Skip to content

Commit 8b50004

Browse files
fiddlermikeyfiddlermikey
authored
Merge pull request #31 from Keyfactor/checksum-build-action
role domain fix, cleanup
2 parents 8f3e7d6 + 63d688e commit 8b50004

32 files changed

+1101
-147
lines changed

‎.github/dependabot.yml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
# See GitHub's documentation for more information on this file:
2+
# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
3+
version: 2
4+
updates:
5+
- package-ecosystem: "github-actions"
6+
directory: "/"
7+
schedule:
8+
interval: "daily"
9+
- package-ecosystem: "gomod"
10+
directory: "/"
11+
schedule:
12+
interval: "daily"

‎.github/images/kf_logo.png

3.52 KB
Loading

‎.github/workflows/keyfactor-starter-workflow.yml

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
name: Keyfactor Bootstrap Workflow
2+
3+
on:
4+
workflow_dispatch:
5+
pull_request:
6+
types: [opened, closed, synchronize, edited, reopened]
7+
push:
8+
create:
9+
branches:
10+
- 'release-*.*'
11+
12+
jobs:
13+
call-starter-workflow:
14+
uses: keyfactor/actions/.github/workflows/starter.yml@v2
15+
secrets:
16+
token: ${{ secrets.V2BUILDTOKEN}}
17+
APPROVE_README_PUSH: ${{ secrets.APPROVE_README_PUSH}}
18+
gpg_key: ${{ secrets.KF_GPG_PRIVATE_KEY }}
19+
gpg_pass: ${{ secrets.KF_GPG_PASSPHRASE }}

‎.gitignore

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,10 @@
11
.vs/*
2-
vaultSecretsEngine-update.zip
2+
*.zip
33
vault/plugins/*
4+
*.sh
45
*.exe
6+
keyfactor
7+
Keyfactor Vault Secrets Engine Guide.docx
8+
Makefile
9+
sample_config.json
10+
README.md

‎.goreleaser.yml

Lines changed: 93 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,93 @@
1+
# Visit https://goreleaser.com for documentation on how to customize this
2+
# behavior.
3+
before:
4+
hooks:
5+
# this is just an example and not a requirement for provider building/publishing
6+
- go mod tidy
7+
builds:
8+
- env:
9+
# goreleaser does not work with CGO, it could also complicate
10+
# usage by users in CI/CD systems like Terraform Cloud where
11+
# they are unable to install libraries.
12+
- CGO_ENABLED=0
13+
mod_timestamp: '{{ .CommitTimestamp }}'
14+
flags:
15+
- -trimpath
16+
ldflags:
17+
- '-s -w -X main.version={{.Version}} -X main.commit={{.Commit}}'
18+
goos:
19+
- freebsd
20+
- windows
21+
- linux
22+
- darwin
23+
goarch:
24+
- amd64
25+
- '386'
26+
- arm
27+
- arm64
28+
ignore:
29+
- goos: darwin
30+
goarch: '386'
31+
- goos: freebsd
32+
goarch: 'arm64'
33+
binary: 'keyfactor'
34+
id: "keyfactor"
35+
main: './cmd/keyfactor'
36+
hooks:
37+
post:
38+
# - cmd: sh -c "echo $(echo -n '{{split .Target "_"}}'; echo -ne "\t"; sha256sum {{.Path}} | cut -d ' ' -f 1,2) >> binary_checksums.txt"
39+
- cmd: sh -c "echo $(echo -n '{{.Os}} '; echo -n '{{.Arch}} '; sha256sum {{.Path}} | cut -d ' ' -f 1,2) >> binary_checksums.txt"
40+
dir: './dist'
41+
archives:
42+
- format: zip
43+
name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
44+
checksum:
45+
name_template: '{{ .ProjectName }}.{{ .Version }}.sha256'
46+
algorithm: sha256
47+
signs:
48+
- artifacts: checksum
49+
args:
50+
# if you are using this in a GitHub action or some other automated pipeline, you
51+
# need to pass the batch flag to indicate its not interactive.
52+
- "--batch"
53+
- "--local-user"
54+
- "{{ .Env.GPG_FINGERPRINT }}" # set this environment variable for your signing key
55+
- "--output"
56+
- "${signature}"
57+
- "--detach-sign"
58+
- "${artifact}"
59+
release:
60+
prerelease: auto
61+
extra_files:
62+
- glob: 'installation.txt'
63+
- glob: 'LICENSE.txt'
64+
- glob: './dist/binary_checksums.txt'
65+
# If you want to manually examine the release before its live, uncomment this line:
66+
draft: true
67+
changelog:
68+
sort: asc
69+
use: github
70+
filters:
71+
exclude:
72+
- '^test:'
73+
- '^chore'
74+
- 'merge conflict'
75+
- Merge pull request
76+
- Merge remote-tracking branch
77+
- Merge branch
78+
- go mod tidy
79+
groups:
80+
- title: Dependency updates
81+
regexp: "^.*(feat|fix)\\(deps\\)*:+.*$"
82+
order: 300
83+
- title: 'New Features'
84+
regexp: "^.*feat[(\\w)]*:+.*$"
85+
order: 100
86+
- title: 'Bug fixes'
87+
regexp: "^.*fix[(\\w)]*:+.*$"
88+
order: 200
89+
- title: 'Documentation updates'
90+
regexp: "^.*docs[(\\w)]*:+.*$"
91+
order: 400
92+
- title: Other work
93+
order: 9999

‎.vscode/settings.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"files.associations": {
3+
"*.yaml": "home-assistant"
4+
}
5+
}

‎CHANGELOG.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
- 1.3.1
2+
- Fix for issue where plugin was not enforcing plugin-side role limitations for AllowedDomains and AllowSubDomains, and was relying exclusively on the certificate template for these values.
3+
4+
- 1.3.0
5+
- Fix for double encoding certificates when viewed in the terminal.
6+
7+
- 1.2.0
8+
- Updated the plugin to use it's own internal configuration settings storage per instance.
9+
10+
- 1.1.0
11+
- added subject parameters to certificate enrollment
12+
- now defaulting to role values for subject parameters if not provided.
13+
14+
- 1.0.1
15+
- This release fixes a bug where the CA logical name was not being URL encoded before sending the request to Keyfactor.
16+
17+
- 1.00
18+
- initial release

‎Keyfactor Vault Secrets Engine Guide.docx

-29.7 KB
Binary file not shown.

‎LICENSE.txt

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
Copyright 2024 Keyfactor
2+
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
3+
You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
4+
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS,
5+
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions
6+
and limitations under the License.

‎Makefile

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
1+
BINARY = "keyfactor"
2+
VERSION = "v1.3.1"
3+
14
GOARCH = amd64
25

36
UNAME = $(shell uname -s)
@@ -31,4 +34,20 @@ clean:
3134
fmt:
3235
go fmt $$(go list ./...)
3336

37+
38+
release:
39+
GOOS=darwin GOARCH=amd64 go build -o ./bin/${BINARY}_${VERSION}_darwin_amd64
40+
GOOS=freebsd GOARCH=386 go build -o ./bin/${BINARY}_${VERSION}_freebsd_386
41+
GOOS=freebsd GOARCH=amd64 go build -o ./bin/${BINARY}_${VERSION}_freebsd_amd64
42+
GOOS=freebsd GOARCH=arm go build -o ./bin/${BINARY}_${VERSION}_freebsd_arm
43+
GOOS=linux GOARCH=386 go build -o ./bin/${BINARY}_${VERSION}_linux_386
44+
GOOS=linux GOARCH=amd64 go build -o ./bin/${BINARY}_${VERSION}_linux_amd64
45+
GOOS=linux GOARCH=arm go build -o ./bin/${BINARY}_${VERSION}_linux_arm
46+
GOOS=openbsd GOARCH=386 go build -o ./bin/${BINARY}_${VERSION}_openbsd_386
47+
GOOS=openbsd GOARCH=amd64 go build -o ./bin/${BINARY}_${VERSION}_openbsd_amd64
48+
GOOS=solaris GOARCH=amd64 go build -o ./bin/${BINARY}_${VERSION}_solaris_amd64
49+
GOOS=windows GOARCH=386 go build -o ./bin/${BINARY}_${VERSION}_windows_386
50+
GOOS=windows GOARCH=amd64 go build -o ./bin/${BINARY}_${VERSION}_windows_amd64
51+
52+
3453
.PHONY: build clean fmt start enable

0 commit comments

Comments
 (0)