Commit Graph

42 Commits (7fac8c96c3148f1ace9e0377883a6f050fa67c22)

Author SHA1 Message Date
Herman Slatman e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues 3 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano 9e5762fe06 Allow the reuse of azure token if DisableTrustOnFirstUse is true
Azure caches tokens for 24h and we cannot issue a new certificate
for the same instance in that period of time.

The meaning of this parameter is to allow the signing of multiple
certificate in one instance. This is possible in GCP, because we
get a new token, and is possible in AWS because we can generate
a new one. On Azure there was no other way to do it unless you
wait for 24h.

Fixes #656
3 years ago
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
max furman 638766c615 wip 3 years ago
Mariano Cano ba918100d0 Use go.step.sm/crypto/jose
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
4 years ago
Mariano Cano e83e47a91e Use sshutil and randutil from go.step.sm/crypto. 4 years ago
Mariano Cano f437b86a7b Merge branch 'cert-templates' into ssh-cert-templates 4 years ago
Mariano Cano c8d225a763 Use x509util from go.step.sm/crypto/x509util 4 years ago
Mariano Cano 9822305bb6 Use only the IID template on IID provisioners.
Use always sshutil.DefaultIIDCertificate and require at least one
principal on IID provisioners.
4 years ago
Mariano Cano aa657cdb4b Use SSHOptions inside provisioner options. 4 years ago
Mariano Cano 6c36ceb158 Add initial template support for iid provisisioners. 4 years ago
Mariano Cano 6c64fb3ed2 Rename provisioner options structs:
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
4 years ago
Mariano Cano 02c4f9817d Set full token payload instead of only the known properties. 4 years ago
Mariano Cano 32646c49bf Add templates support to Azure provisioner. 4 years ago
max furman 1951669e13 wip 4 years ago
Mariano Cano 4e9bff0986 Add support for OIDC multitoken tenants for azure. 4 years ago
Mariano Cano f868e07a76 Allow to use custom principals on cloud provisioners.
Fixes #203
4 years ago
max furman 1cb8bb3ae1 Simplify statuscoder error generators. 4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
Mariano Cano 84ff172093 Add support for backdate to SSH certificates. 4 years ago
max furman 29853ae016 sshpop provisioner + ssh renew | revoke | rekey first pass 4 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
Mariano Cano 396b4222aa Implement validator for ssh keys.
Fixes #100
5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
Mariano Cano 57a529cc1a Allow to enable the SSH CA per provisioner 5 years ago
Mariano Cano a8f4ad1b8e Set default SSH options if no user options are given. 5 years ago
Mariano Cano 18a285e847 Change azure ssh key id. 5 years ago
Mariano Cano aef52e4334 Add support for SSH host certificates in azure. 5 years ago
Mariano Cano f01286bb48 Add support for SSH certificates to OIDC.
Update the interface for all the provisioners.
5 years ago
Mariano Cano 900ab9cc12 Allow custom common names in cloud identity provisioners. 5 years ago
Mariano Cano 6e4a09651a Add comments with links to cloud docs. 5 years ago
Mariano Cano 54d0186d1f Change condition to fail if the length is not the expected. 5 years ago
Mariano Cano cf07c8f4c0 Fix typos. 5 years ago
Mariano Cano 423d505d04 Replace subscriptions with resource groups. 5 years ago
Mariano Cano e0aaa1a577 Use tenant id in azures's provisioner x509 extension. 5 years ago
Mariano Cano 803d81d332 Improve azure unit tests. 5 years ago
Mariano Cano 4c5fec06bf Require TenantID in azure, add some tests. 5 years ago
Mariano Cano 12937c6b75 Remove pkcs7 related variables and structs. 5 years ago
Mariano Cano 6412b1a79b Add first version of Asure support.
Fixes #69
5 years ago
Mariano Cano 70196b2331 Add skeleton for the Azure provisioner.
Related to #69
5 years ago