10 Commits

Author	SHA1	Message	Date
John Gardiner Myers	fdc61b4bdb	Rename the service account key	2021-04-11 08:11:27 -07:00
Ole Markus With	397f58deb4	Fix comments from review	2021-03-19 20:51:18 +01:00
Ole Markus With	5178571db5	Comment where the CA sha1s come from	2021-03-19 20:07:57 +01:00
Ole Markus With	1900548213	Upload JWKS files as world readable	2021-03-19 20:07:38 +01:00
Ole Markus With	2c1f88f40e	Do not need thumbprints to be resources	2021-03-19 20:05:37 +01:00
Ole Markus With	ed166313d2	Use well-known s3 fingerprints	2021-03-19 20:03:28 +01:00
Peter Rifel	7c900b7fae	Generate and upload keys.json + discovery.json to public store ... Generate and upload keys.json + discovery.json to public store Don't enable anonymous auth on publicjwks Remove tests that won't work using FS VFS anymore	2021-03-19 20:03:26 +01:00
Peter Rifel	d52fd9f76c	Add tagging support to AWS Instance Profiles and OIDC Providers	2021-02-15 16:48:43 -06:00
John Gardiner Myers	4f5def8610	Address review comment	2020-12-03 23:24:43 -08:00
Justin SB	786423f617	Expose JWKS via a feature-flag ... When the PublicJWKS feature-flag is set, we expose the apiserver JWKS document publicly (including enabling anonymous access). This is a stepping stone to a more hardened configuration where we copy the JWKS document to S3/GCS/etc. Co-authored-by: John Gardiner Myers <jgmyers@proofpoint.com>	2020-08-30 10:15:11 -04:00