eb4c13b9f4
wip
2 years ago
225ad45267
wip
2 years ago
36b101e545
wip
2 years ago
e9b792755d
[action] cosign over docker image digest
2 years ago
c43d59a69a
[action] keyless cosign for all release artifacts
2 years ago
0af15a0538
Merge pull request #1140 from smallstep/herman/remote-management-helm
...
Add provisioner and super admin subject output to `ca init`
2 years ago
a9359522e6
Add provisioner and super admin subject output to `ca init`
...
When initializing a CA with `--remote-management`, it wasn't made
clear that the default JWK provisioner is used when authenticating
for administration purposes and that a default `step` user is
created to login with. This commit adds some additional information
to the CLI output on completion of `ca init`.
2 years ago
a718359b7f
Merge pull request #1075 from smallstep/herman/remote-management-helm
...
Add `enableAdmin` and `enableACME` to Helm values.yml generation
2 years ago
2e39b6305e
Merge pull request #1139 from smallstep/update-pkcs7
...
Upgrade pkcs7 to the latest patches branch
2 years ago
aed1738ad0
Upgrade pkcs7 to the latest patches branch
...
smallstep/pkcs7@patches includes now support for generic Decrypter
methods, so KMS can be used instead of a key in disk with SCIM
2 years ago
c407354c70
Merge pull request #1137 from smallstep/dependabot/go_modules/google.golang.org/api-0.100.0
...
Bump google.golang.org/api from 0.99.0 to 0.100.0
2 years ago
25340c2bf6
Merge pull request #1138 from smallstep/dependabot/go_modules/github.com/stretchr/testify-1.8.1
...
Bump github.com/stretchr/testify from 1.8.0 to 1.8.1
2 years ago
3e96113162
Bump github.com/stretchr/testify from 1.8.0 to 1.8.1
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.8.0...v1.8.1 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
016973fd2b
Bump google.golang.org/api from 0.99.0 to 0.100.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.99.0 to 0.100.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.99.0...v0.100.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
e90fe4bfa0
Update CHANGELOG.md with provisioner migration
2 years ago
9d04e7d1dc
Remove period in log output
2 years ago
54c560f620
Improve configuration file initialization log output
2 years ago
fd38dd34f9
Fix PR comments
2 years ago
49718f1bbb
Fix some comments
2 years ago
70da534893
Merge branch 'master' into herman/remote-management-helm
2 years ago
398213af51
Merge pull request #1123 from smallstep/renew-raw-subject
...
Use RawSubject on renew and rekey
2 years ago
caf0628b8c
Merge pull request #1122 from smallstep/fix-1114
...
Split build and download in Dockerfiles
2 years ago
aefdfc7be7
Use RawSubject on renew and rekey
...
Renew was not replicating exactly the subject because extra names
gets decoded into pkix.Name.Names, the non-default ones should be
added to pkix.Name.ExtraNames. Instead of doing that, this commit
sets the RawSubject that will also keep the order.
Fixes #1106
2 years ago
18555a3cb2
Split build and download in Dockerfiles
...
On systems with low resources the command `go mod download` can fail.
This causes long builds of the docker images. This change adds a new
layer in the docker build splitting the build and download in two
steps.
Fixes #1114
2 years ago
53f2ecdad9
Merge pull request #1121 from smallstep/fix-1115
...
Use sh instead of bash in .version.sh script
2 years ago
d07c9accea
Use sh instead of bash in .version.sh script
...
Fixes #1115
2 years ago
7b45968198
Merge pull request #1119 from smallstep/max/common-triage
2 years ago
91775f6d67
[action] move oss triage wofkow to common workflows
2 years ago
361e2b2907
Merge pull request #1116 from smallstep/max/docs-revocation-link
...
Update revocation docs link
2 years ago
c103458ee9
Merge pull request #1110 from smallstep/dependabot/go_modules/google.golang.org/api-0.99.0
...
Bump google.golang.org/api from 0.98.0 to 0.99.0
2 years ago
e436c36f8b
Update revocation docs link
2 years ago
b83f268b4d
Bump google.golang.org/api from 0.98.0 to 0.99.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.98.0 to 0.99.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.98.0...v0.99.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
f410ef6628
Merge pull request #1112 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.6.0
...
Bump github.com/googleapis/gax-go/v2 from 2.5.1 to 2.6.0
2 years ago
c3f6dcf7e7
Bump github.com/googleapis/gax-go/v2 from 2.5.1 to 2.6.0
...
Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go ) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/googleapis/gax-go/releases )
- [Commits](https://github.com/googleapis/gax-go/compare/v2.5.1...v2.6.0 )
---
updated-dependencies:
- dependency-name: github.com/googleapis/gax-go/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
f7d153efa7
Merge pull request #1109 from smallstep/herman/remove-acme-revoke-authorization-todo
...
Remove TODO and clarify ACME revoke authorization method docs
2 years ago
70828b882f
Merge pull request #1111 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.8.1
...
Bump github.com/hashicorp/vault/api from 1.8.0 to 1.8.1
2 years ago
a7db13d47b
Merge pull request #1113 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.50.1
...
Bump google.golang.org/grpc from 1.50.0 to 1.50.1
2 years ago
9ee11fd850
Bump google.golang.org/grpc from 1.50.0 to 1.50.1
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.50.0 to 1.50.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.50.0...v1.50.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
3676c59599
Bump github.com/hashicorp/vault/api from 1.8.0 to 1.8.1
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.8.0...v1.8.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
cbc0864370
Remove TODO and clarify ACME revoke authorization method docs
2 years ago
d981b9e0dc
Add `--admin-subject` flag to `ca init`
...
The first super admin subject can now be provided through the
`--admin-subject` flag when initializing a CA.
It's not yet possible to configure the subject of the first
super admin when provisioners are migrated from `ca.json` to the
database. This effectively limits usage of the flag to scenarios
in which the provisioners are written to the database immediately,
so when `--remote-management` is enabled. It currently also doesn't
work with Helm deployments, because there's no mechanism yet to
pass this type of option to the Helm chart.
This commit partially addresses https://github.com/smallstep/cli/issues/697
2 years ago
57001168a5
Add default `SSHPOP` provisioner to Helm template output
2 years ago
c423e2f664
Improve Helm test data to be more realistic
2 years ago
459bfc4c4f
Add gibberish test key bytes to Helm tests
2 years ago
3262ffd43b
Add X.509 intermedaite and root certificates to Helm tests
2 years ago
1a5523f5c0
Add default JWK to the Helm tests
2 years ago
da5d2b405c
Merge branch 'master' into herman/remote-management-helm
2 years ago
65b5a636df
Merge pull request #1104 from smallstep/max/err-assert
...
Fix err assert linter warnings - upgrade outdated package
2 years ago
7203739369
Fix err assert linter warnings - upgrade outdated package
2 years ago
6516384160
Trigger CI
2 years ago
max furman
Herman Slatman
Herman Slatman
Mariano Cano
Mariano Cano
dependabot[bot]