зеркало из
1
0
Форкнуть 0
Граф коммитов

449 Коммитов

Автор SHA1 Сообщение Дата
Ernest Wong 6916d941e6
docs: revert some changes from #306 (#312)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2022-01-11 18:08:37 +00:00
Anish Ramasekar c9b7d8ae26
test: bump kubernetes version to v1.23.1 (#313)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-01-10 16:49:58 -08:00
Anish Ramasekar d370083e67
docs: add link to aks oidc issuer setup (#310)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-01-07 19:08:57 +00:00
Anish Ramasekar a8ac86357a
ci: use goreleaser for release (#309)
* ci: use goreleaser for azwi release

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* chore: delete chglog template and config

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* chore: use custom name template for archive

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-01-07 11:08:29 -08:00
Anish Ramasekar 5c12b6446c
test: add `--enable-oidc-issuer` to az aks create (#305)
* test: add --enable-oidc-issuer to az aks create

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* test: use kubernetes 1.21 latest patch for aks

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-01-05 16:25:17 -08:00
Sertaç Özercan 486a780682
docs: add aks feature registration (#308)
* docs: add aks feature registration

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>

* add or update

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
2022-01-05 09:34:46 -08:00
Ernest Wong e50e52bbfb
docs: minor documentation update (#306)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2022-01-04 11:54:38 -08:00
Anish Ramasekar bbb57394f2
chore: upgrade controller-runtime to v0.11.0 (#304)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-01-03 22:25:09 +00:00
Ernest Wong 5776af0b71
security: fix CVE-2021-43618 (#302)
Signed-off-by: GitHub <noreply@github.com>
2022-01-03 19:40:46 +00:00
Anish Ramasekar 258b103589
test: remove service account token expiration e2e flag (#301)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-12-15 20:13:36 +00:00
github-actions[bot] 5ef06e09bf
release: update manifest and helm charts for v0.7.0 (#299)
Co-authored-by: chewong <chewong@users.noreply.github.com>
2021-12-14 23:05:30 +00:00
Ernest Wong 9a475482e0
test: decrease ginkgo nodes to 1 to reduce flakiness (#297)
Signed-off-by: GitHub <noreply@github.com>
2021-12-14 22:00:00 +00:00
Anish Ramasekar 1215a32ef1
chore: update dependencies (#296)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-12-13 13:52:45 -08:00
Anish Ramasekar c82d2fc8b1
test: set subscription after login (#295)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-12-13 09:17:01 -08:00
Anish Ramasekar e40735e8fd
feat: use graph sdk for azwi (#292)
* feat: use graph sdk

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* feat: update app and sp to use graphsdk

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* feat: update federated identity credential to use graphsdk

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* feat: add graph errors

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* ci: increase timeout and update actions

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* test: fix unit tests

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* Review feedback

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-12-10 15:19:26 -08:00
Ernest Wong e07f9e042d
chore: support v1.23.0 kind cluster version (#294)
Signed-off-by: GitHub <noreply@github.com>
2021-12-09 18:45:30 +00:00
Ernest Wong 06ef7bab3b
security: fix CVE-2021-43784 (#293)
Signed-off-by: GitHub <noreply@github.com>

Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-12-08 00:36:05 +00:00
Anish Ramasekar 23042a0952
test: e2e test for azwi build on ubuntu and macos (#286)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-12-07 23:25:12 +00:00
Anish Ramasekar 652221dfca
chore: update debian-iptables to bullseye-v1.1.0 (#291)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-12-02 18:54:26 +00:00
Ernest Wong 3574474fea
test: enable token exchange and proxy test scenario on soak clusters (#289)
Signed-off-by: GitHub <noreply@github.com>
2021-12-02 01:28:02 +00:00
Anish Ramasekar d2ddeffa4b
test: bump kubernetes version to v1.22.4 (#288)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-29 16:50:27 -08:00
Anish Ramasekar 2f26033a5d
docs: fix issuer url query value for aks (#287)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-11 11:42:29 -08:00
Anish Ramasekar c90ffd0a78
ci: add markdown-link-check workflow (#283)
* ci: add markdown-link-check workflow

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* docs: fix errors from markdown-link-check

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-11 18:13:32 +00:00
Ernest Wong f58185bb77
docs: create & delete federated identity credentials with azwi-cli (#282)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-11-11 09:14:09 -08:00
hbc 980528c0e6
docs: update property name (#285) 2021-11-11 08:22:33 -08:00
Ernest Wong 9329846e7f
docs: reference azwi-cli in quick start and bump Kubernetes versions (#281)
* docs: reference azwi-cli in quick start and bump Kubernetes versions

Signed-off-by: Ernest Wong <chuwon@microsoft.com>

* Address PR comments

Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-11-10 01:02:53 +00:00
Anish Ramasekar dc3a9c0742
chore: make `azwi serviceaccount create|delete` flags constant (#274)
* chore: make azwi serviceaccount create|delete flags constant

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* Review feedback

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-09 21:47:27 +00:00
Anish Ramasekar 0357800cdc
ci: use latest azure cli for azwi-e2e workflow (#280)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-09 20:31:39 +00:00
Anish Ramasekar 8dd303260d
chore: remove SUPPORT.md (#278)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-09 19:45:55 +00:00
Ernest Wong a533c7a6b6
test: e2e test coverage for azwi-cli (#271)
* test: e2e test coverage for azwi-cli

Signed-off-by: Ernest Wong <chuwon@microsoft.com>

* Address PR comments

Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-11-09 18:48:35 +00:00
Anish Ramasekar eb1131f354
docs: update helm installation steps (#277)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-08 16:32:48 -08:00
Ernest Wong 696a249a66
docs: document tenant conditional access policy (#276)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-11-08 15:59:04 -08:00
Ernest Wong 84a065a438
ci: migrate e2e test on kind clusters to GitHub Actions (#272)
Signed-off-by: GitHub <noreply@github.com>
2021-11-04 23:07:40 +00:00
Ernest Wong c94b4a9046
feat: add individual commands for phases (#227)
* feat: add individual commands for phases

Signed-off-by: GitHub <noreply@github.com>

* Address PR comments

Signed-off-by: GitHub <noreply@github.com>
2021-11-04 11:32:22 -07:00
Sertaç Özercan c574e82fad
ci: create zip for azwi cli for windows (#268)
* create zip for windows

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>

* add zip to sha256sums

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
2021-11-02 23:54:29 +00:00
Anish Ramasekar 5d025ff1e4
docs: address documentation issues (#265)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-02 22:43:10 +00:00
Anish Ramasekar 32410f7899
chore: replace federated identity with federated identity credential (#266)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-11-02 14:48:29 -07:00
Ernest Wong d35f4539ac
security: bump Kubernetes version to v1.22.3 (#261)
Signed-off-by: GitHub <noreply@github.com>
2021-11-01 14:16:26 -07:00
Ernest Wong 0e6d5150b4
ci: allow `content: read` token permission for publish_images workflow (#260)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-10-29 23:22:55 +00:00
Ernest Wong 2d0658f4aa
fix: convert registry to lowercase before building images (#258)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-10-29 22:18:54 +00:00
Ernest Wong 8b08304045
fix: allow `make deploy` to deploy webhook using deployment YAML (#259)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-10-29 21:29:25 +00:00
Ernest Wong d976314367
docs: address several documentation issues (#249)
* docs: address several documentation issues

Signed-off-by: Ernest Wong <chuwon@microsoft.com>

* Address PR comments

Signed-off-by: Ernest Wong <chuwon@microsoft.com>

* Address PR comments

Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-10-28 22:44:00 +00:00
Ernest Wong 396d46a217
docs: allow `kubectl apply -f` through a URL (#253)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-10-28 02:12:13 +00:00
Anish Ramasekar bef6574187
chore: add debug logs for msal-go (#257)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-10-28 00:22:19 +00:00
Sertaç Özercan 53a843537c
ci: scope github token for actions (#256) 2021-10-27 22:32:41 +00:00
Ernest Wong 3624a35f86
refactor: migrate publishing pipeline to GitHub Actions (#252)
Signed-off-by: GitHub <noreply@github.com>
2021-10-27 21:24:32 +00:00
Anish Ramasekar 584ae7f509
fix: set default token expiration to 1h (#247)
The kubernetes default for projected service account token is 1h. Using
the same expiry value to be conformant. The minimum is 1h and max is
24h.

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-10-25 09:32:13 -07:00
Anish Ramasekar df6b9e8223
docs: update quick-start based on testing (#228)
* docs: update quick-start based on testing

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* docs: add placeholder for application name

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-10-21 20:45:50 +00:00
Ernest Wong 56878e0c14
docs: add language-specific examples (#229)
Signed-off-by: Ernest Wong <chuwon@microsoft.com>
2021-10-21 13:06:57 -07:00
Anish Ramasekar 2fa732eeae
docs: add troubleshooting guide (#226)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-10-21 11:45:45 -07:00