Commit Graph

39 Commits (9fdef647099dd91b53683bff49e205f16f743a57)

Author SHA1 Message Date
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
max furman 638766c615 wip 3 years ago
Mariano Cano ba918100d0 Use go.step.sm/crypto/jose
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
4 years ago
Mariano Cano e83e47a91e Use sshutil and randutil from go.step.sm/crypto. 4 years ago
Mariano Cano f437b86a7b Merge branch 'cert-templates' into ssh-cert-templates 4 years ago
Mariano Cano c8d225a763 Use x509util from go.step.sm/crypto/x509util 4 years ago
Mariano Cano 9822305bb6 Use only the IID template on IID provisioners.
Use always sshutil.DefaultIIDCertificate and require at least one
principal on IID provisioners.
4 years ago
Mariano Cano aa657cdb4b Use SSHOptions inside provisioner options. 4 years ago
Mariano Cano 6c36ceb158 Add initial template support for iid provisisioners. 4 years ago
Mariano Cano 6c64fb3ed2 Rename provisioner options structs:
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
4 years ago
Mariano Cano 02c4f9817d Set full token payload instead of only the known properties. 4 years ago
Mariano Cano 32646c49bf Add templates support to Azure provisioner. 4 years ago
max furman 1951669e13 wip 4 years ago
Mariano Cano 4e9bff0986 Add support for OIDC multitoken tenants for azure. 4 years ago
Mariano Cano f868e07a76 Allow to use custom principals on cloud provisioners.
Fixes #203
4 years ago
max furman 1cb8bb3ae1 Simplify statuscoder error generators. 4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
Mariano Cano 84ff172093 Add support for backdate to SSH certificates. 4 years ago
max furman 29853ae016 sshpop provisioner + ssh renew | revoke | rekey first pass 4 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
Mariano Cano 396b4222aa Implement validator for ssh keys.
Fixes #100
5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
Mariano Cano 57a529cc1a Allow to enable the SSH CA per provisioner 5 years ago
Mariano Cano a8f4ad1b8e Set default SSH options if no user options are given. 5 years ago
Mariano Cano 18a285e847 Change azure ssh key id. 5 years ago
Mariano Cano aef52e4334 Add support for SSH host certificates in azure. 5 years ago
Mariano Cano f01286bb48 Add support for SSH certificates to OIDC.
Update the interface for all the provisioners.
5 years ago
Mariano Cano 900ab9cc12 Allow custom common names in cloud identity provisioners. 5 years ago
Mariano Cano 6e4a09651a Add comments with links to cloud docs. 5 years ago
Mariano Cano 54d0186d1f Change condition to fail if the length is not the expected. 5 years ago
Mariano Cano cf07c8f4c0 Fix typos. 5 years ago
Mariano Cano 423d505d04 Replace subscriptions with resource groups. 5 years ago
Mariano Cano e0aaa1a577 Use tenant id in azures's provisioner x509 extension. 5 years ago
Mariano Cano 803d81d332 Improve azure unit tests. 5 years ago
Mariano Cano 4c5fec06bf Require TenantID in azure, add some tests. 5 years ago
Mariano Cano 12937c6b75 Remove pkcs7 related variables and structs. 5 years ago
Mariano Cano 6412b1a79b Add first version of Asure support.
Fixes #69
5 years ago
Mariano Cano 70196b2331 Add skeleton for the Azure provisioner.
Related to #69
5 years ago