Skip to content

Conversation

JoshVanL
Copy link
Contributor

@JoshVanL JoshVanL commented Apr 3, 2024

Adds spiffe package to crypto. This is a refactored version of the existing pkg/security package. This new package is more modulated and fuller test coverage.

This package has been moved so that it can be both imported by dapr & components-contrib, as well as making the package more suitable for further development to support X.509 Component auth. dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

@JoshVanL JoshVanL requested review from a team as code owners April 3, 2024 10:16
Adds spiffe package to crypto. This is a refactored version of the
existing `pkg/security` package. This new package is more modulated and
fuller test coverage.

This package has been moved so that it can be both imported by dapr &
components-contrib, as well as making the package more suitable for
further development to support X.509 Component auth.
dapr/proposals#51

Also moves in `test/utils` from dapr to `crypto/test` for shared usage.

Signed-off-by: joshvanl <me@joshvanl.dev>
@codecov-commenter
Copy link

Codecov Report

Attention: Patch coverage is 80.00000% with 52 lines in your changes are missing coverage. Please review.

Project coverage is 79.92%. Comparing base (e33fbab) to head (969bdc7).
Report is 2 commits behind head on main.

Files Patch % Lines
crypto/spiffe/spiffe.go 76.34% 17 Missing and 5 partials ⚠️
crypto/spiffe/trustanchors/file.go 85.27% 16 Missing and 3 partials ⚠️
crypto/spiffe/svidsource.go 0.00% 11 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main      #92      +/-   ##
==========================================
- Coverage   79.93%   79.92%   -0.02%     
==========================================
  Files          56       60       +4     
  Lines        4351     4642     +291     
==========================================
+ Hits         3478     3710     +232     
- Misses        728      778      +50     
- Partials      145      154       +9     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

JoshVanL added a commit to JoshVanL/dapr that referenced this pull request Apr 3, 2024
Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>
Signed-off-by: joshvanl <me@joshvanl.dev>
@yaron2 yaron2 merged commit a3f906d into dapr:main Apr 15, 2024
JoshVanL added a commit to JoshVanL/dapr that referenced this pull request Apr 16, 2024
Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>
JoshVanL added a commit to JoshVanL/dapr that referenced this pull request Apr 23, 2024
Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>
JoshVanL added a commit to JoshVanL/dapr that referenced this pull request May 6, 2024
Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>
JoshVanL added a commit to JoshVanL/dapr that referenced this pull request May 7, 2024
Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>
yaron2 pushed a commit to dapr/dapr that referenced this pull request May 10, 2024
* Refactor SPIFFE from `pkg/security` to `kit`

Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>

* Include SVID context with `Init`ing Component

Signed-off-by: joshvanl <me@joshvanl.dev>

* Adds security to processor options

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update github.com/dapr/dapr to master

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update `util` to new `test` package import

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update go.sum

Signed-off-by: joshvanl <me@joshvanl.dev>

---------

Signed-off-by: joshvanl <me@joshvanl.dev>
cicoyle pushed a commit to cicoyle/dapr that referenced this pull request May 24, 2024
* Refactor SPIFFE from `pkg/security` to `kit`

Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>

* Include SVID context with `Init`ing Component

Signed-off-by: joshvanl <me@joshvanl.dev>

* Adds security to processor options

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update github.com/dapr/dapr to master

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update `util` to new `test` package import

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update go.sum

Signed-off-by: joshvanl <me@joshvanl.dev>

---------

Signed-off-by: joshvanl <me@joshvanl.dev>
elena-kolevska pushed a commit to elena-kolevska/dapr that referenced this pull request Jun 10, 2024
* Refactor SPIFFE from `pkg/security` to `kit`

Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>

* Include SVID context with `Init`ing Component

Signed-off-by: joshvanl <me@joshvanl.dev>

* Adds security to processor options

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update github.com/dapr/dapr to master

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update `util` to new `test` package import

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update go.sum

Signed-off-by: joshvanl <me@joshvanl.dev>

---------

Signed-off-by: joshvanl <me@joshvanl.dev>
Signed-off-by: Elena Kolevska <elena@kolevska.com>
AnnuCode pushed a commit to AnnuCode/dapr that referenced this pull request Aug 7, 2024
* Refactor SPIFFE from `pkg/security` to `kit`

Updates the `pkg/security` package to move the SPIFFE implementation to
a new kit package. This new kit package is more modulated and fuller
test coverage. This package has been moved so that it can be both
imported by dapr & components-contrib, as well as making the package
more suitable for further development to support X.509 Component auth.

dapr/proposals#51

Also moves in test/utils from dapr to crypto/test for shared usage.

Part of dapr/proposals#51

Uses go mod fork of dapr/kit#92

Signed-off-by: joshvanl <me@joshvanl.dev>

* Include SVID context with `Init`ing Component

Signed-off-by: joshvanl <me@joshvanl.dev>

* Adds security to processor options

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update github.com/dapr/dapr to master

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update `util` to new `test` package import

Signed-off-by: joshvanl <me@joshvanl.dev>

* Update go.sum

Signed-off-by: joshvanl <me@joshvanl.dev>

---------

Signed-off-by: joshvanl <me@joshvanl.dev>
Signed-off-by: Annu Singh <annu4444.as@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants