-
Notifications
You must be signed in to change notification settings - Fork 503
Open
Labels
bugneeds triageWaiting for discussion / prioritization by teamWaiting for discussion / prioritization by team
Description
Steps to Reproduce
this is my provisioner:
{
"type": "OIDC",
"name": "keycloak",
"clientID": "step-ca",
"clientSecret": "xxx",
"configurationEndpoint": "https://xxxt/realms/z/.well-known/openid-configuration",
"listenAddress": "127.0.0.1:10000",
"claims": {
"enableSSHCA": true,
"disableRenewal": false,
"allowRenewalAfterExpiry": false,
"disableSmallstepExtensions": false
},
"options": {
"x509": {},
"ssh": {
"template": "{\n \"type\": {{ toJson .Type }},\n \"keyId\": {{ toJson .KeyID }},\n \"principals\": [\"root\"],\n \"extensions\": {{ toJson .Extensions }},\n \"criticalOptions\": {{ toJson .CriticalOptions }}\n}\n"
}
}
},
working flaweless on 0.27.4, after upgrade to 0.27.5 i can't use keycloak anymore. I get this error:
time="2024-10-20T07:50:15Z" level=warning duration=12.260905ms duration-ns=12260905 error="authority.Authorize: authority.authorizeSSHSign: provisioner \"keycloak\" is disabled due to an initialization error" fields.time="2024-10-20T07:50:15Z" method=POST name=ca ott=xxx path=/ssh/sign protocol=HTTP/2.0 referer= remote-address=10.101.1.2 request-id=f6aabfc9-4902-4f3b-92d6-8561da043dd7 size=95 status=401 user-agent="Smallstep CLI/0.23.3 (linux/amd64)" user-id=
downgrade to 0.27.4 and everything works again
Your Environment
- OS - Ubuntu -> Docker
step-ca
Version -> 0.27.5
Expected Behavior
minor update should break the oidc config
Actual Behavior
minor update breaks the oidc config
Additional Context
No response
Contributing
Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).
Metadata
Metadata
Assignees
Labels
bugneeds triageWaiting for discussion / prioritization by teamWaiting for discussion / prioritization by team