Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OIDC does not work with custom CA #59

Closed
jakolehm opened this issue Oct 31, 2019 · 3 comments
Closed

OIDC does not work with custom CA #59

jakolehm opened this issue Oct 31, 2019 · 3 comments
Labels
bug Something isn't working

Comments

@jakolehm
Copy link
Contributor

Describe the bug
OIDC authentication does not work if idp-issuer-url uses custom CA.

Logs:

Invalid kubeconfig context test-cluster
AggregateError: RequestError: unable to verify the first certificate at ClientRequest.<anonymous> (/Applications/Lens.app/Contents/Resources/app.asar/node_modules/got/index.js:182:22) RequestError: unable to verify the first certificate at ClientRequest.<anonymous>

Kubeconfig:

apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: DATA+OMITTED
    server: https://ucp:6443
  name: test-cluster
contexts:
- context:
    cluster: test-cluster
    user: me
  name: test-cluster
current-context: test-cluster
kind: Config
preferences: {}
users:
- name: me
  user:
    auth-provider:
      config:
        client-id: oidc
        client-secret: REDACTED
        id-token: REDACTED
        idp-issuer-url: https://ucp:32000
        refresh-token: REDACTED
      name: oidc

Additional context
This is probably a bug with ts/js kubernetes client library.

@jakolehm jakolehm added the bug Something isn't working label Oct 31, 2019
@jnummelin
Copy link
Contributor

See upstream issue: kubernetes-client/javascript#360

@jakolehm
Copy link
Contributor Author

jakolehm commented Nov 2, 2019

Fixed in 2.4.0.

@jakolehm jakolehm closed this as completed Nov 2, 2019
@djgilcrease
Copy link

djgilcrease commented Nov 4, 2019

This is not fixed. I have v2.4.1 and I still see this issue

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants