Mike Danese
c87de85347
autoupdate BUILD files
2016-12-12 13:30:07 -08:00
deads2k
c4e2e19e51
allow auth proxy to set groups and extra
2016-12-01 09:00:30 -05:00
Brendan Burns
860748c08f
Fix some lint errors.
2016-11-12 21:25:09 -08:00
deads2k
3f9a4d51d5
wire up authenticating front proxy:
2016-10-28 08:36:46 -04:00
deads2k
557e653785
add front proxy authenticator
2016-10-28 08:36:46 -04:00
deads2k
f34bb50ce7
add x509 verifier
2016-10-28 08:05:16 -04:00
Mike Danese
df713b478c
fix tests by declaring testdata
2016-10-21 17:32:32 -07:00
Mike Danese
3b6a067afc
autogenerated
2016-10-21 17:32:32 -07:00
Jordan Liggitt
c984744cb1
Test x509 intermediates correctly
2016-10-11 01:48:43 -04:00
deads2k
57039cfdfa
make well-known users and groups into constants
2016-09-30 10:34:33 -04:00
Jordan Liggitt
0c36c5e556
Add anonymous auth to the auth chain
2016-09-26 17:19:00 -04:00
Jordan Liggitt
174e454874
Allow short-circuiting union auth on error
2016-09-26 17:18:05 -04:00
Jordan Liggitt
0dbcad1763
Add anonymous authenticator
2016-09-26 17:18:05 -04:00
Eric Chiang
e5d7f01b91
x509 authenticator: get groups from subject's organization field
2016-08-10 12:32:28 -07:00
Davanum Srinivas
2b0ed014b7
Use Go canonical import paths
...
Add canonical imports only in existing doc.go files.
https://golang.org/doc/go1.4#canonicalimports
Fixes #29014
2016-07-16 13:48:21 -04:00
k8s-merge-robot
4d91f0f763
Merge pull request #25137 from huang195/tls_user_emailaddress
...
Automatic merge from submit-queue
getting emailAddress from TLS cert
Kubernetes if using TLS cert to perform authentication will use the CommonName field of the cert as the authenticating user. In https://github.com/kubernetes/kubernetes/blob/master/plugin/pkg/auth/authenticator/request/x509/x509.go#L106 , alternative methods are defined to use emailAddress or DNSName as the authenticating user. The method that uses the emailAddress is not comprehensive as this information can be encoded in different places of the certificate. This PR fixes this.
2016-07-06 19:45:01 -07:00
David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
Hai Huang
235020ad64
getting emailAddress from TLS cert
2016-05-23 18:36:14 -04:00
zhouhaibing089
83248a9783
move keystone package to password since it is a password authenticator
2016-03-22 23:27:28 +08:00
Arsen Mamikonyan
8b5e9e2885
Change repository references to https://github.com/kubernetes/kubernetes
2016-01-22 10:23:14 -05:00
Kris
0a4ee958c7
Use http's basic auth instead of manual encoding
2015-11-06 10:19:01 -08:00
eulerzgy
f8f9afb874
alias local packagename for pkg/util/errors
2015-10-18 09:37:46 +08:00
Ruddarraju, Uday Kumar Raju
937db3f70d
Keystone authentication plugin
2015-08-13 09:46:30 -07:00
Mike Danese
8e33cbfa28
rewrite go imports
2015-08-05 17:30:03 -07:00
Eric Paris
6b3a6e6b98
Make copyright ownership statement generic
...
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
2015-05-01 17:49:56 -04:00
Tim Hockin
4fcd496d59
change everything to use new util/errors
2015-01-08 22:10:03 -08:00
Rohit Jnagal
62ecd5f3ff
Fix few vet errors.
...
There are quite a few 'composite literal uses unkeyed fields' errors that I have kept out of this patch.
And there's a couple where vet just seems confused. These are the easiest ones.
2015-01-07 08:40:16 +00:00
George Kuan
5e1fc1f4e0
Fixes #1605 : make ErrorList introspectable by replacing ErrorList and
...
ErrorList#ToError with []error and util.SliceToError() respectively
2014-12-12 10:56:31 -08:00
Jordan Liggitt
09ba404fb7
x509 request authenticator
2014-12-09 09:34:16 -05:00
deads2k
d8d889ef73
add union auth request handler
2014-11-26 10:51:23 -05:00
Jordan Liggitt
3532be3c82
Add basicauth and password authenticators
2014-11-24 17:52:10 -05:00
