├── .dockerignore ├── .github ├── dependabot.yml ├── release.yml └── workflows │ ├── ci.yaml │ ├── release.yaml │ └── tagpr.yaml ├── .gitignore ├── .golangci.yml ├── .tagpr ├── Dockerfile ├── LICENSE ├── Makefile ├── PROJECT ├── README.md ├── charts └── gcp-workload-identity-federation-webhook │ ├── .helmignore │ ├── Chart.yaml │ ├── LICENSE │ ├── templates │ ├── _helpers.tpl │ ├── controller-manager-metrics-monitor.yaml │ ├── deployment.yaml │ ├── leader-election-rbac.yaml │ ├── manager-rbac.yaml │ ├── metrics-reader-rbac.yaml │ ├── metrics-service.yaml │ ├── mutating-webhook-configuration.yaml │ ├── proxy-rbac.yaml │ ├── selfsigned-issuer.yaml │ ├── serving-cert.yaml │ └── webhook-service.yaml │ └── values.yaml ├── config ├── certmanager │ ├── certificate.yaml │ ├── kustomization.yaml │ └── kustomizeconfig.yaml ├── default │ ├── kustomization.yaml │ ├── manager_auth_proxy_patch.yaml │ ├── manager_webhook_patch.yaml │ └── webhookcainjection_patch.yaml ├── manager │ ├── kustomization.yaml │ └── manager.yaml ├── prometheus │ ├── kustomization.yaml │ └── monitor.yaml ├── rbac │ ├── auth_proxy_client_clusterrole.yaml │ ├── auth_proxy_role.yaml │ ├── auth_proxy_role_binding.yaml │ ├── auth_proxy_service.yaml │ ├── kustomization.yaml │ ├── leader_election_role.yaml │ ├── leader_election_role_binding.yaml │ ├── role.yaml │ ├── role_binding.yaml │ └── service_account.yaml └── webhook │ ├── kustomization.yaml │ ├── kustomizeconfig.yaml │ ├── manifests.yaml │ └── service.yaml ├── ct.yaml ├── go.mod ├── go.sum ├── hack └── boilerplate.go.txt ├── main.go └── webhooks ├── annotations.go ├── constants.go ├── external_account_config.go ├── external_account_config_test.go ├── identityconfig.go ├── identityconfig_test.go ├── mutatepod.go ├── mutatepod_parts.go ├── mutatepod_parts_test.go ├── mutatepod_test.go ├── mutator.go ├── mutator_test.go └── webhook_suite_test.go /.dockerignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.dockerignore -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.github/dependabot.yml -------------------------------------------------------------------------------- /.github/release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.github/release.yml -------------------------------------------------------------------------------- /.github/workflows/ci.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.github/workflows/ci.yaml -------------------------------------------------------------------------------- /.github/workflows/release.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.github/workflows/release.yaml -------------------------------------------------------------------------------- /.github/workflows/tagpr.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.github/workflows/tagpr.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.gitignore -------------------------------------------------------------------------------- /.golangci.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.golangci.yml -------------------------------------------------------------------------------- /.tagpr: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/.tagpr -------------------------------------------------------------------------------- /Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/Dockerfile -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/LICENSE -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/Makefile -------------------------------------------------------------------------------- /PROJECT: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/PROJECT -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/README.md -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/.helmignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/.helmignore -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/Chart.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/Chart.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/LICENSE -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/_helpers.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/_helpers.tpl -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/controller-manager-metrics-monitor.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/controller-manager-metrics-monitor.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/deployment.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/deployment.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/leader-election-rbac.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/leader-election-rbac.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/manager-rbac.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/manager-rbac.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/metrics-reader-rbac.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/metrics-reader-rbac.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/metrics-service.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/metrics-service.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/mutating-webhook-configuration.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/mutating-webhook-configuration.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/proxy-rbac.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/proxy-rbac.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/selfsigned-issuer.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/selfsigned-issuer.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/serving-cert.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/serving-cert.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/templates/webhook-service.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/templates/webhook-service.yaml -------------------------------------------------------------------------------- /charts/gcp-workload-identity-federation-webhook/values.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/charts/gcp-workload-identity-federation-webhook/values.yaml -------------------------------------------------------------------------------- /config/certmanager/certificate.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/certmanager/certificate.yaml -------------------------------------------------------------------------------- /config/certmanager/kustomization.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/certmanager/kustomization.yaml -------------------------------------------------------------------------------- /config/certmanager/kustomizeconfig.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/certmanager/kustomizeconfig.yaml -------------------------------------------------------------------------------- /config/default/kustomization.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/default/kustomization.yaml -------------------------------------------------------------------------------- /config/default/manager_auth_proxy_patch.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/default/manager_auth_proxy_patch.yaml -------------------------------------------------------------------------------- /config/default/manager_webhook_patch.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/default/manager_webhook_patch.yaml -------------------------------------------------------------------------------- /config/default/webhookcainjection_patch.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/default/webhookcainjection_patch.yaml -------------------------------------------------------------------------------- /config/manager/kustomization.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/manager/kustomization.yaml -------------------------------------------------------------------------------- /config/manager/manager.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/manager/manager.yaml -------------------------------------------------------------------------------- /config/prometheus/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - monitor.yaml 3 | -------------------------------------------------------------------------------- /config/prometheus/monitor.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/prometheus/monitor.yaml -------------------------------------------------------------------------------- /config/rbac/auth_proxy_client_clusterrole.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/auth_proxy_client_clusterrole.yaml -------------------------------------------------------------------------------- /config/rbac/auth_proxy_role.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/auth_proxy_role.yaml -------------------------------------------------------------------------------- /config/rbac/auth_proxy_role_binding.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/auth_proxy_role_binding.yaml -------------------------------------------------------------------------------- /config/rbac/auth_proxy_service.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/auth_proxy_service.yaml -------------------------------------------------------------------------------- /config/rbac/kustomization.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/kustomization.yaml -------------------------------------------------------------------------------- /config/rbac/leader_election_role.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/leader_election_role.yaml -------------------------------------------------------------------------------- /config/rbac/leader_election_role_binding.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/leader_election_role_binding.yaml -------------------------------------------------------------------------------- /config/rbac/role.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/role.yaml -------------------------------------------------------------------------------- /config/rbac/role_binding.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/role_binding.yaml -------------------------------------------------------------------------------- /config/rbac/service_account.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/rbac/service_account.yaml -------------------------------------------------------------------------------- /config/webhook/kustomization.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/webhook/kustomization.yaml -------------------------------------------------------------------------------- /config/webhook/kustomizeconfig.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/webhook/kustomizeconfig.yaml -------------------------------------------------------------------------------- /config/webhook/manifests.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/webhook/manifests.yaml -------------------------------------------------------------------------------- /config/webhook/service.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/config/webhook/service.yaml -------------------------------------------------------------------------------- /ct.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/ct.yaml -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/go.sum -------------------------------------------------------------------------------- /hack/boilerplate.go.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/hack/boilerplate.go.txt -------------------------------------------------------------------------------- /main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/main.go -------------------------------------------------------------------------------- /webhooks/annotations.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/annotations.go -------------------------------------------------------------------------------- /webhooks/constants.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/constants.go -------------------------------------------------------------------------------- /webhooks/external_account_config.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/external_account_config.go -------------------------------------------------------------------------------- /webhooks/external_account_config_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/external_account_config_test.go -------------------------------------------------------------------------------- /webhooks/identityconfig.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/identityconfig.go -------------------------------------------------------------------------------- /webhooks/identityconfig_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/identityconfig_test.go -------------------------------------------------------------------------------- /webhooks/mutatepod.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/mutatepod.go -------------------------------------------------------------------------------- /webhooks/mutatepod_parts.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/mutatepod_parts.go -------------------------------------------------------------------------------- /webhooks/mutatepod_parts_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/mutatepod_parts_test.go -------------------------------------------------------------------------------- /webhooks/mutatepod_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/mutatepod_test.go -------------------------------------------------------------------------------- /webhooks/mutator.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/mutator.go -------------------------------------------------------------------------------- /webhooks/mutator_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/mutator_test.go -------------------------------------------------------------------------------- /webhooks/webhook_suite_test.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pfnet-research/gcp-workload-identity-federation-webhook/HEAD/webhooks/webhook_suite_test.go --------------------------------------------------------------------------------