This check ensures the access token may be used
with the Kubernetes API and does return a 401
Unauthorized response when it's used.

…cess-token

CNJR-3063: Kubernetes service account token validation

In this scenario, the k8s API returns 403 Forbidden on
 the `apis/` endpoint. When this occurs, we present
a message that the most likely cause is missing the
'system:discovery' role binding on the service account.

…i-discovery

CNJR-3064: Kubernetes Authn Status - Validate API discovery permissions

…olicy

CNJR-2495: Update ca-cert usage for OIDC dev/ci environments

…st-CNJR-1428

Skip flaky test in http proxy

Previously we handle some specific cases of "record not found" foreign key constraint violations. This approach is more general

…eign-key

Handle record not found foreign key constraint violations

CNJR-2516: Integration tests for proxy support in OIDC authenticator

Will expire next on Jan 7 2034

CNJR-3584: Refresh self-signed certs used in AuthnJWT Cucumber tests

Previously we were accessing the Role Credentials
object directly. However, ChangePassword was not
doing this safely in the case the Credentials had not
yet been created. This resulted in an error:
```
error: failed to set password and rotate API key: undefined method `password=' for nil:NilClass
```

…-reset-rebased

Cnjr 2751 user password reset rebased

Add conjur witchers to approvers for the *.md files also

CNJR-2876: Update CODEOWNERS

…rm64

CNJR-3427: Prepare packages for arm64

…for-multiarch

CNJR-2806: Fix bill of materials for multi-arch images

CNJR-2702 Update conjur-cli to go version

CNJR-5196 update REXML to mitigate CVE-2024-49761

As part of the push to GA, I'm removing this work from the initial effort to allow us to treat
much of this functionality as individual efforts that are part of our planning process.

This commit introduces a context object to resources related to Policy Factories. This context
object is intended to provide role & IP address to the lower parts of the implementation to
support audit.

This commit adds support for the lower level (role/variable/policy) audit events which occur
during Policy Factory creation and usage.  We'll be adding Policy Factory specific events in
a future effort.

…tory-audit-v2

Adds Audit Events for Factory-created Roles/Resources

CNJR-6107: Implement Raw Diff Mapper

CNJR-6999 Policy Dry Run Create

- The DTOs we created for the new Conjur Primitives include a required validation `policy_id` that prevented the admin role or root resources from being turned into a DTO (due to being nil)
- That validation rule has been removed

- Ruby is "pass by object reference" which results in the potential for nested objects to be passed by reference
- This causes unexpected behavior where changes done to a created/updated/deleted record might appear in multiple places during the mapping process

- Includes the original state of resources-to-be-updated, as well as the final state after the proposed changes have been applied to it
- Lint existing controller tests
- Add business logic to produce final diff; this is required to ensure changes to ownership are captured in the diff without returning duplicates across the diff results
- Update loader tests to use mock the policy_diff class. This class now includes business logic that these tests don't care about, so they've been mocked out

CNJR-6109 Add update results to dryrun REST API Response

CNJR-6108 Add delete items to policy dryrun REST API response

Temporarily disable security scans

…CNJR-7203

Revert "Temporarily disable security scans"

Co-authored-by: Ghea Chaw <[email protected]>

CNJR-0000: Update VSCode debugging instructions

Bumps [json-jwt](https://github.com/nov/json-jwt) from 1.16.3 to 1.16.6.
- [Release notes](https://github.com/nov/json-jwt/releases)
- [Changelog](https://github.com/nov/json-jwt/blob/main/CHANGELOG.md)
- [Commits](nov/json-jwt@v1.16.3...v1.16.6)

---
updated-dependencies:
- dependency-name: json-jwt
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>