f20928ddb3
chore: update debian-iptables to buster-v1.6.7 ( #176 )
...
Signed-off-by: GitHub <noreply@github.com>
2021-09-10 15:27:56 -07:00
49137fedb5
test: output proxy and proxy init logs for debug purpose ( #174 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-09-08 15:54:31 -07:00
85d159a8a4
docs: add proxy diagram ( #173 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-09-08 11:37:51 -07:00
a50ea139a6
docs: key rotation for self-managed clusters ( #169 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-09-08 18:24:04 +00:00
3d52e50e1c
chore: use `go install` instead of depcreated `go get` ( #171 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-09-06 13:53:47 -07:00
0d73ac9064
chore: update to go 1.17 ( #170 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-09-03 10:10:38 -07:00
99bde5176c
feat: add msal-node example ( #168 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-09-02 09:44:24 -07:00
29c7eee2c4
feat: add msal-python example ( #165 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-31 18:56:29 +00:00
72e836f4a6
ci: add release artifacts to create-tag gh action ( #167 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-31 18:27:53 +00:00
cde4de7032
feat: add webhook support for init containers ( #162 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-31 10:33:07 -07:00
9ed471fdce
ci: add CODEOWNERS file ( #164 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-27 20:28:38 +00:00
cdbaa1a1cd
docs: issue with file mode in Kubernetes 1.18 ( #160 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-27 13:01:14 -07:00
c36e3c6654
feat: set number of replicas to 2 for High Availability ( #161 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-27 11:25:41 -07:00
d8368149c9
test: reenable upgrade tests and update validate mutate pod check ( #158 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-26 16:21:56 -07:00
ca6ad03743
ci: select Kubernetes versions based on region ( #159 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-26 15:24:11 -07:00
1cb9d78159
release: update manifest and helm charts for v0.4.0 ( #155 )
...
* release: update manifest and helm charts for v0.4.0
* chore: remove charts index and pod-identity-webhook
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: chewong <chewong@users.noreply.github.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-26 11:04:56 -07:00
657c08ed7c
docs: rename to azure-workload-identity ( #151 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-25 18:30:58 +00:00
b030fbde40
test: update verify_deployment_yaml job to use latest image ( #152 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-25 17:08:52 +00:00
f6cbb5ff98
security: fix CVE-2021-3711, CVE-2021-3712 ( #153 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-25 16:29:04 +00:00
f5f3cd8991
feat: rename module and annotations from aad-pod-managed-identity to azure-workload-identity ( #150 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
feat: update labels, image repo path and namespace prefix
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
feat: rename annotations to azure.workload.identity/*
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-24 11:46:00 -07:00
ea2e62af5f
chore: remove helm package and update promote-staging-manifest make target ( #147 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-23 09:53:56 -07:00
def32cdfed
test: use proxy-test-sa for proxy tests and run e2e tests in parallel ( #146 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-12 17:29:57 -07:00
887abce66e
feat: implement proxy using msal-go ( #142 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
update token acquire logic
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
test: add e2e tests for proxy
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-12 13:43:14 -07:00
c04c282e21
docs: add docs on development and releasing ( #143 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-11 15:01:42 -07:00
a611704495
docs: update description for tenantID annotation and fix errors ( #141 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-09 13:58:10 -07:00
39cbca8e3c
fix: bypass cache and get from apiserver if serviceaccount not found ( #140 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-09 11:01:08 -07:00
16d511c15c
chore: use AZURE_AUTHORITY_HOST environment variable in msal-go example ( #138 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-06 22:45:38 +00:00
a87d5866a4
release: automate release process ( #130 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-06 22:11:23 +00:00
b7446c0b25
ci: do not use `--dirty` when generating CI image version ( #136 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-06 21:26:17 +00:00
4220f220a6
feat: rename TOKEN_FILE_PATH to AZURE_FEDERATED_TOKEN_FILE ( #133 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-06 11:23:05 -07:00
db868aee52
ci: replace kind cluster version v1.18.19 with v1.22.0 ( #134 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-05 22:53:07 +00:00
dd4bce2d4b
docs: replace SERVICE_PRINCIPAL_* with APPLICATION_* and add steps for setting up OIDC URL ( #131 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-05 22:19:03 +00:00
3e7f609258
test: poll for service account creation ( #125 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-05 10:34:44 -07:00
30ea1e7cac
fix: update release targets to replace image in yaml ( #128 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-04 23:00:48 +00:00
c3046d8cf4
ci: add /usr/local/go/bin to PATH ( #132 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-04 15:30:36 -07:00
2254068055
docs: fix typos and broken link ( #129 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-03 10:24:26 -07:00
286a19af57
test: add --overwrite-existing when getting KUBECONFIG ( #126 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-08-02 17:34:57 +00:00
745840bd29
docs: add commands for setting up trust ( #121 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-30 22:40:36 +00:00
1612851f50
chore: enable additional linters ( #118 )
...
* chore: enable additional linters
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* chore: enable errcheck linter and fix errors
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* chore: enable whitespace linter and fix errors
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-29 15:29:06 -07:00
e98d905acf
test: reenable helm upgrade e2e ( #120 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-29 12:15:51 -07:00
ff52d80043
ci: update regex in chart publish workflow ( #119 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-29 03:36:32 +00:00
b256d4ae46
release: update manifest and helm charts for v0.3.0 ( #115 )
...
* release: update manifest and helm charts for v0.3.0
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* docs: remove cert-manager requirement
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-28 16:44:49 -07:00
f14d355909
ci: add workflow for publishing helm charts ( #112 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-28 20:41:28 +00:00
fe6cb8f1c3
ci: update destination_dir to docs ( #113 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-28 19:14:40 +00:00
8ff213cb01
chore: update website deploy workflow ( #111 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-28 11:34:42 -07:00
b4721dd5cc
docs: minor updates in concepts and quickstart ( #110 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-07-27 13:47:43 -07:00
aec36b49ba
docs: add tenant id reference in quick start ( #105 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-27 00:24:19 +00:00
cf5460b4c8
fix: do not taint windows nodes before upgrading the cluster ( #104 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-07-23 10:12:09 -07:00
3960c686d3
test: add e2e tests on skip containers and token expiration ( #103 )
...
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-07-21 12:51:49 -07:00
9d15d921ab
e2e: remove `make install-cert-manager` for verify_deployment ( #102 )
...
- Removes `make install-cert-manager` from verify_deployment.
- Removes the windows node taint that was required when using
cert-manager
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-20 09:56:08 -07:00
Ernest Wong
Anish Ramasekar
github-actions[bot]