Skip to content

[Bug]: Docker 0.27.4 -> 0.27.5 Keycloak isn't working anymore #2037

@celevra

Description

@celevra

Steps to Reproduce

this is my provisioner:

   {
      "type": "OIDC",
      "name": "keycloak",
      "clientID": "step-ca",
      "clientSecret": "xxx",
      "configurationEndpoint": "https://xxxt/realms/z/.well-known/openid-configuration",
      "listenAddress": "127.0.0.1:10000",
      "claims": {
         "enableSSHCA": true,
         "disableRenewal": false,
         "allowRenewalAfterExpiry": false,
         "disableSmallstepExtensions": false
      },
      "options": {
         "x509": {},
         "ssh": {
            "template": "{\n    \"type\": {{ toJson .Type }},\n    \"keyId\": {{ toJson .KeyID }},\n    \"principals\": [\"root\"],\n    \"extensions\": {{ toJson .Extensions }},\n    \"criticalOptions\": {{ toJson .CriticalOptions }}\n}\n"
         }
      }
   },

working flaweless on 0.27.4, after upgrade to 0.27.5 i can't use keycloak anymore. I get this error:

time="2024-10-20T07:50:15Z" level=warning duration=12.260905ms duration-ns=12260905 error="authority.Authorize: authority.authorizeSSHSign: provisioner \"keycloak\" is disabled due to an initialization error" fields.time="2024-10-20T07:50:15Z" method=POST name=ca ott=xxx path=/ssh/sign protocol=HTTP/2.0 referer= remote-address=10.101.1.2 request-id=f6aabfc9-4902-4f3b-92d6-8561da043dd7 size=95 status=401 user-agent="Smallstep CLI/0.23.3 (linux/amd64)" user-id=

downgrade to 0.27.4 and everything works again

Your Environment

  • OS - Ubuntu -> Docker
  • step-ca Version -> 0.27.5

Expected Behavior

minor update should break the oidc config

Actual Behavior

minor update breaks the oidc config

Additional Context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugneeds triageWaiting for discussion / prioritization by team

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions