Takashi Okamoto
fbdb55aba9
Add doc for kubelogin and Active Directory ingtegration sample.
7 years ago
Takashi Okamoto
2d7de4ec70
Add Active Directory and kubeloing integration sample.
7 years ago
Stephan Renatus
f1581ff873
Merge pull request #1374 from kbalka/keystone-connector
...
PR contains connector for openstack keystone.
Features:
access tokens
refresh tokens
groups
Requirements:
access to openstack keystone instance
keystone administrative account credentials
Enabling keystone connector specific tests:
make sure docker is running
export DEX_TEST_KEYSTONE=1
make tests
7 years ago
Krzysztof Balka
e8ba848907
keystone: fetching groups only if requested, refactoring.
7 years ago
joannano
88d1e2b041
keystone: test cases, refactoring and cleanup
7 years ago
Krzysztof Balka
a965365a2b
keystone: refresh token and groups
7 years ago
knangia
0774a89066
keystone: squashed changes from knangia/dex
7 years ago
Stephan Renatus
2d1ac74ec0
Merge pull request #1380 from dkess/emailsuffix
...
LDAP connector - add emailSuffix config option
7 years ago
Daniel Kessler
ee54a50956
LDAP connector - add emailSuffix config option
7 years ago
Eric Chiang
27f66e795e
Merge pull request #1377 from hainesc/master
...
Replace "GET", "POST" to http.MethodGet and http.MethodPost
7 years ago
Haines Chan
b78b8aeee0
Replace "GET", "POST" to http.MethodGet and http.MethodPost
7 years ago
Stephan Renatus
4329f407dc
Merge pull request #1373 from ericchiang/go-1.11.3
...
Dockerfile: update to Go 1.11.3
7 years ago
Eric Chiang
bad15c1c02
Dockerfile: update to Go 1.11.3
...
Go 1.11.3 and 1.10.6 were released to mitigate security issues.
These don't appear to impact dex, but update anyway.
Ref: https://groups.google.com/forum/#!topic/golang-announce/Kw31K8G7Fi0
7 years ago
Stephan Renatus
a3cf7b63b7
Merge pull request #1372 from babiel/configurable-auth-request-expiry
...
Make expiry of auth requests configurable
This is a band-aid against #1292
I did not change the default from 24h, but I think it should be much lower for safety.
7 years ago
Maximilian Gaß
74f84ce0be
Change config test to non-default expiry settings
7 years ago
Maximilian Gaß
468c74d1d2
Make expiry of auth requests configurable
7 years ago
Stephan Renatus
aafbaa36c5
Merge pull request #1357 from srenatus/sr/issue-1354
...
postgres: expose database/sql tunables
Fixes #1354 .
I've not had a need for MaxIdleConns and ConnMaxLifetime myself, but it felt weird to only expose of the three settings.
7 years ago
Eric Chiang
60264d440c
Merge pull request #1369 from josdotso/go-modules-docs
...
Documentation/dev-dependencies.md: Update for Go modules
7 years ago
Joshua M. Dotson
46296ab9d0
Documentation/dev-dependencies.md: Update for Go modules
7 years ago
Stephan Renatus
f5befb2e2d
Merge pull request #1368 from ericchiang/makefile-cleanups
...
Makefile: cleanups for newer versions of Go
Go 1.9 removed "./..." matching the vendor directory while Go 1.10 added
build and test caching. This means we no longer need to grep out
vendored matches (except for golint which doesn't implement the same
behavior), and we no longer need to pre-build packages with "go build -i".
https://golang.org/doc/go1.9#vendor-dotdotdot
https://golang.org/doc/go1.10#build
7 years ago
Eric Chiang
1a565266fc
Makefile: cleanups for newer versions of Go
...
Go 1.9 removed "./..." matching the vendor directory while Go 1.10 added
build and test caching. This means we no longer need to grep out
vendored matches (except for golint which doesn't implement the same
behavior), and we no longer need to pre-build packages with "go build -i".
https://golang.org/doc/go1.9#vendor-dotdotdot
https://golang.org/doc/go1.10#build
7 years ago
Eric Chiang
8a479707b3
Merge pull request #1365 from josdotso/migrate-to-go-modules
...
Migrate to go modules
7 years ago
Joshua M. Dotson
eaeab218b8
vendor: make revendor
7 years ago
Joshua M. Dotson
172df9ccef
*: remove glide and add Go module files
7 years ago
Stephan Renatus
17ac7c8a86
Merge pull request #1367 from srenatus/sr/cherry-pick-lib/pq-bump
...
bump lib/pq
taken from @vito's #1342 .
7 years ago
Stephan Renatus
73fdf4f75b
storage/sql/postgres: expose stdlib tunables, set them for tests
...
- adapted TestUnmarshalConfig to ensure the fields are read in
- added a test to see that at least MaxOpenConns works:
- this is only exposed through (*db).Stats() in go 1.11, so this test
has a build tag
- the other two configurables can't be read back, so we've got to
trust that the mechanism works given the one instance that's tested..
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Alex Suraci
badbc8c738
bump lib/pq
7 years ago
Stephan Renatus
d91f9fbc51
Merge pull request #1366 from dexidp/revert-1342-pr/retry-on-pg-serialization-error
...
Revert "retry on serialization errors"
This will come back, as outline here: https://github.com/dexidp/dex/pull/1356#issuecomment-442523779
7 years ago
Stephan Renatus
8f3cca7ba4
Revert "retry on serialization errors"
7 years ago
Stephan Renatus
f3acec0b1b
Merge pull request #1275 from ccojocar/client-update-api
...
Extend the API with a function which updates the client configuration
7 years ago
Cosmin Cojocar
01c6b9dd91
Remove the 'public' field from UpdateClientReq proto message
7 years ago
Stephan Renatus
007e4dae3c
Merge pull request #1358 from OwenTuz/issue-1132-initial-kubernetes-documentation-improvements
...
Kubernetes docs: clarify steps around use/creation of TLS assets.
7 years ago
Stephan Renatus
5355b81e2a
Merge pull request #1359 from OwenTuz/issue-1190-document-capitalisation-of-dn
...
LDAP connector - Document that 'DN' must be in capitals
7 years ago
Owen Tuz
9ea2ade208
LDAP docs - remove extra wording re DN
7 years ago
Owen Tuz
e603a5e631
LDAP connector - Document that 'DN' must be in capitals
7 years ago
Owen Tuz
9b5122568a
Kubernetes docs: replace absolute link with relative
7 years ago
Owen Tuz
72c9cf43a9
Fix comment in LDAP query documentation
7 years ago
Owen Tuz
45eb9b279b
Kubernetes docs: wording nitpicks
7 years ago
Owen Tuz
58093dbb29
Kubernetes example: Add RBAC resources and serviceAccount to YAML manifest, remove some references to deprecated TPR approach
7 years ago
Owen Tuz
e028b79c97
Kubernetes docs: clarify steps around use/creation of TLS assets.
7 years ago
Stephan Renatus
5f054fcf2e
Merge pull request #1342 from concourse/pr/retry-on-pg-serialization-error
...
retry on serialization errors
7 years ago
Stephan Renatus
f7f7314fdb
Merge pull request #1350 from srenatus/sr/storage/nuke-standup-scripts
...
storage: nuke standup scripts, adapt dev-integration-test docs
7 years ago
Alex Suraci
85dd0684ba
extract and document serialization failure check
7 years ago
Alex Suraci
587081a643
postgres: refactor error handling to fix retrying
...
prior to this change, many of the functions in the ExecTx callback would
wrap the error before returning it. this made it impossible to check
for the error code.
instead, the error wrapping has been moved to be external to the
`ExecTx` callback, so that the error code can be checked and
serialization failures can be retried.
7 years ago
Alex Suraci
5d67da1472
bump lib/pq
7 years ago
Alex Suraci
aa068b667a
postgres: improve readability of error check
7 years ago
Alex Suraci
9b9013a560
postgres: use stdlib to set serializable tx level
...
also use a context for the rollback, which is a bit cleaner since it
only results in one 'defer', rather than N from the loop
7 years ago
Alex Suraci
7e96021428
retry on serialization errors
7 years ago
Stephan Renatus
6182f213ef
storage/conformance: remove old build tags
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
58b546a5be
dev-integration-test: add etcd notes
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago