Skip to content

Backport of Dynamically create jwks clusters for jwt providers into release/1.16.x#17963

Merged
hc-github-team-consul-core merged 1 commit intorelease/1.16.xfrom
backport/issue-17886-jwks/steadily-unified-bear
Jun 29, 2023
Merged

Backport of Dynamically create jwks clusters for jwt providers into release/1.16.x#17963
hc-github-team-consul-core merged 1 commit intorelease/1.16.xfrom
backport/issue-17886-jwks/steadily-unified-bear

Conversation

@hc-github-team-consul-core
Copy link
Collaborator

Backport

This PR is auto-generated from #17944 to be assessed for backporting due to the inclusion of the label backport/1.16.

The below text is copied from the body of the original PR.


Description

  • 1/n PRs to improve jwks clusters for jwt providers authentication with intention
  • This PR allows us to create a cluster per jwt-config entry. Prior to this, the envoy config would fail with the following message: failed: [cluster = jwks_cluster] is not configured
  • The cluster has more configuration like certs and other entries that we can expose. We will be exposing them as part of a follow up PR.

Testing & Reproduction steps

  • create a jwt provider that has a remote JWKS
  • write an intention referencing that jwt provider
  • make a request without a jwt (this request should fail with Jwt is missing% )
  • make a request with a correct jwt (this should be successful)

PR Checklist

  • Follow up PRs with config entry changes and fixing the todos

Overview of commits

@hc-github-team-consul-core hc-github-team-consul-core force-pushed the backport/issue-17886-jwks/steadily-unified-bear branch 2 times, most recently from fdd021e to 2a47033 Compare June 29, 2023 20:38
@hc-github-team-consul-core hc-github-team-consul-core enabled auto-merge (squash) June 29, 2023 20:38
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Consul Bot automated PR

@github-actions github-actions bot added the theme/envoy/xds Related to Envoy support label Jun 29, 2023
@hc-github-team-consul-core hc-github-team-consul-core merged commit 59915e3 into release/1.16.x Jun 29, 2023
@hc-github-team-consul-core hc-github-team-consul-core deleted the backport/issue-17886-jwks/steadily-unified-bear branch June 29, 2023 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

theme/envoy/xds Related to Envoy support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants