mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-24 12:15:52 +00:00
test/e2e: fix the OIDC discovery test with ECDSA service account key
By default oidc library enables only `RS256` signature validation method. Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>
This commit is contained in:
parent
3d48f0d1dd
commit
f9aaf71ccb
@ -18,7 +18,7 @@ dependencies:
|
||||
|
||||
# agnhost: bump this one first
|
||||
- name: "agnhost"
|
||||
version: "2.30"
|
||||
version: "2.31"
|
||||
refPaths:
|
||||
- path: test/images/agnhost/VERSION
|
||||
match: \d.\d
|
||||
|
@ -1 +1 @@
|
||||
2.30
|
||||
2.31
|
||||
|
@ -51,7 +51,7 @@ import (
|
||||
func main() {
|
||||
rootCmd := &cobra.Command{
|
||||
Use: "app",
|
||||
Version: "2.30",
|
||||
Version: "2.31",
|
||||
}
|
||||
|
||||
rootCmd.AddCommand(auditproxy.CmdAuditProxy)
|
||||
|
@ -97,7 +97,10 @@ func main(cmd *cobra.Command, args []string) {
|
||||
}
|
||||
log.Printf("OK: Constructed OIDC provider for issuer %v", unsafeClaims.Issuer)
|
||||
|
||||
validTok, err := iss.Verifier(&oidc.Config{ClientID: audience}).Verify(ctx, raw)
|
||||
validTok, err := iss.Verifier(&oidc.Config{
|
||||
ClientID: audience,
|
||||
SupportedSigningAlgs: []string{oidc.RS256, oidc.ES256},
|
||||
}).Verify(ctx, raw)
|
||||
if err != nil {
|
||||
log.Fatal(err)
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user