290 commits

Author	SHA1	Message	Date
Mariano Cano	5565d61bf3	Add fault tolerance against clock skew accross system on TLS certificates.	2020-01-28 13:29:39 -08:00
max furman	b9f6aacb0f	Move api errors to their own package and modify the typedef	2020-01-28 13:29:39 -08:00
Mariano Cano	f033422ffa	Allow no provisioners.	2020-01-28 13:29:39 -08:00
Mariano Cano	f4615d6258	Addapt test to api change.	2020-01-28 13:29:39 -08:00
max furman	3ac388612a	Use x5cInsecure token for /ssh/check-host endpoint	2020-01-28 13:29:39 -08:00
Mariano Cano	08eac1b00d	Make sure to define the KeyID from the token if available.	2020-01-28 13:29:39 -08:00
Mariano Cano	de3ba58455	Store renew certificate in the database.	2020-01-28 13:29:39 -08:00
Mariano Cano	caa2b8dbb7	Add leeway in identity not before.	2020-01-28 13:29:39 -08:00
max furman	9caadbb341	Fix authority calling wrong revoke method	2020-01-28 13:29:39 -08:00
Mariano Cano	f26103d150	Make test compilable.	2020-01-28 13:29:39 -08:00
Mariano Cano	557a45abfa	Update template tests.	2020-01-28 13:29:39 -08:00
max furman	656f35e522	Use an actual Hosts type when returning ssh hosts	2020-01-28 13:29:39 -08:00
Mariano Cano	03bb26fb91	Add missing version.go file.	2020-01-28 13:28:17 -08:00
Mariano Cano	c60641701b	Add version endpoint.	2020-01-28 13:28:16 -08:00
max furman	f92bb06b6c	change func def for getSSHHosts ... * continue to return all hosts if injection method not specified	2020-01-28 13:28:16 -08:00
Mariano Cano	11c8639782	Add identity certificate in ssh response.	2020-01-28 13:28:16 -08:00
max furman	d940ab7c20	Add getSSHHosts injection func	2020-01-28 13:28:16 -08:00
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	2020-01-28 13:28:16 -08:00
max furman	3d970b45c8	remove printfs	2020-01-28 13:28:16 -08:00
max furman	f74cd04a6a	Add WithGetIdentityFunc option and attr to authority ... * Add Identity type to provisioner	2020-01-28 13:28:16 -08:00
Mariano Cano	8bf3bf701e	Add support for /ssh/bastion method.	2020-01-28 13:28:16 -08:00
Mariano Cano	a6edcd0a3d	Make test to compile, they still fail.	2020-01-28 13:28:16 -08:00
Mariano Cano	000885dea7	Move Option type to a new file.	2020-01-28 13:28:16 -08:00
Mariano Cano	a86dc78b5d	Add missing comment.	2020-01-28 13:28:16 -08:00
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	2020-01-28 13:28:16 -08:00
Mariano Cano	29be322b1c	Make audiences compatible with the old version.	2020-01-28 13:28:16 -08:00
Mariano Cano	39ae5636fe	Complete AuthDB interface.	2020-01-28 13:28:16 -08:00
Mariano Cano	d4627d1282	Make provisioner tests compile, they are still failing.	2020-01-28 13:28:16 -08:00
Mariano Cano	a8a6d0ada3	Fix indentation.	2020-01-28 13:28:16 -08:00
Mariano Cano	cf592fa0e1	Remove global check for number of k8sSA provisioners. ... This was causing a bug in the reload of the ca.	2020-01-28 13:28:16 -08:00
max furman	5788ac3f4f	sshpop token should not allow renew/rekey of user ssh certs	2020-01-28 13:28:16 -08:00
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	2020-01-28 13:28:16 -08:00
max furman	29853ae016	sshpop provisioner + ssh renew | revoke | rekey first pass	2020-01-28 13:28:16 -08:00
max furman	c04f1e1bd4	sshpop first pass	2020-01-28 13:28:16 -08:00
max furman	5616386eed	Add SSH getHosts api	2020-01-28 13:28:16 -08:00
Mariano Cano	c7e4cc96a4	Change default user duration to 16h.	2020-01-28 13:28:16 -08:00
Mariano Cano	c729c5f925	Fix list of user ssh public keys.	2020-01-28 13:28:16 -08:00
Mariano Cano	ee22778264	Fix lint error.	2020-01-28 13:28:16 -08:00
Mariano Cano	8939caace4	Add tests for ssh authority methods.	2020-01-28 13:28:16 -08:00
Mariano Cano	4f06f3901e	Add some ssh related tests.	2020-01-28 13:28:16 -08:00
Mariano Cano	08850d5334	Add support for federated keys.	2020-01-28 13:28:16 -08:00
Mariano Cano	37f17213bb	Add initial support for check-host endpoint.	2020-01-28 13:28:16 -08:00
Mariano Cano	d08db4df23	Rename SSH methods.	2020-01-28 13:28:16 -08:00
Mariano Cano	b5bc249e1c	Add support for multiple ssh roots. ... Fixes #125	2020-01-28 13:28:16 -08:00
Mariano Cano	91130b9c3f	Add support for user data in templates.	2020-01-28 13:28:16 -08:00
Mariano Cano	a35988ff08	Add initial support for ssh config. ... Related to smallstep/cli#170	2020-01-28 13:28:16 -08:00
Mariano Cano	d4c47cf3e1	Fix tests.	2020-01-28 13:28:16 -08:00
Mariano Cano	961be1fbc7	Add endpoint to return the SSH public keys. ... Related to smallstep/ca-component#195	2020-01-28 13:28:16 -08:00
Mariano Cano	a197158426	Add initial implementation of ssh config.	2020-01-28 13:28:16 -08:00
max furman	8f07ff6a39	Add kubernetes service account provisioner	2019-10-29 17:42:50 -07:00