pinniped

pinniped copied to clipboard

Cleanup conditions_util and ensure it is thoroughly tested See https://github.com/vmware-tanzu/pinniped/pull/1907/files#r1567892806

joshuatcasey

Allow a volumemount certificate reference to be used by JWTAuthenticator

7

**Is your feature request related to a problem? Please describe.** JWTAuthenticator allows a certificate to be specified in line but this misses several use cases which a volumeMount solves. At...

lknite

GitHub issues downstream tokens

2

Just here for the CI

joshuatcasey

Bump dependencies

1

Automatically bumped all go.mod direct dependencies and/or images in dockerfiles.

pinniped-ci-bot

Implement proposal to [allow Pinniped CRs to source CA bundles, for client-side TLS validation, from secrets and configMaps](https://github.com/vmware-tanzu/pinniped/tree/main/proposals/1984_ca-bundle-from-secret-ref) Fixes #1886 **Release note**: ```release-note TBD ```

ashish-amarnath

Bump K8s libs to 1.31 and add generated code for 1.31

1

Bump K8s libs to 1.31 and add generated code for 1.31. TODO: eventually we need to update the way codegen is performed. ``` // DEPRECATED: NewClientset replaces this with support...

joshuatcasey

failed upstream OIDC token exchanges should show in log at default log config

1

This log message level was accidentally changed during a major refactor earlier this year. **Release note**: ```release-note NONE ```

cfryanr

Connection probes made to be shown in status of GitHubIdentityProvider and WebhookAuthenticator do not respect HTTPS_PROXY env var

1

**What happened?** If a cluster is firewalled in such a way that the Pinniped Concierge/Supervisor pods are prevented from making direct connections to the GitHub API (for GitHubIdentityProvider on the...

cfryanr

WIP: audit logging

4

WIP for implementing audit logging. Early draft for proof of concept and discussion. This draft differs from the [proposal document](https://github.com/vmware-tanzu/pinniped/tree/main/proposals/1141_audit-logging), which is over two years old. In that doc, I...

cfryanr

Add proposal: opt-out of self-signed CAs

1

Add proposal: opt-out of self-signed CAs See rendered markdown: https://github.com/vmware-tanzu/pinniped/tree/jtc/propose-opt-out-of-self-signed-cas/proposals/2027_opt_out_of_self_signed_certificate_authorities. Background context: - #1237 - #1238 - TBD

joshuatcasey