Google Git
Sign in
apache/knox/HEAD
  1. 204d97b KNOX-3397: Add preauth.auth.header.actor.groups to set actor groups header name explicitly (#1329) by Sandor Molnar · 8 hours ago master
  2. 6bdf64c Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 (#1323) by dependabot[bot] · 3 days ago
  3. 2beb45b KNOX-3041: Eliminate load-balancing race condition in HA dispatch (#1317) by hanicz · 4 days ago
  4. aea0def KNOX-3333 - Update Letsencrypt staging certs (#1244) by Sandeep Moré · 4 days ago
  5. 76fa85b KNOX-3389: Embedded LDAP getUserGroups drops roles-lookup roles that have no backing group (#1318) by Sandor Molnar · 5 days ago
  6. 9f4b8e7 KNOX-3388: Improve alias creation during EKU mode testing (#1316) by Sandor Molnar · 5 days ago
  7. fcab7e2 KNOX-3385: Ldap Proxy accepts search using either proxy or remote base dn (#1314) by David Han · 5 days ago
  8. b438768 KNOX-3381: Fix HaDispatch unnecessary failover due to IOException during writeOutboundResponse (#1308) by hanicz · 7 days ago
  9. 94f394a Add Project Security Threat Model Document (#1312) by lmccay · 9 days ago
  10. a5dfbca KNOX-3382: Bump Netty to 1.135.Final due to CVEs (#1309) by Sandor Molnar · 10 days ago
  11. 08b1f90 KNOX-3383: Bump Jackson to 2.18.9 due to CVEs (#1310) by Sandor Molnar · 10 days ago
  12. 34ba127 KNOX-3361: Route OpenSAML off BouncyCastle in FIPS mode (#1299) by hanicz · 12 days ago
  13. 8d70ff4 KNOX-3380: hive_metastore_enable_ssl config should be used to determin if SSL is enabled on HMS (#1307) by Sandor Molnar · 12 days ago
  14. 6110aea KNOX-3374: Skip redundant roles lookup in PreAuth/ExtAuthz when the identity-assertion layer already resolved roles (#1306) by Sandor Molnar · 12 days ago
  15. ad6c159 KNOX-3377: KNOX-3378: KNOX-3379: Support secure LDAP (LDAPS) for the Knox embedded LDAP service (#1305) by Sandor Molnar · 12 days ago
  16. c24781a KNOX-3376: Use DeafultAliasService in Knox OOTB (#1304) by Sandor Molnar · 2 weeks ago
  17. 3f2ed2e KNOX-3375: Wire in gatewayservices for LDAPRolesLookupInterceptorFactory so KnoxCLI is able to load it (#1303) by hanicz · 2 weeks ago
  18. 6dbdc94 KNOX-3359 - Support Single-Purpose EKU Certificates (#1291) by Sandeep Moré · 3 weeks ago
  19. 7b34b7c KNOX-3374: Fix inherited roles missing from auth headers when LDAP roles-lookup interceptor is active (#1300) by hanicz · 3 weeks ago
  20. 1427c88 KNOX-3344: Upgrade pac4j to 6.5.3 (#1278) by bonampak · 3 weeks ago
  21. bea0469 KNOX-3372: Add gateway-reloadable documentation (#1297) by hanicz · 3 weeks ago
  22. 9c000de KNOX-3316: Change downloaded keystore format based on FIPS (#1292) by hanicz · 4 weeks ago
  23. 39a168a KNOX-3371: Fix broken error message on login page (#1290) by hanicz · 4 weeks ago
  24. 67fb077 KNOX-1608: Remove gateway-adapter module (#1263) by Arun · 4 weeks ago
  25. 8f65731 KNOX-3370: Eliminate deprecated TokenStateService implementations (#1289) by Sandor Molnar · 4 weeks ago
  26. de9d91c KNOX-3366 - Upgrade Mina-core to 2.2.8 (#1285) via devaspati.krishnatri by Devaspati · 4 weeks ago
  27. 51f40e7 KNOX-3367: Update Token State Service DB documentation (#1287) by hanicz · 4 weeks ago
  28. 3da2d97 KNOX-3369: Bump requests from 2.32.4 to 2.33.0 and pytest from 8.3.4 to 9.0.3 in /.github/workflows/tests (#1288) by Sandor Molnar · 4 weeks ago
  29. 1e25778 KNOX-3341: LDAP proxy general search - review fixes and hardening (#1284) by Sandor Molnar · 4 weeks ago
  30. d9283aa KNOX-3365: New docs for k8s ServiceAccount validator (#1283) by hanicz · 4 weeks ago
  31. 2fdbda0 KNOX-3364: New loadAliasesFromK8sSecrets method in entrypoint.sh to load aliases from k8s secrets. Install jq in the container as well. (#1282) by hanicz · 4 weeks ago
  32. 51a168f KNOX-3363: Document create-k8s-alias, create-list-aliases and update export-cert and list-alias KnoxCLI commands (#1281) by hanicz · 4 weeks ago
  33. f6c9adf KNOX-3360: create-k8s-alias command to save aliases from k8s secrets (#1279) by hanicz · 4 weeks ago
  34. 8a1332b KNOX-3341: LDAP proxy backend handles general searches (#1274) by David Han · 5 weeks ago
  35. d997844 KNOX-3357: Upgrade Webshell UI frameworks/libraries (#1276) by hanicz · 5 weeks ago
  36. aca611f KNOX-3234: Upgrade Admin UI Angular to 21+, bootstrap to 5+ (#1249) by hanicz · 5 weeks ago
  37. 9f945f8 KNOX-3358: Support configurable bind credentials for the embedded Knox LDAP service (#1275) by Sandor Molnar · 5 weeks ago
  38. 24dccd7 KNOX:3353: Add Docker-based integration tests for k8s ServiceAccountValidator (#1271) by Sandor Molnar · 5 weeks ago
  39. c3f5524 KNOX-3356: Allow Cloudera Manager service discovery over cleartext HTTP (#1272) by Sandor Molnar · 5 weeks ago
  40. 01fbedc KNOX-3353: Eliminate K8sPreAuthFederationFilter and consolidate logic in ServiceAccountValidator (#1269) by Sandor Molnar · 5 weeks ago
  41. 755c4bc KNOX-3352: k8s pre-auth validator for service account annotation (#1268) by hanicz · 6 weeks ago
  42. f5fce55 KNOX-3354: Remove index suffix from actor groups header for roles in AbstractAuthResource (#1267) by Sandor Molnar · 6 weeks ago
  43. 5d41089 KNOX-3347 - Introduce TokenExchangePrincipal for extending Act claim … (#1262) by lmccay · 6 weeks ago
  44. 9812cec KNOX-3351: Resolve LDAP roles for users with no groups (#1266) by Sandor Molnar · 6 weeks ago
  45. 13d2f1f KNOX-3352: Set scheme for Iceberg REST catalog based on ssl enabled c… (#1265) by hanicz · 6 weeks ago
  46. 644246b KNOX-3340: Add Control for LDAPRolesLookupInterceptor (#1258) by David Han · 6 weeks ago
  47. 0c88385 KNOX-3334 - Introduce ActorChainPrincipal for RFC 8693 instead of ImpersonatedPrincipal (#1257) by lmccay · 6 weeks ago
  48. 10eedcc KNOX-3335: Add pylint pre-push linting for .github/workflows/tests Python integration tests (#1260) by Raghav Maheshwari · 6 weeks ago
  49. fe0786d KNOX-3348: Upgrade BouncyCastle to 1.84 (#1261) by hanicz · 6 weeks ago
  50. 7e74d43 Bump org.apache.commons:commons-configuration2 from 2.10.1 to 2.15.0 (#1238) by dependabot[bot] · 6 weeks ago
  51. 7c94926 KNOX-3345: Fix intermittent testRefreshGatewayConfig test issue (#1259) by hanicz · 7 weeks ago
  52. ccdb3fc KNOX-3345: ignore GatewayServerTest.testRefreshGatewayConfig temporarily (#1255) by Sandor Molnar · 7 weeks ago
  53. aae8f98 KNOX-3294: Upgrade bootstrap to 5+ on login,logout and redirecting pages (#1252) by hanicz · 7 weeks ago
  54. 344c393 KNOX-3343: Fix NPE when cacheKeyHeader is not found in the request (#1254) by Sandor Molnar · 7 weeks ago
  55. 8342af3 KNOX-3342: Fixed NPE in HadoopGroupFilter when hadoopGroups instance wasn't set (#1253) by Sandor Molnar · 7 weeks ago
  56. 9c6647e KNOX-3337: Add optional LDAP role lookup support (#1247) by Sandor Molnar · 7 weeks ago
  57. fc2987e KNOX-3330: Handle interceptor name collisions (#1251) by David Han · 7 weeks ago
  58. fafd793 KNOX-3336: New LDAP Service Factory (#1250) by hanicz · 7 weeks ago
  59. 33df7d5 KNOX-3330: Refactor LDAP Proxy configuration to support multiple backends (#1240) by David Han · 7 weeks ago
  60. d1c3046 KNOX-3318: document LDAP service (#1227) by Sandor Molnar · 8 weeks ago
  61. ea3a6e0 KNOX-3339: Upgrade log4j2 to 2.26.0 (#1248) by hanicz · 8 weeks ago
  62. edbe024 KNOX-3328: Implement recursive group resolution for LDAP proxy (#1236) by Sandor Molnar · 8 weeks ago
  63. 810abcd KNOX-3329: New database truststore type config (#1246) by hanicz · 8 weeks ago
  64. be8679c KNOX-3332: Add listeners on gateway config changes (#1243) by hanicz · 8 weeks ago
  65. e5ff300 KNOX-3331: Add Maven option to skip Angular UI modules (#1241) by Sandor Molnar · 9 weeks ago
  66. e738c08 KNOX-3328: Add Docker-based integration tests for Knox LDAP service (#1242) by Sandor Molnar · 9 weeks ago
  67. 6549f4e KNOX-3256: Refactor Docker build to use local Maven artifacts and unify CI/Dev workflows (#1239) by Sandor Molnar · 9 weeks ago
  68. 488e94a KNOX-3326: Add TCPS support for Oracle DB (#1237) by hanicz · 10 weeks ago
  69. d4eecad KNOX-3327: Support periodic refresh of gateway configuration (#1235) by Sandor Molnar · 10 weeks ago
  70. 8d59c6c KNOX-3325 - Bump maven enforcer version (#1234) by Sandeep Moré · 10 weeks ago
  71. 0cc10cb KNOX-3320: Document logout flows in Knox (#1228) by Sandor Molnar · 2 months ago
  72. 0610fd9 KNOX-3322: Upgrade Postgresql to 42.7.11 to Fix CVE's (#1231) by Keshav Katkar · 2 months ago
  73. cb41141 Bump org.apache.mina:mina-core from 2.2.4 to 2.2.7 (#1226) by dependabot[bot] · 2 months ago
  74. f79717b KNOX-3323 - Upgrade dompurify version (#1232) by Sandeep Moré · 2 months ago
  75. 96cd8f6 KNOX-3319 : Ranger REST API not fully implemented in cdp-proxy-api (Dineshkumar Yadav <dineshkumar.yadav@outlook.com>) (#1230) by Sandeep Moré · 2 months ago
  76. f546084 KNOX-3321 - KnoxToken Support for RFC 8693 Token Exchange act Claim (#1229) by lmccay · 3 months ago
  77. 7b5e518 KNOX-3317: Fixed NPE when no token-metadata-headers are declared for ICEBERG-REST (#1225) by Sandor Molnar · 3 months ago
  78. fb70788 KNOX-3312 - Client Credentials Flow with HTTP Basic needs Unwrapped S… (#1219) by lmccay · 3 months ago
  79. df17516 KNOX-3315: Adds BCFKS as an option cert export (#1221) by hanicz · 3 months ago
  80. 37fbbde KNOX-3314: Ensure secure length for encryptQueryString generated by descriptors (#1220) by hanicz · 3 months ago
  81. 4f94d95 KNOX-3311: Fix X509CertificateUtil.fetchPublicCertsFromServer issue w… (#1217) by hanicz · 3 months ago
  82. 762593a KNOX-3310: Fix redundant ALIAS_PASSPHRASE assignment and improve logging (#1216) by Sandor Molnar · 3 months ago
  83. a8d2016 KNOX-3303: Subject created during identity assertion should include TokenIdPrincipal, if any (#1214) by Sandor Molnar · 3 months ago
  84. e39a318 KNOX-3308 - Token Exchange Flow using wrong param name (#1211) by lmccay · 3 months ago
  85. dced037 KNOX-3304 - Support for Openshift/SCC + Make docker entrypoint idempotent (#1209) + Docker build issue fix (contributed by @sneethiraj) by Sandeep Moré · 3 months ago
  86. 4988a16 KNOX-3303: Support configurable 'sub' claim reconciliation and client_id claim in Client Credentials flow (#1208) by Sandor Molnar · 3 months ago
  87. bad8a3e KNOX-3306: Make server startup fail if a forbidden security algorithm… (#1212) by hanicz · 3 months ago
  88. 7646fea KNOX-3307: Upgrade jackson-core to 2.18.6 (#1210) by Phil Zampino · 3 months ago
  89. 5e87302 KNOX-3302: Falling back to gateway-level credential store while looking up LDAP system password (#1207) by Sandor Molnar · 3 months ago
  90. 72cc4ce KNOX-3301: Added missing API_KEY icon on Token Management page (#1206) by Sandor Molnar · 3 months ago
  91. dd021c3 KNOX-3299: adding inline documentation for usage of env. var: TRUSTSTORE_IMPORTS (#1201) by Selvamohan Neethiraj · 3 months ago
  92. 16fc47b KNOX-3298: Change ApiClientFactory password check to isNotBlank (#1200) by hanicz · 3 months ago
  93. a38c9f6 KNOX-3297: Docker entrypoint script has issues that prevents this image being run as docker container and as a pod in k8s (#1197) by Selvamohan Neethiraj · 3 months ago
  94. e52a169 KNOX-3296: Expand CI integration tests: health metrics, HSTS, and KnoxLDAP auth paths (#1196) by Raghav Maheshwari · 4 months ago
  95. 3bca5f1 KNOX-3293: Add integration tests: health metrics JSON, KnoxLDAP preauth/extauthz paths, RemoteAuth extauthz (#1194) by Raghav Maheshwari · 4 months ago
  96. fa75d21 KNOX-3295: Set default type to JWT in issued knox token headers (#1195) by hanicz · 4 months ago
  97. 2fed77b KNOX-3292 - Fix github workflow that pushes knox docker image to apache docker hub (#1193) by Sandeep Moré · 4 months ago
  98. 72a4845 KNOX-3287: RAP truststore password alias improvements (#1190) by Sandor Molnar · 4 months ago
  99. 47e8e7a KNOX-3286: update rewrite rule to put behind knox-proxy when navigate to scheduler-ui (#1185) by Hean Chhinling · 4 months ago
  100. 0c1415f KNOX-3286: update rewrite rule to put behind knox-proxy when navigate to scheduler-ui (#1185) by Hean Chhinling · 4 months ago