Commit Graph

54 Commits (master)

Author SHA1 Message Date
Mariano Cano 8fafd987ca Use REAMDE.md suggested in code review. 5 years ago
Mariano Cano e852b57870 Delete old autocert 5 years ago
Mariano Cano 167912cfbd Add autocert icons. 5 years ago
Sebastian Tiedtke 3a2ba85126
Flip default for certificate restriction to namespace to false (#60) 5 years ago
Mariano Cano 572bf0de96
Merge branch 'master' into update-docker 5 years ago
Sebastian Tiedtke 840916ae1b
Note about usage instructions 5 years ago
Justin 351c01cf7e Do not allow pods in one namespace to create certificates for hostnames from another namespace. (#54)
* Do not allow pods in one namespace to create certificates for hostnames from another namespace.

* Make cluster domain configurable, clean up shouldMutate() logic, and make namespace restrictions configurable with restrictCertificatesToNamespace.

* Return certificate hostname validation errors in the admission webhook response.

* Appease the gometalinter.
5 years ago
Mariano Cano 760117adf6 Fix links and typos. 5 years ago
Mariano Cano 3b2518a106 Update kubectl version. 5 years ago
Mariano Cano efb2a725a8 Add controller missing dependencies 5 years ago
Mariano Cano 2f661c0941 Update docker images and add docs on how to run step-ca on docker.
Fixes #48
5 years ago
Mariano Cano 83848e9cd3 Fix types in autocert. 5 years ago
Mariano Cano 98b3d971f6
Merge pull request #41 from smallstep/hello-mtls-python
Hello mtls python client + gunicorn server
5 years ago
Mariano Cano f04e6fdff7 Use super().__init__() 5 years ago
Sebastian Tiedtke 009d38ed64 Add gitter button 5 years ago
Mariano Cano 238657ce3a Update readme. 5 years ago
Mariano Cano c0992c717c Add example of a python client
Fixes smallstep/ca-component#139
5 years ago
Mariano Cano b140fe63bd Add a gunicorn server with a flask app using mTLS
Fixes smallstep/ca-component#139
5 years ago
Mariano Cano 1b344d5013 Add comment about fsnotify 5 years ago
Mariano Cano 64cbac4e81 Extract servername from tls connection state. 5 years ago
Mariano Cano 79a030960b Enable client certificate rotation with GetClientCertificate. 5 years ago
Mariano Cano 3ba6e33791 Add a new hello-mTLS example using gRPC in go
Fixes #32
5 years ago
Mariano Cano 852f4ed564 Fix dependency and linter errors. 5 years ago
Mike Malone a775360f10 fixed link 5 years ago
Mike Malone 68eed1bce9 docs updates 5 years ago
Mike Malone 4fe55051a1 updated README and added issue templates for autocert 5 years ago
Mike Malone bb31a1634e readme update and new connect-with-mtls.png 5 years ago
Mike Malone ea23f738cb connect with mtls diagram 5 years ago
Mike Malone 6cb5505026 updated docs 5 years ago
Mike Malone d40911937f updated readme & added runbook 5 years ago
Mariano Cano 2e98febcd9 Add envoy hello mTLS example.
Fixes smallstep/ca-component#144
5 years ago
Mariano Cano 23c60d5f3f Remove unnecessary sleep. 5 years ago
Mariano Cano 14fcf58903 Add client implementation of hello-mTLS using nodejs
Fixes smallstep/ca-component#138
5 years ago
Mariano Cano 8022ed80bc Add node to README.md 5 years ago
Mariano Cano 1197753f35 Add hello-mTLS server example using nodejs.
Fixes smallstep/ca-component#138
5 years ago
Mike Malone 0c53b0f310 rename cluster role & binding to match other binding names 5 years ago
Mike Malone 3a516d92aa check for permissions init autocert deploy script 5 years ago
Mariano Cano 74114a6234 Add hello-mTLS for nginx 5 years ago
Mike Malone e70a5dae7d updated README.md 5 years ago
Mike Malone 32c7be6f9d fixed mtls handshake diagram 5 years ago
Mike Malone 1f68bfe7ad mtls handshake diagram 5 years ago
Mike Malone f58000c28f hello-mtls examples 5 years ago
Mike Malone 8e1505d03f new diagrams 5 years ago
Mike Malone 0fabc06fbb new demo gif 5 years ago
Mike Malone 2c2f390e66 logo 5 years ago
Mike Malone 0bab651a52 architecture diagram rev'd 5 years ago
Mike Malone c8ebacb8b7 architecture diagram 5 years ago
Mike Malone 1fe5612027 README updates 5 years ago
Mike Malone 2c91f1d2fc fixed autocert-init command 5 years ago
Mike Malone d61c2ac3dd autocert-init for setup 5 years ago