feat: Cloud support (#2998)

* feat: cloud config

chore: add config tests and auth

chore: add api key for tunnel connection

chore: config changes

chore: fix server close

* chore: mod tidy

* chore: remove unused config options for now

* feat(cmd/flipt): wire in flipt client listener

* chore: revert rm config

* feat: Cloud Authn (#3038)

* feat: start impl of cloud link

* chore: change token param to id_token

Signed-off-by: Mark Phelps <[email protected]>

* chore: start http server

* chore: PR updates

Signed-off-by: Mark Phelps <[email protected]>

* chore: fix write html

Signed-off-by: Mark Phelps <[email protected]>

* chore: rm uneeded struct

Signed-off-by: Mark Phelps <[email protected]>

* chore: fix cue schema

Signed-off-by: Mark Phelps <[email protected]>

* chore: respond to PR feedback, fix schema

* chore: try to fix cli ITs

* chore: set min TLS version

Signed-off-by: Mark Phelps <[email protected]>

---------

Signed-off-by: Mark Phelps <[email protected]>

* feat: Cloud serve (#3041)

* feat: start cloud serve command

* chore: start flipt with new config

* feat: validate JWT; retry reverst connections; check for expiry and existing instance

* chore: handle error response

* chore: add spinner

* Revert "chore: add spinner"

This reverts commit bb35379.

* chore: dont make org/instance/api key required for now

Signed-off-by: Mark Phelps <[email protected]>

* chore: fix tests

Signed-off-by: Mark Phelps <[email protected]>

* feat: impl cloud auth (#3045)

* feat: impl cloud auth

* chore: PR feedback

Signed-off-by: Mark Phelps <[email protected]>

* chore: fix tests

---------

Signed-off-by: Mark Phelps <[email protected]>

* chore: use backoff from reverst

* chore: fix build

Signed-off-by: Mark Phelps <[email protected]>

---------

Signed-off-by: Mark Phelps <[email protected]>

* fix: rm port from cloud host if there (#3060)

Signed-off-by: Mark Phelps <[email protected]>

* feat: update reverst to v0.1.5

Signed-off-by: George MacRorie <[email protected]>

* fix(cloud): handle context canceled healthy shutdown

Signed-off-by: George MacRorie <[email protected]>

* chore: check for existing instance in cloud (#3062)

* chore: check for existing instance in cloud

* chore: close body

Signed-off-by: Mark Phelps <[email protected]>

---------

Signed-off-by: Mark Phelps <[email protected]>

* feat: add cloud audit sink (#3058)

* feat: add cloud audit sink

* chore: cant enforce auth always for cloud

Signed-off-by: Mark Phelps <[email protected]>

* feat: make cloud experimental

* chore: fix schema

* chore: try to fix tests

Signed-off-by: Mark Phelps <[email protected]>

* chore: fmt audit payload

Signed-off-by: Mark Phelps <[email protected]>

* chore: basic cloud audit event test

Signed-off-by: Mark Phelps <[email protected]>

* chore: telemetry test

Signed-off-by: Mark Phelps <[email protected]>

* chore: change serve command desc

Signed-off-by: Mark Phelps <[email protected]>

---------

Signed-off-by: Mark Phelps <[email protected]>

* chore: upgrade reverst

Signed-off-by: Mark Phelps <[email protected]>

---------

Signed-off-by: Mark Phelps <[email protected]>
Signed-off-by: George MacRorie <[email protected]>
Co-authored-by: George MacRorie <[email protected]>

build/testing/cli.go

@@ -409,7 +409,7 @@ exit $?`,
  }
 
  // now there are four including local copy of remote name
- container, err = assertExec(ctx, container, flipt("bundle", "list"),
+ _, err = assertExec(ctx, container, flipt("bundle", "list"),
  stdout(matches(`DIGEST[\s]+REPO[\s]+TAG[\s]+CREATED`)),
  stdout(matches(`[a-f0-9]{7}[\s]+mybundle[\s]+latest[\s]+[0-9]{4}-[0-9]{2}-[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}`)),
  stdout(matches(`[a-f0-9]{7}[\s]+mybundle[\s]+[0-9]{4}-[0-9]{2}-[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}`)),
@@ -420,6 +420,10 @@ exit $?`,
  }
  }
 
+ {
+ // TODO: add tests for flipt cloud commands
+ }
+
  return nil
 }