9892976119
JWT failed to validate on auth-oidc endpoint used by openstack cli
with "could not find key with kid: XX" error. To fix this we need
to use jwks provided in "jwks_uri" by OIDC metadata endpoint.
Missing "ServerName" directive from vhost config causes redirection
to fail in some cases when external tls is enabled.
- added "keystone_federation_oidc_jwks_uri" variable
- added "OIDCOAuthVerifyJwksUri" to keystone vhost config
- added "ServerName" to keystone vhost config
- jinja templating additional whitespace trimmed to
correct end result indentation and empty newlines
Closes-bug: 1990375
Change-Id: I4f5c1bd8be8e23cf6299ca4bdfd79e9d98c9a9eb
8 lines
266 B
YAML
8 lines
266 B
YAML
---
|
|
fixes:
|
|
- |
|
|
Fixes Keystone OIDC failing to validate JWT because of missing key
|
|
on Azure auth-oidc endpoint. Adds new variable containing JWKS uri
|
|
that delivers missing keys.
|
|
`LP#1990375 <https://bugs.launchpad.net/kolla-ansible/+bug/1990375>`__
|