Mariano Cano
abe8443629
Update certificates and addapt api.
2020-01-28 13:34:00 -08:00
Mariano Cano
4d7f26a754
Add identity certificate support to ssh login and certificate.
2020-01-28 13:34:00 -08:00
max furman
05158c51e9
ssh certificate nil principals for OIDC
...
* only when there are no explicit principals requested.
2020-01-28 13:33:59 -08:00
max furman
c66ae0e9cf
Add multiuse token capability to k8sSA tokens
...
* adding ssh capability
2020-01-28 13:33:59 -08:00
max furman
b8d289b654
sshpop provisioner + ssh renew | revoke | rekey
2020-01-28 13:33:59 -08:00
Mariano Cano
65be323944
Rename SSH methods.
2020-01-28 13:33:59 -08:00
Mariano Cano
7433fc0035
Use sshutil.Agent.
...
Move flag variable to ssh.go
2020-01-28 13:33:59 -08:00
max furman
e097873f95
Add a few examples with nbf and naf to ssh cert examplew
2019-09-13 14:29:04 -07:00
max furman
6aefd9fa6b
Set lifetime for ssh certs added to agent
...
* Fixes #142
2019-09-12 16:08:09 -07:00
max furman
01564f6a7e
Changes based on SSH CA PR Review
...
* Use global flags rather than flags local to the CA package.
* Alphabetize flag names so they're easier to parse for humans.
* Fix some documentation snafus.
* crt -> cert where possible. At least for internal naming. Not gonna
change JSON req/resp bodies b/c that would affect clients.
2019-09-09 13:08:25 -07:00
Sebastian Tiedtke
5a8c65510a
Help edits to limit scope to CA issuing certs and how to use them
2019-09-06 09:43:49 -07:00
Mariano Cano
59fa1ba3f8
Update examples.
2019-09-06 00:02:12 +02:00
Mariano Cano
49579b9969
Rename command to step ssh certificate
2019-08-14 16:33:53 -07:00
Mariano Cano
0759276702
Refactor common code between ssh and ca to cautils and flags.
2019-08-14 15:46:05 -07:00
Mariano Cano
99e5cb985f
Move ssh code to new package
2019-08-14 13:02:03 -07:00