Skip to content

CLOUDP-314903 [OIDC] CRD Config Propagation to Automation Config #60

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 31 commits into
base: master
Choose a base branch
from

Conversation

MaciejKaras
Copy link
Collaborator

@MaciejKaras MaciejKaras commented Apr 29, 2025

Summary

Proof of Work

Checklist

  • Have you linked a jira ticket and/or is the ticket in the title?
  • Have you checked whether your jira ticket required DOCSP changes?
  • Have you checked for release_note changes?

Reminder (Please remove this when merging)

  • Please try to Approve or Reject Changes the PR, keep PRs in review as short as possible
  • Our Short Guide for PRs: Link
  • Remember the following Communication Standards - use comment prefixes for clarity:
    • blocking: Must be addressed before approval.
    • follow-up: Can be addressed in a later PR or ticket.
    • q: Clarifying question.
    • nit: Non-blocking suggestions.
    • note: Side-note, non-actionable. Example: Praise
    • --> no prefix is considered a question

@MaciejKaras MaciejKaras force-pushed the feature/mk-oidc-crd-propagation branch from cad403d to 0ce0874 Compare April 30, 2025 07:46
})
}

func oidcProviderConfigEqual(l oidc.ProviderConfig, r oidc.ProviderConfig) bool {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit:

Suggested change
func oidcProviderConfigEqual(l oidc.ProviderConfig, r oidc.ProviderConfig) bool {
func oidcProviderConfigEqual(l, r oidc.ProviderConfig) bool {
return l.AuthNamePrefix == r.AuthNamePrefix &&
l.Audience == r.Audience &&
l.IssuerUri == r.IssuerUri &&
slices.Equal(l.RequestedScopes, r.RequestedScopes) &&
l.UserClaim == r.UserClaim &&
l.GroupsClaim == r.GroupsClaim &&
l.SupportsHumanFlows == r.SupportsHumanFlows &&
l.UseAuthorizationClaim == r.UseAuthorizationClaim
}

pattern: ^[a-zA-Z0-9-_]+$
type: string
groupsClaim:
default: groups
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we give a default value here when we are throwing error if the groupsClaim is absent?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants