-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Identity for oauth aux #1286
Identity for oauth aux #1286
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is it valuable to refactor, and move the oauth2proxy related code to its own package (pkg/apis/oauth2proxy
or similar)?
pkg/apis/radix/v1/radixapptypes.go
Outdated
|
||
// UseAzureIdentity defines that credentials for authenticating using Azure Workload Identity instead of using a ClientSecret. | ||
// +optional | ||
UseAzureIdentity *bool `json:"useAzureIdentity,omitempty"` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
To make it slighly more future proof, could we use something like
Credentials: "secret"|"AzureWorkloadIdentity"
instead? (in case oauth2proxy changes their implementation and supports more providers that we want to support)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Replaced
Moving to oauth2proxy requires moving other code due to cyclic references and several private methods. I think this need to be done without reviewving new functionality. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me!
No description provided.