Skip to content

AWSOIDC: Compute Proxy's Endpoint for issuing a token#37253

Merged
marcoandredinis merged 3 commits intomasterfrom
marco/awsoidc-token-issuer-auth
Jan 26, 2024
Merged

AWSOIDC: Compute Proxy's Endpoint for issuing a token#37253
marcoandredinis merged 3 commits intomasterfrom
marco/awsoidc-token-issuer-auth

Conversation

@marcoandredinis
Copy link
Copy Markdown
Contributor

Instead of receiving the issuer URL as param, use the internal state of the proxies to fetch the public endpoint.

This deprecates the field so that old clients can still talk to the AuthServer, but their Issuer param is ignored.

Related: #37245

changelog: AWSOIDC Token Generation API no longer accepts the issuer.

@marcoandredinis marcoandredinis added discover Issues related to Teleport Discover backport/branch/v14 labels Jan 25, 2024
Instead of receiving the issuer URL as param, use the internal state of
the proxies to fetch the public endpoint.

This deprecates the field so that old clients can still talk to the
AuthServer, but their Issuer param is ignored.
@marcoandredinis marcoandredinis force-pushed the marco/awsoidc-token-issuer-auth branch from 4b203bd to 489a4be Compare January 25, 2024 14:42
@marcoandredinis marcoandredinis marked this pull request as ready for review January 25, 2024 14:59
Comment thread lib/auth/grpcserver.go Outdated
Comment thread lib/auth/integration/integrationv1/service.go Outdated
Copy link
Copy Markdown
Contributor

@rosstimothy rosstimothy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚢

Copy link
Copy Markdown
Contributor

@gzdunek gzdunek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm leaving the approval, but I'm not familiar with this part of the codebase.

@marcoandredinis marcoandredinis added this pull request to the merge queue Jan 26, 2024
Merged via the queue into master with commit 876362b Jan 26, 2024
@marcoandredinis marcoandredinis deleted the marco/awsoidc-token-issuer-auth branch January 26, 2024 13:55
@public-teleport-github-review-bot
Copy link
Copy Markdown

@marcoandredinis See the table below for backport results.

Branch Result
branch/v14 Failed
branch/v15 Create PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

discover Issues related to Teleport Discover size/sm

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants