-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Workload Identity: Kubernetes Workload Attestation (#44209)
* Start hacking on resolving pod/container id from pid * Add godoc comments * Tidy attestation into well defined types * Use gopsutil to determine gid/uid on unix systems * Start threading through config * Update tests * Start working TLS support into kubelet api client * Thread through configuration to yaml * Support loading the CA * Start testing with real cluster/bug fixes * Simplify by removing container lookup * Add new attestation rules/tests for new attestation rules * Add test that leverages example mountfiles * Start handling kubelet client auth more elegantly * Add handling of custom CA values * Tie together configuration validation * Update YAML tests * Go mod/sum * Ensure we use the Effective UID/GID rather than "Real" UID/GID in Unix attestation * Add testdata from GCP * Add test of Kubernetes attestation with mock kubelet API * Add test for UnixAttestor * Update YAML goldenfile * Appease liinter * Remove change to session.go * Add timeout to Kubelet client * Import `time` * Go mod tidy * Go mod tidy * Remove TODO about renaming * Rename attestor -> attestors * Add stubs on windows * Add missing license header
- Loading branch information
1 parent
57fbdc6
commit 6922aa0
Showing
22 changed files
with
1,505 additions
and
64 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.