Jonathan Christison
c9bf460cad
Now SA has been extended with oshwrapper pull secret switch to it for
...
testing
3 years ago
Jonathan Christison
91d7911338
Link osh SA created by quarkus with osh-wrapper-client-pull secrets
3 years ago
Jonathan Christison
4a4892c9ba
Remove service account declartion in application properties
...
This didn't work, altered RBAC to bind to osh SA instead
3 years ago
Jonathan Christison
e773802b00
Move to hack dir
...
This is a pipelineRun which will be ran from the quarkus app so it
shouldn't be deployed as part of the deployment proccess which is why
k8's dir exists
3 years ago
Jonathan Christison
7c674c215c
Link to the osh-wrapper client service account
3 years ago
Jonathan Christison
23499fd7e8
Bind existing SA and tekton role
3 years ago
Jonathan Christison
b39b28dc65
Clean up of yaml files before kustomization
...
See
a9d9ca49bf
for the original repo these are ported from
3 years ago
Nicholas Caughey
5c3671a2c6
fixed every warning from quarkus except the split package issue which can be tracked with issue#4
3 years ago
Nicholas Caughey
641bac76cb
fixing duplicate dependencys
3 years ago
Nicholas Caughey
1d97dcbbdb
add docker file to k8
3 years ago
Nicholas Caughey
4559146ad1
Merge branch 'openshift_inject_rte_fix' into 'main'
...
Fix problem with openshift deploy and jakarta injection
See merge request pct-security/covscanrest!8
3 years ago
Jonathan Christison
02c461395c
Fix problem with openshift deploy and jakarta injection
3 years ago
Nicholas Caughey
12f983cd22
Merge branch 'local_dev_fixes' into 'main'
...
Disable Kerberos and other Auths in dev profile
See merge request pct-security/covscanrest!7
3 years ago
Jonathan Christison
9d76e78393
Disable Kerberos and other Auths in dev profile
...
Added a /ping endpoint to return "pong", this should help test auth
If in dev:
* Disables kerberos specific endpoint (runtime injection issues)
* Disable Security altogether
3 years ago
Nicholas Caughey
865c628bb2
fixed the pom and other issues from a bad merge
3 years ago
Nicholas Caughey
c0b2f78719
Merge branch 'brewbuild' into 'main'
...
added the brewnvr innvocation
See merge request pct-security/covscanrest!6
3 years ago
Nicholas Caughey
e35882520f
added the brewnvr innvocation
3 years ago
Nicholas Caughey
f7853db788
Merge branch 'exception_work' into 'main'
...
Exception work
See merge request pct-security/covscanrest!5
3 years ago
Nicholas Caughey
275014b89a
Merge branch 'main' into 'exception_work'
...
# Conflicts:
# pom.xml
# src/main/java/rest/CreateScanRequest.java
# src/main/java/rest/CreateScanResource.java
# src/main/java/rest/CreateStartScan.java
# src/main/java/rest/StoreData.java
3 years ago
Nicholas Caughey
5ec9e2392f
Merge branch 'db_schema' into 'main'
...
Db schema
See merge request pct-security/covscanrest!2
3 years ago
Nicholas Caughey
5246c2f604
Merge branch 'main' into 'db_schema'
...
# Conflicts:
# pom.xml
# src/main/java/dto/BrewObj.java
# src/main/java/dto/BrewObjPayload.java
# src/main/java/dto/ConnectDB.java
# src/main/java/dto/GitObj.java
# src/main/java/dto/GitObjPayload.java
# src/main/java/dto/PncObj.java
# src/main/java/dto/PncObjPayload.java
# src/main/java/dto/ScanObj.java
# src/main/java/dto/ScanObjPayload.java
# src/main/java/rest/CreateGetResource.java
# src/main/java/rest/CreateScanRequest.java
# src/main/java/rest/CreateScanResource.java
# src/main/java/rest/CreateStartScan.java
# src/main/java/rest/RemoveScan.java
# src/main/resources/application.properties
3 years ago
Nicholas Caughey
5de2051b86
updated exceptions to throw on unimplemented fu nctionality
3 years ago
Nicholas Caughey
0173d5e9bc
added exceptions to unimplemented code
3 years ago
Nicholas Caughey
2f043bacc3
update tekton
3 years ago
Nicholas Caughey
39cd02490e
added the missing file for creating tasks from scratch
3 years ago
Nicholas Caughey
4c21442cbe
moved the baseScan yaml to the correct folder
3 years ago
Nicholas Caughey
76f5978777
error in the yaml
3 years ago
Nicholas Caughey
a71996607c
contians the files for testing createoing tekton tasks
3 years ago
Nicholas Caughey
1c1007b811
changing the groupid to be associated with the project
3 years ago
Nicholas Caughey
0d7678a990
Merge branch 'kerberos_auth' into 'main'
...
Add Kerberos support for REST Clients
See merge request pct-security/covscanrest!3
3 years ago
Jonathan Christison
fa4ea264e2
Add a comment on how the file was created
3 years ago
Jonathan Christison
e755fe945c
Use edge TLS termination
...
Quarkus < 3.x doesn't support some of the route options, we need to
apply this YAML instead and disable auto route enable
still todo, combine yaml's into one for easier oc apply -f <COMBINED> or
have quarkus apply the snippets for us
3 years ago
Jonathan Christison
c15a0c5ee1
Add example deploy and set TLS to edge
3 years ago
Jonathan Christison
b1942b512a
Change kerberos settings
3 years ago
Jonathan Christison
e3fcecac06
Change to osh rather than osh-stage
...
Kerberos is tied to `osh-pct-security-tooling.apps.ocp-c1.prod.psi.redhat.com` not `osh-stage-pct-security-tooling.apps.ocp-c1.prod.psi.redhat.com`
3 years ago
Jonathan Christison
2e38ec0461
Add krb5.conf to container as config map
3 years ago
Jonathan Christison
4526231088
Secure volume mount example
3 years ago
Jonathan Christison
1081288418
Hacky attempt at adding DB Dev services for local development
3 years ago
Leonid Bossis
63fef64f31
checkpoint #2
3 years ago
Leonid Bossis
a178a7fc18
add logging facility
3 years ago
Leonid Bossis
8975fff63d
change db table field names from mixed naming convention to pythonic convention xxx_yyy_zzz and stop using CamelCase
3 years ago
Leonid Bossis
c61e6fb0f6
checkpoint #1
3 years ago
jperezde
fee2bd340f
Added Kerberos auth to methods
3 years ago
jperezde
1ab0639941
Test keytab
3 years ago
jperezde
af4a80b04a
Added Kerberos dependency
3 years ago
Leonid Bossis
c6385a7544
First changes after code review, making use of prepared statements, code cleanup
3 years ago
jperezde
d3e2990851
Modified application.properties
3 years ago
jperezde
94d72b95c8
Added kerberos dependendency in pom.xml
3 years ago
jperezde
22c0be081b
Test install Kerberos
3 years ago
jperezde
6df7da6c10
Test Dependency
3 years ago