engineering/sshpiper
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
682 commits 1 branch 0 tags 60 MiB
Commit graph

682 commits

This branch
This branch
All branches
Author SHA1 Message Date
dependabot[bot]
3e0fc4010d
Bump google.golang.org/grpc from 1.70.0 to 1.71.0 (#537) 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.70.0 to 1.71.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.70.0...v1.71.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-12 01:49:24 -07:00
dependabot[bot]
b05520d4a0
Bump github.com/docker/docker (#534) 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 27.5.1+incompatible to 28.0.1+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v27.5.1...v28.0.1)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-03-12 01:39:07 -07:00
Boshi Lian
3c843d337e
Update dependencies: bump golang.org/x/crypto to v0.36.0, golang.org/x/sync to v0.12.0, golang.org/x/sys to v0.31.0, golang.org/x/term to v0.30.0, and golang.org/x/text to v0.23.0 (#541) 2025-03-12 01:38:43 -07:00
Boshi Lian
b8db060584
fix e2e (#540) 
* Update docker-compose.yml

* Update docker-compose.yml and Dockerfile: simplify kind load command and upgrade kind version to v0.27.0

* Comment out Docker installation steps in Dockerfile

* Revert "Comment out Docker installation steps in Dockerfile"

This reverts commit 242e5c638958cb4227d99c85d2cae13214b74513.
 2025-03-12 00:54:49 -07:00
Boshi Lian
c12ddd9c0f
Update dependencies: bump golang.org/x/crypto to v0.33.0, golang.org/x/sync to v0.11.0, golang.org/x/sys to v0.30.0, golang.org/x/term to v0.29.0, and golang.org/x/text to v0.22.0 (#531) 2025-02-17 01:22:20 -08:00
Boshi Lian
e96e3f6a3a
Customize sshd with sshd config.d (#525) 
* Update OpenSSH server image version and add no penalties configuration

* Refactor SSH configuration paths and update test scripts for public key handling

* Update Docker Compose volumes to remove read-only flag for shared directory

* Remove end-to-end test files and related Docker configuration for CA public cert authentication
 2025-02-16 23:19:41 -08:00
dependabot[bot]
3050a85e6e
Bump k8s.io/code-generator from 0.32.1 to 0.32.2 (#530) 
Bumps [k8s.io/code-generator](https://github.com/kubernetes/code-generator) from 0.32.1 to 0.32.2.
- [Commits](https://github.com/kubernetes/code-generator/compare/v0.32.1...v0.32.2)

---
updated-dependencies:
- dependency-name: k8s.io/code-generator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-15 06:02:19 -08:00
dependabot[bot]
06770541cd
Bump k8s.io/client-go from 0.32.1 to 0.32.2 (#528) 
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.32.1 to 0.32.2.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.32.1...v0.32.2)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-14 05:00:01 -08:00
dependabot[bot]
8f3cc0a4e8
Bump k8s.io/api from 0.32.1 to 0.32.2 (#529) 
Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.32.1 to 0.32.2.
- [Commits](https://github.com/kubernetes/api/compare/v0.32.1...v0.32.2)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-14 04:49:25 -08:00
Boshi Lian
c8dd92f1e8
Bump Go version to 1.24 in Dockerfile and go.mod (#524) 2025-02-13 02:36:12 -08:00
dependabot[bot]
d6d42f1bd3
Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 (#523) 2025-02-08 00:33:53 -08:00
Boshi Lian
77e9b2181a
Update Dockerfile to use pre-built OpenSSH binary and fix test reference to SSH binary (#522) 
* Update Dockerfile to use pre-built OpenSSH binary and fix test reference to SSH binary

* Add support for multiple SSH binary versions in tests
 2025-02-06 01:48:49 -08:00
dependabot[bot]
9b7128b965
Bump k8s.io/client-go from 0.32.0 to 0.32.1 (#520) 
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.32.0 to 0.32.1.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-05 22:26:39 -08:00
Boshi Lian
e95d30fdc8
Enhance failtoban plugin with log-only mode and SIGHUP cache reset (#519) 2025-02-05 22:26:32 -08:00
dependabot[bot]
74ea60e0b0
Bump k8s.io/code-generator from 0.32.0 to 0.32.1 (#521) 2025-02-05 12:05:35 -08:00
dependabot[bot]
351ee0f842
Bump github.com/docker/docker (#512) 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 27.4.1+incompatible to 27.5.1+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v27.4.1...v27.5.1)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-05 00:17:54 -08:00
dependabot[bot]
6798dbeb4d
Bump google.golang.org/protobuf from 1.36.1 to 1.36.4 (#514) 
Bumps google.golang.org/protobuf from 1.36.1 to 1.36.4.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-05 00:17:42 -08:00
dependabot[bot]
959f661506
Bump google.golang.org/grpc from 1.69.2 to 1.70.0 (#513) 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.69.2 to 1.70.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.69.2...v1.70.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-05 00:05:35 -08:00
dependabot[bot]
350c9c7695
Bump k8s.io/api from 0.32.0 to 0.32.1 (#511) 
Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.32.0 to 0.32.1.
- [Commits](https://github.com/kubernetes/api/compare/v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-05 00:05:26 -08:00
Boshi Lian
44068f3cea
Update OpenSSH server image to version 9.7_p1-r4-ls184 in docker-compose.yml (#517) 2025-02-04 23:25:34 -08:00
Boshi Lian
b2f7f79cc4
Add configuration options for allowed downstream algorithms (#504) 
* Add configuration options for allowed downstream algorithms

* Refactor daemon configuration to set allowed downstream algorithms

* Ensure default configuration values are set consistently in newDaemon
 2024-12-26 00:21:20 -08:00
dependabot[bot]
502eb4b07b
Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 (#503) 
Bumps google.golang.org/protobuf from 1.35.2 to 1.36.1.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-24 23:30:13 -08:00
dependabot[bot]
f5fe06c5eb
Bump k8s.io/code-generator from 0.31.2 to 0.32.0 (#498) 
Bumps [k8s.io/code-generator](https://github.com/kubernetes/code-generator) from 0.31.2 to 0.32.0.
- [Commits](https://github.com/kubernetes/code-generator/compare/v0.31.2...v0.32.0)

---
updated-dependencies:
- dependency-name: k8s.io/code-generator
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-21 22:37:34 -08:00
dependabot[bot]
224d5bcba7
Bump google.golang.org/grpc from 1.68.0 to 1.69.2 (#501) 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.68.0 to 1.69.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.68.0...v1.69.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-21 22:25:50 -08:00
dependabot[bot]
40a5af7fe7
Bump k8s.io/client-go from 0.31.2 to 0.32.0 (#495) 
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.31.2 to 0.32.0.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.2...v0.32.0)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-21 22:25:40 -08:00
dependabot[bot]
7b227d7214
Bump github.com/docker/docker (#502) 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 27.3.1+incompatible to 27.4.1+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v27.3.1...v27.4.1)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-21 22:25:32 -08:00
dependabot[bot]
3a6695b24b
Bump k8s.io/apimachinery from 0.31.2 to 0.32.0 (#496) 2024-12-15 16:03:50 -08:00
Boshi Lian
b41696a6aa sync crypto with upstream 2024-12-15 15:24:51 -08:00
dependabot[bot]
34a9996b38
Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 (#485) 
Bumps google.golang.org/protobuf from 1.35.1 to 1.35.2.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-14 21:38:53 -08:00
Boshi Lian
085ba59c58
support cross auth type mapping (#483) 
* add testcase

* add fix

* Refactor skelpipe wrappers to separate password and private key handling
 2024-11-10 03:01:52 -08:00
Boshi Lian
503f112c5d
update crypto to v0.29 (#484) 
* update crypto to v29

* fix ver
 2024-11-10 02:46:43 -08:00
dependabot[bot]
6aa1d955d1
Bump google.golang.org/grpc from 1.67.1 to 1.68.0 (#481) 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.67.1 to 1.68.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.67.1...v1.68.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-08 01:37:49 -08:00
dependabot[bot]
34998ae68a
Bump github.com/creack/pty from 1.1.23 to 1.1.24 (#479) 
Bumps [github.com/creack/pty](https://github.com/creack/pty) from 1.1.23 to 1.1.24.
- [Release notes](https://github.com/creack/pty/releases)
- [Commits](https://github.com/creack/pty/compare/v1.1.23...v1.1.24)

---
updated-dependencies:
- dependency-name: github.com/creack/pty
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-31 15:49:07 -07:00
dependabot[bot]
91e608cd31
Bump github.com/tg123/go-htpasswd from 1.2.2 to 1.2.3 (#478) 2024-10-29 13:25:55 -07:00
Boshi Lian
4694964c11
Refactor plugin/yaml/main.go and plugin/yaml/yaml.go to support multiple YAML config files (#477) 2024-10-28 01:57:55 -07:00
Boshi Lian
23e18f4f7c
merge totp to workingdir (#476) 
* merge totp to workingdir

* Refactor .goreleaser.yaml to remove plugin_totp build configuration
 2024-10-28 01:09:28 -07:00
Boshi Lian
0e6168a6b8
Refactor plugin.proto and pluginbase.go to add support for metadata in connection context (#475) 
* Refactor plugin.proto and pluginbase.go to add support for metadata in connection context

* go fmt

* move test plugin out

* Refactor Dockerfile to build test plugin in e2e/testplugin directory

* mv testplugin -> testgrpcplugin

* add test for connection metadata

* enable logging to stdout

* Refactor Dockerfile to build test plugin in e2e/testplugin directory
 2024-10-27 23:57:21 -07:00
Boshi Lian
c8ca0c4f97
Refactor README.md to update plugin list and add instructions for screen recording (#474) 2024-10-26 23:47:55 -07:00
Boshi Lian
14ceadb8e8
add skel plugin for code sharing (#473) 
* introduce plugin skel to reuse code

* Refactor code to use libplugin.NewSkelPlugin for plugin/kubernetes/main.go
Add YAML Plugin skel.go for plugin/yaml

* Fix code scanning alert no. 6: Incorrect conversion between integer types

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* fix gpt

* fjx password handling in SkelPlugin and skelpipeToWrapper

* go fmt

* Refactor Docker plugin to use skelpipe wrapper

* Refactor skel.go to use container username instead of client username

* revert yaml test order

* fix public and password mess up

* Refactor working dir to use skel

* revert deleted file

* Refactor skel.go to remove unused code and simplify MatchConn function

* Refactor skel.go to read userKnownHosts file in KnownHosts function

* remove workingdirbykey from goreleaser

* Refactor workingdir.go to use libplugin.SplitHostPortForSSH for parsing host and port

* Refactor skel.go to remove unused code and simplify MatchConn function

* merge doc into workingdir

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
 2024-10-24 23:15:26 -07:00
dependabot[bot]
adc5d51c33
Bump k8s.io/code-generator from 0.31.1 to 0.31.2 (#471) 
Bumps [k8s.io/code-generator](https://github.com/kubernetes/code-generator) from 0.31.1 to 0.31.2.
- [Commits](https://github.com/kubernetes/code-generator/compare/v0.31.1...v0.31.2)

---
updated-dependencies:
- dependency-name: k8s.io/code-generator
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-24 09:47:28 -07:00
dependabot[bot]
7defedfcaa
Bump k8s.io/client-go from 0.31.1 to 0.31.2 (#470) 
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.31.1 to 0.31.2.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.31.1...v0.31.2)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-24 09:17:23 -07:00
Boshi Lian
ed19d555b5
add support for ssh ca auth (#467) 2024-10-23 02:41:25 -07:00
Boshi Lian
a3f69952c0
Refactor code to use subtle.ConstantTimeCompare for secure comparison (#466) 
* Refactor code to use subtle.ConstantTimeCompare for secure comparison

* Refactor code to use subtle.ConstantTimeCompare for secure comparison
 2024-10-21 02:46:19 -07:00
Yachen Mao
3087aa4eb6
handle nextUpHook is nil (#465) 2024-10-20 08:54:02 -07:00
Boshi Lian
4db98899f4
YAML Plugin add regex match group (#464) 
* add support for match group replace

* update doc
 2024-10-20 02:15:46 -07:00
Boshi Lian
39f5eef98b
Refactor YAML schema to support multiple authorized keys and known hosts (#463) 
* add coverage for go proxy

* Refactor CLI flag name for allowed proxy addresses

* Refactor YAML schema to support multiple authorized keys and known hosts

* add testcases

* Refactor YAML schema to support multiple authorized keys and known hosts

* go fmt

* go fmt
 2024-10-20 00:20:40 -07:00
Boshi Lian
4ad8e77e3f
add test coverage for go proxy (#460) 
* add coverage for go proxy

* Refactor CLI flag name for allowed proxy addresses
 2024-10-18 13:28:18 -07:00
dependabot[bot]
e6388b66b2
Bump k8s.io/client-go from 0.30.1 to 0.31.1 (#456) 
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.30.1 to 0.31.1.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.30.1...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-18 13:09:53 -07:00
dependabot[bot]
0d6c9c2497
Bump k8s.io/code-generator from 0.30.1 to 0.31.1 (#457) 
Bumps [k8s.io/code-generator](https://github.com/kubernetes/code-generator) from 0.30.1 to 0.31.1.
- [Commits](https://github.com/kubernetes/code-generator/compare/v0.30.1...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/code-generator
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-18 12:56:49 -07:00
dependabot[bot]
edbf82c004
Bump k8s.io/apimachinery from 0.30.1 to 0.31.1 (#441) 
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.30.1 to 0.31.1.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.30.1...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-18 10:19:04 -07:00