-
Notifications
You must be signed in to change notification settings - Fork 16
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add dex-issuer-url
and remove public-url
configuration options
#204
Labels
enhancement
New feature or request
Comments
Thank you for reporting us your feedback! The internal ticket has been created: https://warthogs.atlassian.net/browse/KF-5967.
|
DnPlas
added a commit
that referenced
this issue
Jul 11, 2024
This commit removes the public-url configuration option in favour of the dex-issuer-url one. The way to configure the issuer value for dex-auth is now by getting it from the aforementioned configuration option or by constructing it from dex-auths Kubernetes Service DNS name: "http://<dex-app-name>.<namespace>.svc:5556/dex" Closes #204
DnPlas
added a commit
that referenced
this issue
Jul 23, 2024
* refactor: add dex-issuer-url and remove public-url config options This commit removes the public-url configuration option in favour of the dex-issuer-url one. The way to configure the issuer value for dex-auth is now by getting it from the aforementioned configuration option or by constructing it from dex-auths Kubernetes Service DNS name: "http://<dex-app-name>.<namespace>.svc:5556/dex" Closes #204
Fixed by #209 |
DnPlas
added a commit
that referenced
this issue
Jul 24, 2024
* refactor: add dex-issuer-url and remove public-url config options This commit removes the public-url configuration option in favour of the dex-issuer-url one. The way to configure the issuer value for dex-auth is now by getting it from the aforementioned configuration option or by constructing it from dex-auths Kubernetes Service DNS name: "http://<dex-app-name>.<namespace>.svc:5556/dex" Closes #204
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Context
Because the
issuer
URL in Dex's configuration could be either the application's Kubernetes Service DNS name + thedex
endpoint (e.g.http://<dex-auth-app-name>.<namespace>.svc:5556/dex.
) or a publicly accessible IP/DNS name (e.g.http://foo.com/dex
), this charm should be configurable for the latter case.This task also requires the removal of the
public-url
configuration option as it has been considered misleading and should not be used. Please refer to canonical/bundle-kubeflow#608 for more information.For details about the design, please refer to this spec (internal only).
What needs to get done
public-url
configuration optionhttp://<dex-auth-app-name>.<namespace>.svc:5556/dex
ormodel.config["dex-issuer-url"]
Definition of Done
The charm now gets the
issuer
value from either the configuration option or defaults tohttp://<dex-auth-app-name>.<namespace>.svc:5556/dex
. This can be confirmed by checking the.well-known
endpoint.The text was updated successfully, but these errors were encountered: