437 Commits

Author SHA1 Message Date
Sergey Yedrikov
a04166ee2e Removed image expiration from the on-push Konflux pipeline 2025-08-25 22:31:56 -04:00
openshift-merge-bot[bot]
90c398178a Merge pull request #23 from openshift/konflux/references/main
chore(deps): update konflux references
2025-08-25 12:57:53 +00:00
red-hat-konflux[bot]
345eb72c3e chore(deps): update konflux references
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
2025-08-23 08:10:02 +00:00
Arda Güçlü
657fbdde59 Merge pull request #20 from ardaguclu/fix-ci-failures
CNTRLPLANE-1274: Add python directory in excluded list of snyk
2025-08-19 10:15:24 +03:00
Arda Güçlü
0384f65376 Add python directory in excluded list of snyk 2025-08-19 09:57:59 +03:00
Arda Güçlü
ab4339581e Merge pull request #19 from ardaguclu/organize-carries
CNTRLPLANE-1274: Organize carries by also adding snyk configurations
2025-08-19 08:59:30 +03:00
Arda Güçlü
74514688c8 Upstream<drop>: Run go mod vendor 2025-08-19 08:42:24 +03:00
Arda Güçlü
1e90e0e8e0 Upstream<carry>: Add OCP specific configurations 2025-08-19 08:42:05 +03:00
Arda Güçlü
5c7e582ba9 Merge remote-tracking branch 'downstream/main' into organize-carries 2025-08-19 08:33:26 +03:00
Arda Güçlü
162ca390cc Merge pull request #18 from ardaguclu/sync-downstream
CNTRLPLANE-1274: Sync with upstream and add OCP specific initial configurations
2025-08-18 14:14:04 +03:00
Arda Güçlü
8ecb2b4b27 Update Dockerfile 2025-08-18 14:00:42 +03:00
Arda Güçlü
efc2861e50 fix 2025-08-18 13:57:51 +03:00
Arda Güçlü
b67d10f941 Add missing new lines 2025-08-18 13:41:54 +03:00
Arda Güçlü
fb6987083d fix 2025-08-18 13:35:24 +03:00
Arda Güçlü
d9a05bdfd4 Upstream<drop>: Run go mod vendor 2025-08-18 11:50:35 +03:00
Arda Güçlü
ec02e127ca Upstream<carry>: Add OCP specific configurations 2025-08-18 11:50:07 +03:00
Arda Güçlü
7e8c761bc6 Merge remote-tracking branch 'downstream/main' into sync-downstream 2025-08-18 11:07:16 +03:00
Arda Güçlü
fff69ebc97 Merge pull request #17 from openshift/konflux/references/main
chore(deps): update konflux references
2025-08-18 08:26:55 +03:00
red-hat-konflux[bot]
fc166250d0 chore(deps): update konflux references
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
2025-08-16 08:10:36 +00:00
dependabot[bot]
7a3d6683ce build(deps): bump k8s.io/apiextensions-apiserver from 0.33.3 to 0.33.4 (#264)
Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.33.3 to 0.33.4.
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.33.3...v0.33.4)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-14 06:08:29 +03:00
dependabot[bot]
8c1df25c5a build(deps): bump k8s.io/kubectl from 0.33.3 to 0.33.4 (#263)
Bumps [k8s.io/kubectl](https://github.com/kubernetes/kubectl) from 0.33.3 to 0.33.4.
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.33.3...v0.33.4)

---
updated-dependencies:
- dependency-name: k8s.io/kubectl
  dependency-version: 0.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-14 06:02:58 +03:00
dependabot[bot]
21cf1c245b build(deps): bump helm.sh/helm/v3 from 3.18.4 to 3.18.5 (#261)
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.18.4 to 3.18.5.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.18.4...v3.18.5)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-14 06:02:34 +03:00
dependabot[bot]
d16b6c3251 build(deps): bump k8s.io/client-go from 0.33.3 to 0.33.4 (#267)
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.33.3 to 0.33.4.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.33.3...v0.33.4)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-version: 0.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-14 05:54:54 +03:00
dependabot[bot]
ae02c77ddd build(deps): bump k8s.io/apimachinery from 0.33.3 to 0.33.4 (#266)
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.33.3 to 0.33.4.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.33.3...v0.33.4)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-14 05:54:46 +03:00
dependabot[bot]
11c01269a3 build(deps): bump k8s.io/api from 0.33.3 to 0.33.4 (#260)
Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.33.3 to 0.33.4.
- [Commits](https://github.com/kubernetes/api/compare/v0.33.3...v0.33.4)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.33.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-14 05:54:30 +03:00
Arda Güçlü
7aa07fe9de Merge pull request #16 from ardaguclu/sync-downstream
Sync downstream
2025-08-12 12:02:53 +03:00
Arda Güçlü
624ae973c9 upstream<carry>: Add Konflux specific configurations 2025-08-12 11:48:38 +03:00
Arda Güçlü
2225a2d098 Merge remote-tracking branch 'downstream/main' into sync-downstream 2025-08-12 11:46:07 +03:00
Marc Nuri
19a92418e4 feat(auth): support for VSCode auth flow (#258)
Adds DisableDynamicClientRegistration and OAuthScopes to be able to override
the values proxied from the configured authorization server.

DisableDynamicClientRegistration removes the registration_endpoint field from
the well-known authorization resource metadata.
This forces VSCode to show a for to input the Client ID and Client Secret since
these can't be discovered.

The OAuthScopes allows to override the scopes_supported field.
VSCode automatically makes an auth request for all of the
supported scopes.
In many cases, this is not supported by the auth server.
By providing this configuration, the user (MCP Server administrator)
is able to set which scopes are effectively supported and
force VSCode to only request these.

Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-11 14:39:27 +03:00
Arda Güçlü
0a3ca57cff Merge pull request #15 from ardaguclu/add-renovate
Add renovate.json to prevent go module updates
2025-08-11 08:28:16 +03:00
Arda Güçlü
e4b5f0c2d2 Add renovate.json to prevent go module updates 2025-08-11 08:13:06 +03:00
Arda Güçlü
4244f5da74 Merge pull request #5 from syedriko/syedriko-konflux-multi-platform
Switch to multi-platform build pipeline, for x86_64 and arm64
2025-08-11 08:10:45 +03:00
red-hat-konflux
66c6dab86d Switch to multi-platform build pipeline, for x86_64 and arm64 2025-08-09 11:40:10 -04:00
Marc Nuri
90d4bb03f3 feat(auth): token exchange auth workflow (#255)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-08 15:30:33 +03:00
Marc Nuri
58c47dc95c refactor(auth): temporarily disable scope authorization (#254)
It's unclear how the scopes are going to be populated in the JWT.
Disable scope authorization for the time being.

Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-08 12:46:45 +03:00
Marc Nuri
fde4b1dc0f test(auth): complete test cases for token validation (#253)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-08 10:31:50 +03:00
Marc Nuri
dfcecd5089 feat(auth): configurable Kubernetes API token validation (#252)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-08 10:23:12 +03:00
Arda Güçlü
0bdf249ead Merge pull request #3 from syedriko/syedriko-konflux-ec-failures
Addressed Konflux EC failures
2025-08-08 08:52:31 +03:00
Marc Nuri
7b11c1667a feat(auth): configurable audience validation (#251)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-08 08:50:50 +03:00
Marc Nuri
b0da9fb459 feat(auth): implemented SecurityTokenService to handle token exchange (#250)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-08 06:03:23 +03:00
Sergey Yedrikov
ee48ed31d7 Addressed Konflux EC failures 2025-08-07 14:24:46 -04:00
Arda Güçlü
ae2d44e791 Merge pull request #2 from openshift/konflux-openshift-mcp-server
Red Hat Konflux update openshift-mcp-server
2025-08-07 16:19:55 +03:00
Marc Nuri
cfc42b3bd3 test(auth): complete test scenarios for raw token and oidc (#248)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-07 16:04:12 +03:00
Marc Nuri
43744f2978 test: extract mock-server for reutilization (#247)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-07 15:32:20 +03:00
Marc Nuri
9ec5c829db feat(auth): .well-known endpoints delegated to auth server (#246)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-07 10:49:21 +03:00
red-hat-konflux[bot]
40326c1c6a Red Hat Konflux purge kubernetes-mcp-server-ols (#245)
Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
Co-authored-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
2025-08-07 10:18:22 +03:00
red-hat-konflux
2f804a0c84 Red Hat Konflux update openshift-mcp-server
Signed-off-by: red-hat-konflux <konflux@no-reply.konflux-ci.dev>
2025-08-06 18:13:30 +00:00
Marc Nuri
aba5f548d8 feat(auth): implement proxied /.well-known/oauth-authorization-server (#244)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-06 15:51:45 +03:00
Marc Nuri
94b85990e3 fix(npm): child process exits gracefully on SIGxxx (#243)
Signed-off-by: Marc Nuri <marc@marcnuri.com>
2025-08-06 14:31:33 +03:00
Arda Güçlü
e53825b719 Merge branch 'containers:main' into main 2025-08-06 14:20:50 +03:00