Prepare the v0.12 release branch for v0.12.2 #2183

Merged

azdagron merged 77 commits intospiffe:v0.12from

azdagron:v0.12.2-cherry-picks

Mar 31, 2021

Commits on Mar 23, 2021

Set TLS 1.2 minimum for all endpoints
Andrew Harding
committed
Return an error if an SDS client asks for resources that don't exist.

JonathanO
authored and
Andrew Harding
committed
Please the linter.

JonathanO
authored and
Andrew Harding
committed
Code review fixes.

authored and
Andrew Harding
committed
Log errors in failed user/group name lookup in unix workload attestor

Ryan Turner
authored and
Andrew Harding
committed
Fix capitalization of logs

Ryan Turner
authored and
Andrew Harding
committed
Test that logs are emitted from unix workload attestor plugin

Ryan Turner
authored and
Andrew Harding
committed
Implement the readiness endpoint for health checking

ryysud
authored and
Andrew Harding
committed
Remove the checking_readiness_interval parameter

ryysud
authored and
Andrew Harding
committed
Avoid the gRPC connection leaks in the health system

ryysud
authored and
Andrew Harding
committed
Update the bind_port in the health_checks block example

ryysud
authored and
Andrew Harding
committed
Fix suites/k8s-reconcile

ryysud
authored and
Andrew Harding
committed
Address PR comments

ryysud
authored and
Andrew Harding
committed

Commits on Mar 24, 2021

adds a 30 seconds timeout to keymanager plugin calls

kunzimariano
authored and
Andrew Harding
committed
Report uptime as metrics for spire server and agent with config (#2032)

hixichen
authored and
Andrew Harding
committed
Return an error when having an expired SVID when rotating the agent SVID (#2065)

amartinezfayo
authored and
Andrew Harding
committed
Fix error tracking for entry cache telemetry
Andrew Harding
committed
Fix Vault token auth bug (#2110)

Tomoya Usami
authored and
Andrew Harding
committed
Fixes #2026 - thanks @caleblloyd!

Ben Leggett
authored and
Andrew Harding
committed
Issue #2026 - Unit tests

Ben Leggett
authored and
Andrew Harding
committed
Clarify docs

Ben Leggett
authored and
Andrew Harding
committed
Review comment - map is there to prevent dupes

Ben Leggett
authored and
Andrew Harding
committed
Comment wording was unnecessarily confusing

Ben Leggett
authored and
Andrew Harding
committed
show selectors

inajob
authored and
Andrew Harding
committed
fixup! show selectors

inajob
authored and
Andrew Harding
committed
Expose a configuration to disable rate limiting on JWT signing and X509 signing (#2142)

amartinezfayo
authored and
Andrew Harding
committed
Use SPIRE to rotate webhook certificates

Faisal Memon
authored and
Andrew Harding
committed
Stop using previous object for patch

Faisal Memon
authored and
Andrew Harding
committed
Add missing mutating webhook patches

Faisal Memon
authored and
Andrew Harding
committed
Collapse ConfigMap

Faisal Memon
authored and
Andrew Harding
committed
fix watcher

Faisal Memon
authored and
Andrew Harding
committed
Run gofmt

Faisal Memon
authored and
Andrew Harding
committed
Make watcher dynamically configurable

Faisal Memon
authored and
Andrew Harding
committed
minor cleanup

Faisal Memon
authored and
Andrew Harding
committed
Fix test and lint errors

Faisal Memon
authored and
Andrew Harding
committed
Add first unit test

Faisal Memon
authored and
Andrew Harding
committed
unit test, cleanup watcher

Faisal Memon
authored and
Andrew Harding
committed
Move watcher to its own file

Faisal Memon
authored and
Andrew Harding
committed
Fix unit test failures

Faisal Memon
authored and
Andrew Harding
committed
Fix linter errors

Faisal Memon
authored and
Andrew Harding
committed
More unit tests, some cleanup

Faisal Memon
authored and
Andrew Harding
committed
Restore some comments that shouldn't have been removed

Faisal Memon
authored and
Andrew Harding
committed
Add unit test, more cleanup

Faisal Memon
authored and
Andrew Harding
committed
Fix race conditions

Faisal Memon
authored and
Andrew Harding
committed
Update docs

Faisal Memon
authored and
Andrew Harding
committed
Fix docs typo

Faisal Memon
authored and
Andrew Harding
committed
Change config from webhook_label to label to make it more generic

Faisal Memon
authored and
Andrew Harding
committed
Fix race condition in TestBundleWatcherUpdateConfig test

Faisal Memon
authored and
Andrew Harding
committed
Fix race condition in TestBundleWatcherAddEvent, rename watcherEvent

Faisal Memon
authored and
Andrew Harding
committed
Lock to RWLock

authored and
Andrew Harding
committed
Continue updating bundles if one gets error

Faisal Memon
authored and
Andrew Harding
committed
Fix unit test errors

Faisal Memon
authored and
Andrew Harding
committed
Remove start/stop pattern

Faisal Memon
authored and
Andrew Harding
committed
Remove validWatcherPresent bool

Faisal Memon
authored and
Andrew Harding
committed
Some cleanup

Faisal Memon
authored and
Andrew Harding
committed
label -> webhook_label

authored and
Andrew Harding
committed
label -> webhook_label part 2

Faisal Memon
authored and
Andrew Harding
committed
Fix setConfig error handling

Faisal Memon
authored and
Andrew Harding
committed
Update docs for webhook_label

Faisal Memon
authored and
Andrew Harding
committed
Fix setConfig ordering

Faisal Memon
authored and
Andrew Harding
committed
Aggregate errors

Faisal Memon
authored and
Andrew Harding
committed
Aggregate error messages, add comment

Faisal Memon
authored and
Andrew Harding
committed
Remove nil watchers

Faisal Memon
authored and
Andrew Harding
committed
Cleanup unit tests

Faisal Memon
authored and
Andrew Harding
committed
Set cancelWatcher to nil after calling it

Faisal Memon
authored and
Andrew Harding
committed
Ignore FailedPrecondition errors

Faisal Memon
authored and
Andrew Harding
committed
Don't log when FailedPrecondition error happens

Faisal Memon
authored and
Andrew Harding
committed
Handle webhook modified case

Faisal Memon
authored and
Andrew Harding
committed
Fix MySQL isolation level for read-modify-write ops
Andrew Harding
committed
change updateAttestedNodes tx type
Andrew Harding
committed
Fix spiffe ID equality

SirNexus
authored and
Andrew Harding
committed
Introduce a new aws_iid plugin configuration option 'use_instance_profile_selectors'.

kgtw
authored and
Andrew Harding
committed
Change config to 'disable_instance_profile_selectors' to maintain backwards functionality.

kgtw
authored and
Andrew Harding
committed
Update aws_iid documentation for disable_instance_profile_selectors config option

kgtw
authored and
Andrew Harding
committed
Update aws_iid documentation with more context around the disable_instance_profile_selectors configuration option

kgtw
authored and
Andrew Harding
committed
Fix wording in documentation for disable_instance_profile_selectors

kgtw
authored and
Andrew Harding
committed
Include the attestor type in the error returned when could not find the node attestor type

amartinezfayo
authored and
Andrew Harding
committed