Skip to content
Snippets Groups Projects
  • Jakub Darmach's avatar
    98929761
    Keystone OIDC JWKS fix · 98929761
    Jakub Darmach authored
    JWT failed to validate on auth-oidc endpoint used by openstack cli
    with "could not find key with kid: XX" error. To fix this we need
    to use jwks provided in "jwks_uri" by OIDC metadata endpoint.
    
    Missing "ServerName" directive from vhost config causes redirection
    to fail in some cases when external tls is enabled.
    
      - added "keystone_federation_oidc_jwks_uri" variable
      - added "OIDCOAuthVerifyJwksUri" to keystone vhost config
      - added "ServerName" to keystone vhost config
      - jinja templating additional whitespace trimmed to
        correct end result indentation and empty newlines
    
    Closes-bug: 1990375
    Change-Id: I4f5c1bd8be8e23cf6299ca4bdfd79e9d98c9a9eb
    Keystone OIDC JWKS fix
    Jakub Darmach authored
    JWT failed to validate on auth-oidc endpoint used by openstack cli
    with "could not find key with kid: XX" error. To fix this we need
    to use jwks provided in "jwks_uri" by OIDC metadata endpoint.
    
    Missing "ServerName" directive from vhost config causes redirection
    to fail in some cases when external tls is enabled.
    
      - added "keystone_federation_oidc_jwks_uri" variable
      - added "OIDCOAuthVerifyJwksUri" to keystone vhost config
      - added "ServerName" to keystone vhost config
      - jinja templating additional whitespace trimmed to
        correct end result indentation and empty newlines
    
    Closes-bug: 1990375
    Change-Id: I4f5c1bd8be8e23cf6299ca4bdfd79e9d98c9a9eb