auth

package

Go to main page

Versions in this module

v0

v0.38.0

Dec 6, 2023

v0.37.0

Nov 22, 2023

v0.36.0

Nov 9, 2023

v0.35.0

Oct 25, 2023

v0.34.0

Oct 11, 2023

v0.33.0

Sep 27, 2023

v0.32.0

Sep 13, 2023

v0.31.2

Aug 30, 2023

v0.31.1

Aug 30, 2023

v0.31.0

Aug 30, 2023

Changes in this version

+ const FeatureFlagAnonymousAuth

+ func AllUserAuthMethods() []string

+ type AnonymousPrincipalGetter struct

+ func (pg *AnonymousPrincipalGetter) Principal(r *http.Request) (*UserPrincipal, error)

type AuthMethod

+ const Anonymous

+ type AuthParams struct

+ AuthMethodStrings []string

+ Namespace string

+ NoAuthUser string

+ OIDCConfig OIDCConfig

+ OIDCSecretName string

+ SessionManager *scs.SessionManager

+ type AuthServerConfig struct

+ Log logr.Logger

+ OIDCConfig OIDCConfig

+ SessionManager SessionManager

type PrincipalGetter

+ func NewAnonymousPrincipalGetter(log logr.Logger, name string) PrincipalGetter

+ type SessionManager interface

+ Destroy func(ctx context.Context) error

+ GetString func(context.Context, string) string

+ LoadAndSave func(next http.Handler) http.Handler

+ Put func(ctx context.Context, key string, val interface{})

+ Remove func(context.Context, string)

v0.30.0

Aug 16, 2023

Changes in this version

type AuthServer

+ func (s *AuthServer) RefreshHandler(rw http.ResponseWriter, r *http.Request)

v0.29.0

Aug 2, 2023

v0.29.0-rc.1

Jul 31, 2023

v0.28.0

Jul 19, 2023

v0.27.1-rc.1

Jul 7, 2023

v0.27.0

Jul 6, 2023

v0.26.0

Jun 21, 2023

v0.25.1-rc.1

Jun 8, 2023

v0.25.0

Jun 7, 2023

v0.24.0

May 24, 2023

v0.24.0-rc.1

May 24, 2023

v0.23.0

May 11, 2023

v0.23.0-rc.1

May 10, 2023

v0.22.0

Apr 26, 2023

Changes in this version

type OIDCConfig

+ GroupsPrefix string

+ UsernamePrefix string

v0.22.0-rc.1

Apr 25, 2023

v0.21.2

Apr 13, 2023

v0.21.1

Apr 12, 2023

v0.21.0

Apr 12, 2023

v0.20.0

Mar 29, 2023

v0.20.0-rc.1

Mar 28, 2023

v0.19.0

Mar 15, 2023

v0.19.0-rc.1

Mar 9, 2023

v0.18.0

Mar 1, 2023

v0.18.0-rc.0

Feb 22, 2023

v0.17.0

Feb 15, 2023

v0.17.0-rc.4

Feb 14, 2023

v0.17.0-rc.3

Feb 14, 2023

v0.17.0-rc.2

Feb 14, 2023

v0.17.0-rc.1

Feb 13, 2023

v0.16.0

Feb 1, 2023

v0.15.0

Jan 18, 2023

Changes in this version

+ var DefaultScopes = []string

type AuthServer

+ func (s *AuthServer) Refresh(rw http.ResponseWriter, r *http.Request) (*UserPrincipal, error)

type OIDCConfig

+ Scopes []string

type UserPrincipal

+ func (p *UserPrincipal) Hash() string

v0.15.0-rc.1

Jan 10, 2023

v0.14.1

Jan 4, 2023

v0.13.0

Dec 21, 2022

v0.12.0

Dec 8, 2022

Changes in this version

+ const ClaimGroups

+ const ClaimUsername

+ const ScopeEmail

+ const ScopeGroups

+ const ScopeProfile

type AuthConfig

+ OIDCConfig OIDCConfig

+ type ClaimsConfig struct

+ Groups string

+ Username string

+ func (c *ClaimsConfig) PrincipalFromClaims(token claimsToken) (*UserPrincipal, error)

type OIDCConfig

+ ClaimsConfig *ClaimsConfig

type UserInfo

+ ID string

v0.11.0

Nov 24, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.11.0-rc.1

Nov 24, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.10.2

Nov 10, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.10.2-rc.1

Nov 9, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.10.1

Oct 28, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.10.1-rc.1

Oct 27, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.10.0

Oct 13, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.10.0-rc.1

Oct 13, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.6

Sep 29, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.6-rc.2

Sep 29, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.6-rc.1

Sep 27, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.5

Sep 15, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.5-rc.1

Sep 14, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.4

Sep 1, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

Changes in this version

+ const FeatureFlagOIDCPassthrough

+ func Groups(groups []string) func(*UserPrincipal)

+ func ID(id string) func(*UserPrincipal)

+ func Token(tok string) func(*UserPrincipal)

+ type JWTPassthroughCookiePrincipalGetter struct

+ func (pg *JWTPassthroughCookiePrincipalGetter) Principal(r *http.Request) (*UserPrincipal, error)

type PrincipalGetter

+ func NewJWTPassthroughCookiePrincipalGetter(log logr.Logger, verifier *oidc.IDTokenVerifier, cookieName string) PrincipalGetter

type UserPrincipal

+ func NewUserPrincipal(opts ...func(*UserPrincipal)) *UserPrincipal

+ func (p *UserPrincipal) SetToken(t string)

+ func (p *UserPrincipal) Valid() bool

v0.9.4-rc.0

Aug 30, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.3

Aug 16, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.3-patch.1

Aug 23, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.2

Aug 15, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

Changes in this version

+ func DefaultAuthMethodStrings() []string

+ func ParseAuthMethodArray(authStrings []string) (map[AuthMethod]bool, error)

+ type AuthMethod uint8

+ const OIDC

+ const TokenPassthrough

+ const UserAccount

+ func DefaultAuthMethods() []AuthMethod

+ func ParseAuthMethod(text string) (AuthMethod, error)

+ func (am *AuthMethod) String() string

+ func (am *AuthMethod) UnmarshalText(text []byte) error

type AuthServer

+ func InitAuthServer(ctx context.Context, log logr.Logger, rawKubernetesClient ctrlclient.Client, ...) (*AuthServer, error)

type MultiAuthPrincipal

+ Getters []PrincipalGetter

+ Log logr.Logger

v0.9.2-rc.2

Aug 11, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.2-rc.1

Aug 10, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.1

Jul 27, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

Changes in this version

+ const AccessTokenCookieName

+ const AuthorizationTokenHeaderName

+ const DefaultOIDCAuthSecretName

+ const FeatureFlagClusterUser

+ const FeatureFlagOIDCAuth

+ const FeatureFlagSet

+ type BearerTokenPassthroughPrincipalGetter struct

+ func (pg *BearerTokenPassthroughPrincipalGetter) Principal(r *http.Request) (*UserPrincipal, error)

type PrincipalGetter

+ func NewBearerTokenPassthroughPrincipalGetter(log logr.Logger, verifier *oidc.IDTokenVerifier, headerName string, ...) PrincipalGetter

type UserPrincipal

+ Token string

+ func (p *UserPrincipal) String() string

v0.9.1-rc.2

Jul 26, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.1-rc.1

Jul 19, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.0

Jun 21, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.0-rc.3

Jun 17, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.0-rc.2

Jun 17, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.9.0-rc.1

Jun 8, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.1

Jun 1, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.1-rc.7

Jun 1, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.1-rc.6

May 31, 2022 GO-2023-1377 +1 more

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.1-rc.5

May 26, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.1-rc.4

May 17, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.1-rc.3

May 12, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.1-rc.2

May 12, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.1-rc.1

May 9, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.0

Apr 29, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.0-rc.2

Apr 29, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.8.0-rc.1

Apr 28, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.1-rc.3

Apr 26, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.1-rc.2

Apr 22, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.1-rc.1

Apr 21, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0

Apr 12, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

Changes in this version

+ const ClusterUserAuthSecretName

+ const LoginOIDC

+ const LoginUsername

+ const OIDCAuthSecretName

+ func IsPublicRoute(u *url.URL, publicRoutes []string) bool

+ func JSONError(log logr.Logger, w http.ResponseWriter, errStr string, code int)

+ type AdminClaims struct

type AuthConfig

+ Log logr.Logger

+ func NewAuthServerConfig(log logr.Logger, oidcCfg OIDCConfig, kubernetesClient ctrlclient.Client, ...) (AuthConfig, error)

type AuthServer

+ func (s *AuthServer) Callback() http.HandlerFunc

+ func (s *AuthServer) Logout() http.HandlerFunc

+ func (s *AuthServer) OAuth2Flow() http.HandlerFunc

+ func (s *AuthServer) SignIn() http.HandlerFunc

+ func (s *AuthServer) UserInfo() http.HandlerFunc

+ type HMACTokenSignerVerifier struct

+ func NewHMACTokenSignerVerifier(expireAfter time.Duration) (*HMACTokenSignerVerifier, error)

+ func (sv *HMACTokenSignerVerifier) SetDevMode(user string)

+ func (sv *HMACTokenSignerVerifier) Sign() (string, error)

+ func (sv *HMACTokenSignerVerifier) Verify(tokenString string) (*AdminClaims, error)

+ type JWTAdminCookiePrincipalGetter struct

+ func (pg *JWTAdminCookiePrincipalGetter) Principal(r *http.Request) (*UserPrincipal, error)

+ type LoginRequest struct

+ Password string

+ Username string

type OIDCConfig

+ TokenDuration time.Duration

+ func NewOIDCConfigFromSecret(secret corev1.Secret) OIDCConfig

type PrincipalGetter

+ func NewJWTAdminCookiePrincipalGetter(log logr.Logger, verifier TokenSignerVerifier, cookieName string) PrincipalGetter

+ type TokenSigner interface

+ Sign func() (string, error)

+ type TokenSignerVerifier interface

+ type TokenVerifier interface

+ Verify func(token string) (*AdminClaims, error)

+ type UserInfo struct

+ Email string

+ Groups []string

v0.7.0-rc9

Apr 4, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc8

Apr 1, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc7

Mar 30, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc5

Mar 28, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc4

Mar 28, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc3

Mar 28, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc2

Mar 25, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc13

Apr 12, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc12

Apr 12, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc11

Apr 5, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc10

Apr 4, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-rc1

Mar 24, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.7.0-patch1

Apr 20, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.6.2

Jan 25, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.6.2-patch2

Mar 2, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

v0.6.1

Jan 20, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

Changes in this version

+ const IDTokenCookieName

+ const RefreshTokenCookieName

+ const StateCookieName

+ func RegisterAuthServer(mux *http.ServeMux, prefix string, srv *AuthServer)

+ func WithAPIAuth(next http.Handler, srv *AuthServer) http.Handler

+ func WithPrincipal(ctx context.Context, p *UserPrincipal) context.Context

+ func WithWebAuth(next http.Handler, srv *AuthServer) http.Handler

+ type AuthConfig struct

+ type AuthServer struct

+ func NewAuthServer(ctx context.Context, logger logr.Logger, client *http.Client, ...) (*AuthServer, error)

+ func (c *AuthServer) ServeHTTP(rw http.ResponseWriter, r *http.Request)

+ func (c *AuthServer) SetRedirectURL(url string)

+ type CookieConfig struct

+ CookieDuration time.Duration

+ IssueSecureCookies bool

+ type JWTAuthorizationHeaderPrincipalGetter struct

+ func (pg *JWTAuthorizationHeaderPrincipalGetter) Principal(r *http.Request) (*UserPrincipal, error)

+ type JWTCookiePrincipalGetter struct

+ func (pg *JWTCookiePrincipalGetter) Principal(r *http.Request) (*UserPrincipal, error)

+ type MultiAuthPrincipal []PrincipalGetter

+ func (m MultiAuthPrincipal) Principal(r *http.Request) (*UserPrincipal, error)

+ type OIDCConfig struct

+ ClientID string

+ ClientSecret string

+ IssuerURL string

+ RedirectURL string

+ type PrincipalGetter interface

+ Principal func(r *http.Request) (*UserPrincipal, error)

+ func NewJWTAuthorizationHeaderPrincipalGetter(log logr.Logger, verifier *oidc.IDTokenVerifier) PrincipalGetter

+ func NewJWTCookiePrincipalGetter(log logr.Logger, verifier *oidc.IDTokenVerifier, cookieName string) PrincipalGetter

+ type SessionState struct

+ Nonce string

+ ReturnURL string

+ type UserPrincipal struct

+ Groups []string

+ ID string

+ func Principal(ctx context.Context) *UserPrincipal

v0.6.1-rc1

Jan 20, 2022 GO-2022-0502 +2 more

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL