ago
Mariano Cano	616490a9c6	Refactor renew after expiry token authorization ... This changes adds a new authority method that authorizes the renew after expiry tokens.	2 years ago
Mariano Cano	fd6a2eeb9c	Add provisioner controller ... The provisioner controller has the implementation of the identity function as well as the renew methods with renew after expiry support.	2 years ago
Mariano Cano	32390a2964	Add initial implementation of a nebula provisioner. ... A nebula provisioner will generate a X509 or SSH certificate with the identities in the nebula certificate embedded in the token. The token is signed with the private key of the nebula certificate.	2 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	d4ae267add	Fix ErrAllowTokenReuse comment.	3 years ago
Mariano Cano	9e5762fe06	Allow the reuse of azure token if DisableTrustOnFirstUse is true ... Azure caches tokens for 24h and we cannot issue a new certificate for the same instance in that period of time. The meaning of this parameter is to allow the signing of multiple certificate in one instance. This is possible in GCP, because we get a new token, and is possible in AWS because we can generate a new one. On Azure there was no other way to do it unless you wait for 24h. Fixes #656	3 years ago
Herman Slatman	339039768c	Refactor SCEP authority initialization and clean some code	3 years ago
Herman Slatman	48c86716a0	Add rudimentary (and incomplete) support for SCEP	3 years ago
max furman	638766c615	wip	3 years ago
Cristian Le	1d2445e1d8	Removed the variadic username ... Could be useful later on, but for the current PR changes should be minimized	3 years ago
Cristian Le	9e00b82bdf	Revert `oidc_test.go` ... Moving the `preferred_username` to a separate PR	3 years ago
Cristian Le	21732f213b	Fix shadow issue in CI	3 years ago
Mariano Cano	46c1dc80fb	Use map[string]struct{} instead of map[string]bool	3 years ago
Mariano Cano	aafac179a5	Add test for oidc with preferred usernames.	3 years ago
Cristian Le	f730c0bec4	Sanitize usernames	3 years ago
Cristian Le	48666792c7	Draft: adding usernames to GetIdentityFunc	3 years ago
Mariano Cano	02379d494b	Add support for extensions and critical options on the identity ... function.	4 years ago
Mariano Cano	ca2fb42d68	Move options to the provisioner.	4 years ago
Mariano Cano	ef0ed0ff95	Integrate simple templates in the JWK provisioner.	4 years ago
Mariano Cano	0b5fd156e8	Add a third principal on OIDC tokens with the raw local part of the email. ... For the email first.last@example.com it will create the principals ["firstlast", "first.last", "first.last@example.com"] Fixes #253, #254	4 years ago
Mariano Cano	c49a9d5e33	Add context parameter to all SSH methods.	4 years ago
Mariano Cano	59fc8cdd2d	Fix typo in comments.	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	4 years ago
max furman	f74cd04a6a	Add WithGetIdentityFunc option and attr to authority ... * Add Identity type to provisioner	4 years ago
max furman	29853ae016	sshpop provisioner + ssh renew | revoke | rekey first pass	4 years ago
max furman	c04f1e1bd4	sshpop first pass	4 years ago
max furman	8f07ff6a39	Add kubernetes service account provisioner	5 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	5 years ago
max furman	ac234771c7	Remove unknown provisioner WARNning and leave TODO	5 years ago
max furman	ca8daf5f12	Update comment and warn	5 years ago
Mariano Cano	9200f11ed8	Skip unsupported provisioners.	5 years ago
Mariano Cano	41b97372e6	Rename function to SanitizeSSHUserPrincipal	5 years ago
Mariano Cano	48c98dea2a	Make SanitizeSSHPrincipal a public function.	5 years ago
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. ... Update the interface for all the provisioners.	5 years ago
Mariano Cano	8f8c862c04	Fix spelling errors.	5 years ago
Mariano Cano	37f2096dff	Add Stringer interface to provisioner.Type. ... Add missing file.	5 years ago
Mariano Cano	0a756ce9d0	Use on GCP audiences with the format https://<ca-url>#<provisioner-type>/<provisioner-name> ... Fixes smallstep/step#156	5 years ago
Mariano Cano	70196b2331	Add skeleton for the Azure provisioner. ... Related to #69	5 years ago
Mariano Cano	da93e40f90	Add constant for Azure type.	5 years ago
Mariano Cano	75ef5a2275	Add AWS provisioner. ... Fixes #68	5 years ago
Mariano Cano	f794dbeb93	Add support for GCP identity tokens.	5 years ago