gitlab: support for group whitelist, add tests

cmd/dex/serve.go: log static client name instead of ID

Signed-off-by: Yann Soubeyrand <yann.soubeyrand@gmx.fr>

Update Docker build/image

- Update build container to golang:1.12.4-alpine
- Update dex image to alpine:3.9
- Run dex as non-root user
Signed-off-by: Stephen Augustus <saugustus@vmware.com>

Add option to OIDC connecter to override email_verified to true

Fix typo.

Add logger interface and stop relying on Logrus directly

Fix typo

production users: add Banzai Cloud

Update modules for go 1.11.4+

Go 1.11.3 changed how checksums are created in some cases, which caused
failures building via modules. (ref golang/go#29278)

Update the checksums for the failing modules.

To catch this is the future, a modules build was added to the build matrix. I
also noted that we were pinning the `.0` patchlevel of each go version which
wouldn't have picked this up, updated it to build with the latest patch
release.

Use github login as the id

server: update health check endpoint to query storage periodically

Instead of querying the storage every time a health check is performed
query it periodically and save the result.

Display access token in example app

ldap_test: add filter tests

Add Active Directory and kubelogin integration sample.

The filters for user and group searches hadn't been included in our LDAP
tests. Now they are.

The concrete test cases are somewhat contrived, but that shouldn't
matter too much. Also note that the example queries I've used are not
supported in AD: https://stackoverflow.com/a/10043452Signed-off-by: Stephan Renatus <srenatus@chef.io>

For downstream apps using a github handle is much simpler than working
with numbers.

WHilst the number is stable and the handle is not - GitHUb does give you
a big scary wanring if you try and change it that bad things may happen
to you, and generally few users ever change it.

This can be enabled with a configuration option `useLoginAsId`

update MAINTAINERS, mirror guidelines into dev doc

Bump minimum TLS protocol to TLSv1.2

Some environments are subject to strict rules about the permitted TLS
protocol verion and available ciphers. Setting TLSv1.2 as the minimum
version ensures we do not use weaker protocols. We've opted against
making this configurable given the age of TLSv1.2 and the increasing
push to deprecate TLSv1.1 and older.

The PreferServerCipherSuites setting is also commonly flagged by SSL
quality scanning tools. Since Go provides a relatively modern set of
default ciphers by default, defaulting this to true is unlikely to
make much practical difference.
Signed-off-by: Steven Danna <steve@chef.io>

Signed-off-by: Stephan Renatus <srenatus@chef.io>