Files
teleport/integrations
Noah Stride 6922aa0b50 Workload Identity: Kubernetes Workload Attestation (#44209)
* Start hacking on resolving pod/container id from pid

* Add godoc comments

* Tidy attestation into well defined types

* Use gopsutil to determine gid/uid on unix systems

* Start threading through config

* Update tests

* Start working TLS support into kubelet api client

* Thread through configuration to yaml

* Support loading the CA

* Start testing with real cluster/bug fixes

* Simplify by removing container lookup

* Add new attestation rules/tests for new attestation rules

* Add test that leverages example mountfiles

* Start handling kubelet client auth more elegantly

* Add handling of custom CA values

* Tie together configuration validation

* Update YAML tests

* Go mod/sum

* Ensure we use the Effective UID/GID rather than "Real" UID/GID in Unix attestation

* Add testdata from GCP

* Add test of Kubernetes attestation with mock kubelet API

* Add test for UnixAttestor

* Update YAML goldenfile

* Appease liinter

* Remove change to session.go

* Add timeout to Kubelet client

* Import `time`

* Go mod tidy

* Go mod tidy

* Remove TODO about renaming

* Rename attestor -> attestors

* Add stubs on windows

* Add missing license header
2024-07-31 14:34:42 +00:00
..
2024-04-10 18:15:43 +00:00