Commit Graph

1485 Commits

Author SHA1 Message Date
max furman
c8fe1ad86d Add database documentation 2019-04-25 18:27:11 -07:00
Max
d72e076ca6
Merge pull request #70 from smallstep/max/badger
Update nosql integration
2019-04-25 13:36:10 -07:00
max furman
c242602231 reload and shutdown trickery
* Only shutdown the database once.
* Be careful when reloading the CA. Depending on whether the DB has
already been shutdown, and error may be unrecoverable.
2019-04-25 13:25:41 -07:00
Mariano Cano
81bfd2c1cb Add tests for AWS provisioner
Fixes #68
2019-04-24 19:52:58 -07:00
max furman
cbeca9383b Update nosql integration
* shutdown and reload database on SIGHUP
2019-04-24 18:00:59 -07:00
Mariano Cano
f755fddc35 Fix lint errors. 2019-04-24 14:59:01 -07:00
Mariano Cano
b6a5ebcfc9 Move code to switch default. 2019-04-24 14:50:22 -07:00
Mariano Cano
a7f06c765d Fix load of gcp and aws provisioner by certificate. 2019-04-24 14:49:28 -07:00
Mariano Cano
da93e40f90 Add constant for Azure type. 2019-04-24 14:26:37 -07:00
Mariano Cano
37e84aa535 Add DisableCustomSANs and DisableTrustOnFirstUse to GCP provisioner.
Fixes #67
2019-04-24 13:05:46 -07:00
Mariano Cano
75ef5a2275 Add AWS provisioner.
Fixes #68
2019-04-24 12:12:36 -07:00
Mariano Cano
5defd8289d Add missing config in tests. 2019-04-24 11:30:37 -07:00
Mariano Cano
27c98806c0 Use GetTokenID. 2019-04-24 11:29:57 -07:00
Mariano Cano
2c68915b70 Fix comment. 2019-04-23 14:36:11 -07:00
Mariano Cano
fb6321fb2c Use gcpConfig type to keep configuration urls.
Fixes #67
2019-04-23 14:33:36 -07:00
Mariano Cano
7e53b28320 Disable revoke for GCP. 2019-04-23 14:20:14 -07:00
Mike Maxey
b4137053cf
Update GETTING_STARTED.md 2019-04-23 11:57:30 -07:00
Mariano Cano
7727fa5665 Update GCP tests. 2019-04-19 10:44:11 -07:00
Mariano Cano
1ea4b0ad64 Add unit test for GCP provider 2019-04-18 16:01:30 -07:00
Mariano Cano
b4729cd670 Use JWKSet to get the GCP keys. 2019-04-17 17:38:24 -07:00
Mariano Cano
f794dbeb93 Add support for GCP identity tokens. 2019-04-17 17:28:21 -07:00
Sebastian Tiedtke
3a2ba85126
Flip default for certificate restriction to namespace to false (#60) 2019-04-17 14:00:24 -07:00
Mariano Cano
6af1e95c5b
Merge pull request #64 from smallstep/step-sds
Add token generator to ca package
2019-04-12 15:08:31 -07:00
Mariano Cano
c2c9798149 Fix review issues. 2019-04-12 14:59:55 -07:00
Mariano Cano
46b9b117e3 Add test for provisioner type. 2019-04-12 13:05:56 -07:00
Mariano Cano
13783301ce Remove test for unnecessary method. 2019-04-12 11:22:49 -07:00
Mariano Cano
b4739c185d Remove unnecessary method GetCertificateRenewer. 2019-04-12 11:10:56 -07:00
Mariano Cano
fa216ccaad Use SetTransport method. 2019-04-12 11:06:38 -07:00
max furman
3f50933823 docs: Fix bad formatting 2019-04-11 16:04:40 -07:00
max furman
81a50a26e4 docs: added archlinux install and distribution info 2019-04-11 16:02:18 -07:00
Mariano Cano
de1114c3c6 Merge branch 'master' into step-sds 2019-04-11 15:48:55 -07:00
Mariano Cano
c248b00c72 Use square/go-jose instead of fork. 2019-04-11 15:44:59 -07:00
Mariano Cano
43c5831582 Merge branch 'master' into step-sds 2019-04-11 11:47:20 -07:00
max furman
b3196d74dd final cli bump 2019-04-10 14:09:30 -07:00
max furman
110e07706f update cli dep 2019-04-10 14:05:33 -07:00
max furman
9977eff153 bump cli dep and fix text error msg 2019-04-10 14:00:36 -07:00
max furman
ff20d9f5af Fix composite literal uses unkeyed field 2019-04-10 13:50:35 -07:00
max furman
ab4d569f36 Add /revoke API with interface db backend 2019-04-10 13:50:35 -07:00
Mariano Cano
f1cd493ae9 Merge branch 'master' into step-sds 2019-04-10 13:34:38 -07:00
Mariano Cano
07ff7d9807 Update cli dependency. 2019-04-10 11:04:13 -07:00
Mariano Cano
ba640234db Use master branch. 2019-04-10 11:02:18 -07:00
Mariano Cano
27eddbff2a
Merge pull request #59 from smallstep/update-go-jose
Update go jose
2019-04-10 10:59:13 -07:00
Mariano Cano
b489687245
Merge pull request #57 from smallstep/update-docker
Docker docs
2019-04-09 12:24:46 -07:00
Mariano Cano
572bf0de96
Merge branch 'master' into update-docker 2019-04-09 12:18:56 -07:00
Mariano Cano
b171e57c86 Use github.com/maraino/go-jose fork. 2019-04-09 12:00:33 -07:00
Mariano Cano
ee9069a32d Fix typos. 2019-04-08 15:11:00 -07:00
max furman
730433fca0 docs: docker bit of grammar adjustment. 2019-04-08 15:02:19 -07:00
Max
82aa425d15
link step certificates 2019-04-08 14:36:38 -07:00
Sebastian Tiedtke
840916ae1b
Note about usage instructions 2019-04-08 12:37:56 -07:00
Justin
351c01cf7e Do not allow pods in one namespace to create certificates for hostnames from another namespace. (#54)
* Do not allow pods in one namespace to create certificates for hostnames from another namespace.

* Make cluster domain configurable, clean up shouldMutate() logic, and make namespace restrictions configurable with restrictCertificatesToNamespace.

* Return certificate hostname validation errors in the admission webhook response.

* Appease the gometalinter.
2019-04-08 12:24:31 -07:00