Skip to content

[v14] Kubernetes External Joining: static_jwks implementation (#30225)#31702

Merged
strideynet merged 1 commit intobranch/v14from
strideynet/v14/backport-30225
Sep 13, 2023
Merged

[v14] Kubernetes External Joining: static_jwks implementation (#30225)#31702
strideynet merged 1 commit intobranch/v14from
strideynet/v14/backport-30225

Conversation

@strideynet
Copy link
Copy Markdown
Contributor

Backports #30225

* Add JWKS baseed kubernetes toekn validator

* Add types for static_jwks kubernetes join type

* Add validation for new fields on Provisiontoken

* SPAG

* Add support into tbot for kubernetes join method

* Wire static_jwks implementation into auth.Server.checkKubernetesJoinRequest

* fix-imports

* Add JWKS tests for `kubernetestoken`

* Fix TestIDTokenValidator_Validate

* Ensure token is bound

* Fix mistakenely renamed comments

* Tidier return type

* Refactor tests for slicker UI

* Inject jwks token validator for test substitution

* Add test cases for static_jwks to lib/auth kube joining test

* Remove TODO

* Add more test cases to token validation

* Add enforcement of maximum TTL

* Regenerate operator crd

* Improve comments on proto

* Rerun ?? generation ?? of ?? operator ?? protos ??

* Remove outdated comment
@strideynet strideynet added the blocked is blocked by another item - please include the blocker label Sep 11, 2023
@strideynet
Copy link
Copy Markdown
Contributor Author

Blocked until v14.0.0 is released.

@public-teleport-github-review-bot public-teleport-github-review-bot Bot removed the request for review from r0mant September 11, 2023 16:47
@strideynet strideynet removed the blocked is blocked by another item - please include the blocker label Sep 13, 2023
@strideynet strideynet added this pull request to the merge queue Sep 13, 2023
Merged via the queue into branch/v14 with commit 241b9f4 Sep 13, 2023
@strideynet strideynet deleted the strideynet/v14/backport-30225 branch September 13, 2023 07:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants