Commit Graph

161 Commits (d981b9e0dc5cf1d430a4c5db3f1c8a8e0d05c265)

Author SHA1 Message Date
Herman Slatman d981b9e0dc
Add `--admin-subject` flag to `ca init`
The first super admin subject can now be provided through the
`--admin-subject` flag when initializing a CA.

It's not yet possible to configure the subject of the first
super admin when provisioners are migrated from `ca.json` to the
database. This effectively limits usage of the flag to scenarios
in which the provisioners are written to the database immediately,
so when `--remote-management` is enabled. It currently also doesn't
work with Helm deployments, because there's no mechanism yet to
pass this type of option to the Helm chart.

This commit partially addresses https://github.com/smallstep/cli/issues/697
2 years ago
Herman Slatman 674206320c
Write updated CA configuration after migrating provisioners 2 years ago
Herman Slatman c9ee4a9f9d
Disable initialization log output if started with `--quiet` 2 years ago
Herman Slatman cebb7d7ef0
Add automatic migration of provisioners
Provisioners stored in the CA configuration file are
automatically migrated to the database.

Currently no cleanup of the provisioners in the
configuration file yet. In certain situations this
may not work as expected, for example if the CA can't
write to the file. But it's probalby good to try it, so
that we can keep the configuration state of the CA consistent.
2 years ago
Andrew Reed 7101fbb0ee
Provisioner webhooks (#1001) 2 years ago
Mariano Cano 965d59c0a8 Fix comment typos and extra white spaces 2 years ago
Mariano Cano 23045e1812 Clarify comments by code review 2 years ago
Mariano Cano 325d8bca4f Merge branch 'master' into name-constraints 2 years ago
Mariano Cano debe565e42 Validate constraints on Sign and Renew/Rekey
Fixes #1060
2 years ago
max furman ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2 years ago
Mariano Cano 2a15e3eee1 Rename constraint.Service to constraint.Engine 2 years ago
Mariano Cano 0c7467ceb2 Allow to automatically configure and linked RA 2 years ago
Mariano Cano 369b8f81c3 Use go.step.sm/crypto/kms
Fixes #975
2 years ago
Mariano Cano 9408d0f24b Send RA provisioner information to the CA 2 years ago
Mariano Cano 94f5b92513 Use proper context in authority package 2 years ago
Mariano Cano 26dd97e718 Merge branch 'master' into context-authority 2 years ago
Max f8148071fb
Merge pull request #915 from smallstep/max/removing-beta
exposing authority configuration for provisioner cli commands
2 years ago
max furman 25b8d196d8 Couple changes in response to PR
- add skipInit option to skip authority initialization
- check admin API status when removing provisioners - no need to check
  admins when not using Admin API
2 years ago
Mariano Cano 8942422973 Add GetID() and add authority to initial context 2 years ago
Mariano Cano d461918eb0 Merge branch 'master' into context-authority 2 years ago
max furman 4cb74e7d8b fix linter warnings 2 years ago
Mariano Cano 48e2fabeb8 Add authority.MustFromContext 2 years ago
Mariano Cano 9628fa3562 Add methods to store and retrieve an authority from the context. 2 years ago
Herman Slatman 6e1f8dd7ab
Refactor policy engines into container 2 years ago
max furman b91affdd34 exposing authority configuration for provisioner cli commands 2 years ago
Herman Slatman 3eecc4f7bb
Improve test coverage for reloadPolicyEngines 2 years ago
Herman Slatman 9797b3350e
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano b7e11da480 Merge branch 'master' into feat/linkedra 2 years ago
Herman Slatman 034b7943fe
Merge branch 'master' into herman/allow-deny 2 years ago
Carl Tashian 150eee70df Updates based on Herman's feedback 2 years ago
Carl Tashian 43f2c655b9 More info on startup 2 years ago
Herman Slatman 96f4c49b0c
Improve how policy errors are returned and used 2 years ago
Herman Slatman 571b21abbc
Fix (most) PR comments 2 years ago
Carl Tashian 1ba1584c7a Formatted. 2 years ago
Carl Tashian a13e58e340 Update GetAuthorityInfo -> GetInfo 2 years ago
Carl Tashian 90cb6315b1 Progress. 2 years ago
Carl Tashian 055e75f394 Progress? 2 years ago
Herman Slatman 0e052fe299
Add authority policy API 2 years ago
Mariano Cano 580a9c1476 Get linked RA configuration using the linked ca client. 2 years ago
Herman Slatman dc23fd23bf
Merge branch 'master' into herman/allow-deny-next 2 years ago
Carl Tashian 25cc9a1728
Update authority/authority.go
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2 years ago
Carl Tashian baf3c40fef Print some basic configuration info on startup 2 years ago
Herman Slatman 101ca6a2d3
Check admin subjects before changing policy 2 years ago
Herman Slatman 81b0c6c37c
Add API implementation for authority and provisioner policy 2 years ago
Mariano Cano 79349b4d7c Add options to use custom renewal methods. 2 years ago
Herman Slatman 7c541888ad
Refactor configuration of allow/deny on authority level 2 years ago
max furman a79d4af19b change return value of generateProvisionerConfig to value
- always used as value (rather than pointer)
2 years ago
Mariano Cano d384b534c7
Merge pull request #814 from smallstep/x509-enforcer
Authority enforcer option
2 years ago
Mariano Cano 300c19f8b9 Add a custom enforcer that can be used to modify a cert. 2 years ago
Herman Slatman 64680bb16d
Fix PR comments 2 years ago