зеркало из
1
0
Форкнуть 0
Граф коммитов

20 Коммитов

Автор SHA1 Сообщение Дата
Anish Ramasekar e2bba608a9
feat: add proxy --probe and enable lifecycle postStart hook (#490)
* feat: add proxy --probe and enable lifecycle postStart hook

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* review feedback

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-07-19 21:56:25 +00:00
Anish Ramasekar 77d7216873
feat: add metrics (#478)
* feat: add metrics

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* chore: make metrics port configurable with helm

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-06-29 16:25:50 +00:00
Anish Ramasekar 35bd704346
feat: add initial framework for azwi-cli (#180)
* feat: add azure-workload-identity CLI

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

feat: add service account and federated credential creation

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* feat: add auth_method flag and cli option

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-10-08 10:24:04 -07:00
Ernest Wong a0566b227a
feat: support console log encoding with klogr (#175)
Signed-off-by: GitHub <noreply@github.com>
2021-09-13 22:28:17 -07:00
Anish Ramasekar f5f3cd8991
feat: rename module and annotations from aad-pod-managed-identity to azure-workload-identity (#150)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

feat: update labels, image repo path and namespace prefix

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

feat: rename annotations to azure.workload.identity/*

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-24 11:46:00 -07:00
Anish Ramasekar 887abce66e
feat: implement proxy using msal-go (#142)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

update token acquire logic

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

test: add e2e tests for proxy

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-12 13:43:14 -07:00
Anish Ramasekar 39cbca8e3c
fix: bypass cache and get from apiserver if serviceaccount not found (#140)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-08-09 11:01:08 -07:00
Anish Ramasekar 1612851f50
chore: enable additional linters (#118)
* chore: enable additional linters

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* chore: enable errcheck linter and fix errors

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* chore: enable whitespace linter and fix errors

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-29 15:29:06 -07:00
Anish Ramasekar 7845d7087b
feat: use cert-controller rotator for server certs (#93)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-19 22:32:46 +00:00
Anish Ramasekar c052022b43
feat: add user agent to client (#99)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-07-15 17:52:25 -04:00
Ernest Wong 1f4c734cfa
feat: add readiness and liveness probes to webhook (#95)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-07-13 15:10:42 -07:00
Sertaç Özercan bace9bea68
Set minimum TLS version in webhook (#86)
* min tls version

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>

* update to v0.21.2

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>

* fix merge conflicts

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
2021-07-12 15:19:29 -04:00
hbc 9670a9df4b
feat: add `-webhook-cert-dir` flag to allow overriding (#84)
* feat: add `-webhook-cert-dir` flag to allow overriding

* doc: note for {TempDir} behavior in Mac
2021-07-09 11:28:06 -07:00
Anish Ramasekar 4d39eb434a
feat: make audience configurable (#35)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-05-18 11:45:07 -07:00
Anish Ramasekar d857e00f71
feat: add support for arc clusters (#25)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-05-12 09:11:11 -07:00
Ernest Wong 37777459e2
refactor: use pkg/errors instead of fmt (#26)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-05-11 16:14:46 -07:00
Anish Ramasekar 29e00813a0
ci: enable linting and fix issues (#23)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-05-10 16:21:01 -07:00
Ernest Wong dc63675c64
chore: Makefile improvement and add e2e test case (#19)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-05-10 14:28:14 -07:00
Anish Ramasekar 980d796e91
feat: implement mutating webhook (#15)
* feat: implement mutating webhook

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* test: add unit tests for webhook handler

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-05-04 12:30:57 -07:00
Anish Ramasekar d948ba2545
feat: implement proxy and init iptables (#12)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-04-30 14:51:28 -07:00