Azure
/
secrets-store-csi-driver-provider-azure
зеркало из https://github.com/Azure/secrets-store-csi-driver-provider-azure.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
592 коммитов 30 Ветки 34 Теги 59 MiB
Граф коммитов

58 Коммитов

Автор SHA1 Сообщение Дата
Nilekh Chaudhari 41b07df322
release: updates manifest and helm charts for v1.6.0 (#1657) 
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
 2024-10-10 15:49:29 -07:00
Anish Ramasekar a48f93472e
chore: remove direct dependency on adal (#1611) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2024-08-22 00:54:33 +00:00
Anish Ramasekar 9616f7049c
test: move all tests to use workload identity (#1578) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2024-06-25 10:21:59 -07:00
dependabot[bot] 8296abd674
chore: bump golang.org/x/crypto from 0.22.0 to 0.23.0 (#1559) 
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2024-05-22 23:53:43 +00:00
Anish Ramasekar 733f10d7e5
chore: bump golang.org/x/net from 0.17.0 to 0.24.0 (#1527) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: Sertaç Özercan <852750+sozercan@users.noreply.github.com>
 2024-04-15 21:55:57 +00:00
Anish Ramasekar 577f7d6948
security: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 (#1499) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2024-03-22 14:10:18 -07:00
dependabot[bot] 087afe696a
chore: bump golang.org/x/crypto from 0.14.0 to 0.18.0 (#1410) 
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2024-01-09 14:17:20 -08:00
dependabot[bot] b502857d3f
chore: bump golang.org/x/net from 0.10.0 to 0.17.0 (#1332) 
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-10-27 14:17:18 -07:00
Anish Ramasekar f797835510
chore: helm chart release for driver v1.3.4 (#1255) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-07-31 13:11:05 -07:00
Anish Ramasekar 4ded330340
chore: helm chart release for driver v1.3.3 (#1188) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-05-31 09:50:11 -07:00
dependabot[bot] 158fd8c174
chore: bump golang.org/x/crypto from 0.7.0 to 0.9.0 (#1168) 
* chore: bump golang.org/x/crypto from 0.7.0 to 0.9.0

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.7.0 to 0.9.0.
- [Commits](https://github.com/golang/crypto/compare/v0.7.0...v0.9.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* run "go mod tidy"

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-05-11 05:07:22 +00:00
Anish Ramasekar 9885ea2425
chore: use `sdk/security/keyvault` dep (#1166) 2023-05-10 19:12:12 -07:00
dependabot[bot] f63c56e490
chore: bump golang.org/x/net from 0.7.0 to 0.10.0 (#1164) 
* chore: bump golang.org/x/net from 0.7.0 to 0.10.0

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.10.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* run "go mod tidy"

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-05-10 06:39:00 +00:00
dependabot[bot] 99968cc213
chore: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.2.1 to 1.3.0 (#1165) 
* chore: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity

Bumps [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azidentity/v1.2.1...sdk/azcore/v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* run "go mod tidy"

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-05-09 22:55:02 -07:00
Anish Ramasekar 9f974df676
feat: use the `azsecrets`, `azkeys`, `azcertificates` keyvault sdk (#1109) 
* add keyvault interface
* update auth to remove adapter and return token cred
* implement keyvault interface and cleanup url usage
* update e2e tests to use azsecrets
* add mock_keyvault and initial unit test
* remove getObjectVersion helper and use id.Version()
* add unit test for getsecret
* add unit test for getcerts

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-04-25 15:52:05 -07:00
dependabot[bot] fea0b262ec
chore: bump golang.org/x/net from 0.5.0 to 0.7.0 (#1084) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.5.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.5.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-18 00:48:22 +00:00
Anish Ramasekar ceac76089b
feat: migrate from `autorest/adal` to `azidentity` (#1028) 
* feat: migrate from `autorest/adal` to `azidentity`

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2023-02-08 14:45:18 -08:00
Anish Ramasekar d5c8c90bd5
security: fix CVE-2022-41717 (#1039) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-12-13 22:00:35 +00:00
Anish Ramasekar 543dc72377
chore: update deps (#1005) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-10-25 16:11:05 -07:00
Anish Ramasekar f2de8d7854
security: fix CVE-2022-32149 (#999) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-10-21 11:23:13 -07:00
Anish Ramasekar 5d917788bc
security: fix CVE-2022-27664 (#976) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-09-16 17:34:12 +00:00
Anish Ramasekar 815ad888d3
chore: support kubernetes v1.25.0 (#968) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-09-08 15:26:17 -07:00
Anish Ramasekar 8a9e262d01
refactor: update msal-go-sdk and use NewCredFromAssertionCallback (#961) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-08-16 11:17:40 -07:00
Anish Ramasekar f619ba366b
chore: update to go 1.19 (#960) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-08-15 20:30:20 +00:00
Anish Ramasekar 9cfbe6e1f4
chore: update dependencies (#956) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-08-11 10:54:21 -07:00
Anish Ramasekar 56289fac29
refactor: define provider interface and add mock provider for test (#947) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-08-09 11:55:22 -07:00
Lloyd Ramey 5c39064b01
feat: add functionality for syncing version history (#834) 
* feat: add functionality for syncing version history

If specified with a value greater than 1, the ObjectVersionHistory tells
the provider how many versions of the secret (including the latest
version)to sync from key vault. It will then put each secret into a file
named {objectName\objectAlias}/{secretVersion}. To use this
functionality, the provider will need the secrets/list permission in
addition to the permissions it already requires. If this functionality
is not used, then there are no additional permissions needed.
 2022-07-22 16:50:56 -07:00
Anish Ramasekar 19f1969b27
security: fix CVE-2022-29526 (#939) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-07-20 00:38:25 +00:00
Anish Ramasekar 77caeea832
security: fix CVE-2022-27191 (#932) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-07-12 09:41:51 -07:00
Nilekh Chaudhari 6ac759589d
security: fixes CVE-2022-28948 in gopkg.in/yaml.v3 (#922) 
Signed-off-by: Nilekh Chaudhari <1626598+nilekhc@users.noreply.github.com>
 2022-06-23 02:22:46 +05:30
Anish Ramasekar db2dadb038
chore: update kubernetes deps to v1.24.1 (#908) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-06-07 14:14:46 -07:00
Anish Ramasekar 20dbb05816
chore: update to yaml.v3 (#905) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-06-02 10:46:31 -07:00
Anish Ramasekar 2b35c1724c
security: fix CVE-2022-27191 (#876) 
* ci: enable library vuln type for provider-azure image scan

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* security: fix CVE-2022-27191

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-05-04 22:08:21 +05:30
Anish Ramasekar ee7fd7b539
chore: update go-autorest to v0.11.27 (#868) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-05-03 00:04:49 +05:30
Anish Ramasekar 1026a58b87
chore: upgrade kubernetes and driver deps (#843) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-03-25 15:03:02 -07:00
Anish Ramasekar 8057df184b
chore: upgrade to go 1.18 (#842) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-03-25 11:17:45 -07:00
Anish Ramasekar 07b6ace393
feat: add workload identity (#778) 
* feat: add workload identity

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* test: add e2e for workload identity

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* chore: upgrade to driver v1.1.0-rc.0 and set token requests

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* test: add create kind cluster script

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* test: add service account issuer env var for arc

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* docs: add doc for workload identity mode

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

* review feedback

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-02-16 09:18:57 -08:00
Anish Ramasekar e78f7321d9
chore: update driver, kubernetes deps (#776) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-01-27 18:57:30 +00:00
Anish Ramasekar a40f8978a9
chore: update adal deps to v0.9.18 (#741) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2022-01-03 12:00:14 -08:00
Anish Ramasekar 8a3834b87f
security: bump kubernetes version to v1.22.3 (#701) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-11-01 23:57:23 +00:00
Anish Ramasekar c1baa7ae8e
feat: add metrics for provider (#407) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

chore: update to latest version of otel

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-09-09 10:57:02 -07:00
Anish Ramasekar 385f9d4a3a
chore: update to go 1.17 (#630) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-09-08 14:58:09 -07:00
Anish Ramasekar d27d0bbd81
chore: bump golang.org/x/crypto to v0.0.0-20201216223049-8b5274cf687f (#511) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-05-19 15:17:16 -07:00
Anish Ramasekar 40bb6782e4
feat: switch to driver writing files (#460) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

ci: update pipeline to test feature

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

ci: update gotool to 1.16.3

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-05-12 16:47:29 -07:00
Anish Ramasekar d495e65917
chore: update sdk dependencies (#439) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-03-11 16:15:38 -08:00
Anish Ramasekar 5aef9ec3c6
chore: update to go 1.16 (#424) 
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
 2021-03-02 23:45:21 -08:00
Anish Ramasekar 584551e9ca
add new test framework (#242) 
refactor certs util for tests

add test for public key

configure pod identity test
 2021-02-05 15:06:28 -08:00
Anish Ramasekar a87ef7ec30
test: add unit tests for auth and provider pkgs (#379) 2021-02-05 10:14:09 -08:00
Anish Ramasekar be1a67f5c9
feat: support reconstructing chain of certs (#332) 
* feat: support reconstructing chain of certs

* switch to using authority and subject kid
 2021-01-04 16:46:05 -08:00
Anish Ramasekar ca283461c2
fix: switch to using flag instead of pflag (#331) 2020-12-09 23:34:14 -08:00