* Add docker build for java-spiffe-helper container
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Adopt JDK has been deprecated in favor of temurin
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Push image after build
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Remove build on pull request and fix image tag
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Set user non-root, add separate stage for gradle dependencies and version to gradle properties
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Fix entrypoint
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Add example config and default container command
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Revert changes to gradle workflow and rename container build workflow
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Pin gradle builder image version
Co-authored-by: Ryan Turner <rturner3@users.noreply.github.com>
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Add buildx action
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Use github variable in image tag
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Add Qemu
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Login before push
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Adopt JDK has been deprecated in favor of temurin
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Remove build on pull request and fix image tag
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Revert changes to gradle workflow and rename container build workflow
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Use new properties example file
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
* Minor improvements according to PR comments
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
---------
Signed-off-by: Moritz Schmitz von Hülst <moritz.schmitz@oviva.com>
Co-authored-by: Ryan Turner <rturner3@users.noreply.github.com>
Improve how the SpiffeTrustManager is configured to either validate SPIFFE IDs or acceptAny.
Validate the SslContextOptions.
Add visibility to some validation errors by logging warnings.
Improve log of the X509Source update.
Improve Spiffe Provider README.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
Add to README instruction to add the maven and gradle dependencies.
Minor additions to gradle build configs.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
- refactor methods for creating JwtSource and X509Source instances
- completing and clarifying javadocs
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
- replace private key format and algorithm guessing by parameters
- refactor a few ifs to switch case
- add spiffeid and trust domain validations and tests
- remove all imports wildcards
- other minor changes to improve quality
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
Add gradle task to copy generated jars artifacts to a common folder.
Add travis config to deploy the jars.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>