Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Docker 0.27.4 -> 0.27.5 Keycloak isn't working anymore #2037

Open
celevra opened this issue Oct 20, 2024 · 0 comments
Open

[Bug]: Docker 0.27.4 -> 0.27.5 Keycloak isn't working anymore #2037

celevra opened this issue Oct 20, 2024 · 0 comments
Labels
bug needs triage Waiting for discussion / prioritization by team

Comments

@celevra
Copy link

celevra commented Oct 20, 2024

Steps to Reproduce

this is my provisioner:

   {
      "type": "OIDC",
      "name": "keycloak",
      "clientID": "step-ca",
      "clientSecret": "xxx",
      "configurationEndpoint": "https://xxxt/realms/z/.well-known/openid-configuration",
      "listenAddress": "127.0.0.1:10000",
      "claims": {
         "enableSSHCA": true,
         "disableRenewal": false,
         "allowRenewalAfterExpiry": false,
         "disableSmallstepExtensions": false
      },
      "options": {
         "x509": {},
         "ssh": {
            "template": "{\n    \"type\": {{ toJson .Type }},\n    \"keyId\": {{ toJson .KeyID }},\n    \"principals\": [\"root\"],\n    \"extensions\": {{ toJson .Extensions }},\n    \"criticalOptions\": {{ toJson .CriticalOptions }}\n}\n"
         }
      }
   },

working flaweless on 0.27.4, after upgrade to 0.27.5 i can't use keycloak anymore. I get this error:

time="2024-10-20T07:50:15Z" level=warning duration=12.260905ms duration-ns=12260905 error="authority.Authorize: authority.authorizeSSHSign: provisioner \"keycloak\" is disabled due to an initialization error" fields.time="2024-10-20T07:50:15Z" method=POST name=ca ott=xxx path=/ssh/sign protocol=HTTP/2.0 referer= remote-address=10.101.1.2 request-id=f6aabfc9-4902-4f3b-92d6-8561da043dd7 size=95 status=401 user-agent="Smallstep CLI/0.23.3 (linux/amd64)" user-id=

downgrade to 0.27.4 and everything works again

Your Environment

  • OS - Ubuntu -> Docker
  • step-ca Version -> 0.27.5

Expected Behavior

minor update should break the oidc config

Actual Behavior

minor update breaks the oidc config

Additional Context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

@celevra celevra added bug needs triage Waiting for discussion / prioritization by team labels Oct 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug needs triage Waiting for discussion / prioritization by team
Projects
None yet
Development

No branches or pull requests

1 participant