Merge pull request #75 from keyfactor-pub/release-1.1

feat(oauth): Implement OAuth as available auth mechanism (60105)

Author: m8rmclaren

.github/workflows/test.yml

@@ -25,7 +25,7 @@ jobs:
           go-version-file: 'go.mod'
           cache: true
       - run: go mod download
-      - run: go build -v .
+      - run: make build
       - name: Run linters
         uses: golangci/golangci-lint-action@08e2f20817b15149a52b5b3ebe7de50aff2ba8c5 # v3.4.0
         with:
@@ -62,25 +62,24 @@ jobs:
           - '1.4.*'
           - '1.5.*'
     steps:
-      # Deploy an ephemeral EJBCA and SignServer for CI testing
-      - uses: m8rmclaren/ejbca-signserver-k8s@main
-        with:
-          deploy-k8s: 'true'
-          deploy-nginx-ingress: 'true'
       - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           go-version-file: 'go.mod'
           cache: true
-      # Place the contents of ${{ secrets.EJBCA_CLIENT_CERT_PATH }} into a file at /tmp/certs/ejbca.pem
-      - run: mkdir -p /tmp/certs && echo "${{ secrets.EJBCA_CLIENT_CERT }}" > /tmp/certs/ejbca.pem
       - uses: hashicorp/setup-terraform@a1502cd9e758c50496cc9ac5308c4843bcd56d36 # v3.0.0
         with:
           terraform_version: ${{ matrix.terraform }}
           terraform_wrapper: false
       - run: go mod download
+      # Deploy an ephemeral EJBCA and SignServer for CI testing
+      - uses: m8rmclaren/ejbca-signserver-k8s@main
+        with:
+          deploy-k8s: 'true'
+          deploy-nginx-ingress: 'true'
+          deploy-signserver: 'false'
+
       - env:
-          EJBCA_CERTIFICATE_SUBJECT: "CN=example.com"
           TF_ACC: "1"
         run: go test -v -cover ./internal/ejbca/
         timeout-minutes: 10

.gitignore

@@ -34,7 +34,7 @@ website/vendor
 !command/test-fixtures/**/*.tfstate
 !command/test-fixtures/**/.terraform/
 
-# Keep windows files with windows line endings
 *.winfile eol=crlf
 *.pem
-terraform-provider-ejbca
+bin
+.build

.go-version

@@ -0,0 +1 @@
+1.22.3

.golangci.yml

@@ -1,27 +1,31 @@
-# Visit https://golangci-lint.run/ for usage documentation
-# and information on other useful linters
-issues:
-  max-per-linter: 0
-  max-same-issues: 0
+run:
+  # timeout for analysis, e.g. 30s, 5m, default is 1m
+  timeout: 12m
+
+  skip-dirs:
+    - testdata$
+    - test/mock
+
+  skip-files:
+    - ".*\\.pb\\.go"
 
 linters:
-  disable-all: true
   enable:
+    - bodyclose
     - durationcheck
-    - errcheck
-    - exportloopref
-    - forcetypeassert
-    - godot
-    - gofmt
-    - gosimple
-    - ineffassign
-    - makezero
+    - errorlint
+    - goimports
+    - revive
+    - gosec
     - misspell
-    - nilerr
-    - predeclared
-    - staticcheck
-    - tenv
+    - nakedret
     - unconvert
     - unparam
-    - unused
-    - vet
+    - whitespace
+    - gocritic
+    - nolintlint
+
+linters-settings:
+  revive:
+    # minimal confidence for issues, default is 0.8
+    confidence: 0.0

.markdownlint.yaml

@@ -0,0 +1,7 @@
+MD013: false
+# We are not interested on requesting output when using "$" on shell documentation
+MD014: false
+MD024:
+  siblings_only: true
+# we use emphasis on all node attestors
+MD036: false

.tool-versions

@@ -0,0 +1,2 @@
+golangci_lint v1.55.0
+markdown_lint v0.37.0

CHANGELOG.md

@@ -1,3 +1,12 @@
-## 0.1.0 (Unreleased)
+# v1.0.0
+## Features
+* First public release of EJBCA Terraform Provider
+    * Create and manage state of certificates requested from EJBCA. The ejbca_certificate resource requires a PEM-encoded PKCS#10 certificate, and uses the EJBCA PKCS#10 Enrollment endpoint. The end-entity, specified by end_entity_name, is either created in EJBCA or used for enrollment if it already exists.
+    * EJBCA Community & EJBCA Enterprise are both supported.
 
-FEATURES:
+# v1.1.0
+## Features
+* mTLS and OAuth now supported authentication mechanisms.
+* Support automatic renewal of certificates expiring within `early_renewal_hours`.
+* Resource now flags for recreation in plan modifier step if certificate has been revoked in EJBCA.
+