-
Notifications
You must be signed in to change notification settings - Fork 50
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: cluster-wizard UI & oidc-scopes #3209
Conversation
if (!user?.user?.exec?.args?.includes('--oidc-extra-scope=openid')) { | ||
user?.user?.exec?.args?.push('--oidc-extra-scope=openid'); | ||
} | ||
}); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is there a specific reason why you don't want to go this way?
https://github.com/kyma-project/busola/pull/3289/files
Busola is trying to mimic the behavior of the kubelogin
command, which does not require openid
to be passed as --oidc-extra-scope
. Imho you should implement it the same way.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi Christian, thanks for your review and contribution.
Yes you are correct, I was unaware of your PR, next time you could attach it to the issue to make it more apparent :D
I have a follow-up question to you: should all the defined --oidc-extra-scope
be passed along with the openid scope in the scope
argument of the UserManager
constructor?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
meaning if you have defined --oidc-extra-scope=scope_a
, --oidc-extra-scope=scope_b
should the scope passed to the oidc UserManager be scope: "openid scope_a scope_b"
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok, I thought it would be enough to link the fix to the issue. Next time I'll put it right at the beginning of the issue description. Regarding your question: you're right, the scopes have to be passed like this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks, I will incorporate your changes in my PR 👍
918b5c4
to
41abccf
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Description
Changes proposed in this pull request:
Related issue(s)
#3055 #3288
Definition of done
backlog#4567