Skip to content

[v12] Kubernetes External Joining: static_jwks implementation (#30225)#31704

Merged
strideynet merged 3 commits intobranch/v12from
strideynet/v12/backport-30225
Sep 12, 2023
Merged

[v12] Kubernetes External Joining: static_jwks implementation (#30225)#31704
strideynet merged 3 commits intobranch/v12from
strideynet/v12/backport-30225

Conversation

@strideynet
Copy link
Copy Markdown
Contributor

Backports #30225

* Add JWKS baseed kubernetes toekn validator

* Add types for static_jwks kubernetes join type

* Add validation for new fields on Provisiontoken

* SPAG

* Add support into tbot for kubernetes join method

* Wire static_jwks implementation into auth.Server.checkKubernetesJoinRequest

* fix-imports

* Add JWKS tests for `kubernetestoken`

* Fix TestIDTokenValidator_Validate

* Ensure token is bound

* Fix mistakenely renamed comments

* Tidier return type

* Refactor tests for slicker UI

* Inject jwks token validator for test substitution

* Add test cases for static_jwks to lib/auth kube joining test

* Remove TODO

* Add more test cases to token validation

* Add enforcement of maximum TTL

* Regenerate operator crd

* Improve comments on proto

* Rerun ?? generation ?? of ?? operator ?? protos ??

* Remove outdated comment
@public-teleport-github-review-bot public-teleport-github-review-bot Bot removed the request for review from r0mant September 11, 2023 16:48
@strideynet strideynet added this pull request to the merge queue Sep 12, 2023
Merged via the queue into branch/v12 with commit 1ecd94c Sep 12, 2023
@strideynet strideynet deleted the strideynet/v12/backport-30225 branch September 12, 2023 07:59
@camscale camscale mentioned this pull request Sep 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants