Kubernetes api - returning jwks_uri with additional double quotes

[michal-kania]

Describe the bug Kubernetes api is returning corupted jwks_uri containing addtitional double quotes. https://\"REDACTED.hcp.westeurope.azmk8s.io\":443 I haven't found any important differencies between aks instances except that the aks instance with corrupted jwks_uri is the older one. The cluster upgrades didn't have any effect. (Tested 1.25, 1.27, 1.29.4)

Instance1: 
CreationTimestamp:  Tue, 07 Dec 2021 13:43:38 +0100
kubectl get --raw /.well-known/openid-configuration
{"issuer":"https://xxx1.hcp.westeurope.azmk8s.io","jwks_uri":"https://\"xxx1.hcp.westeurope.azmk8s.io\":443/openid/v1/jwks","response_types_supported":["id_token"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"]}

Instance2: 
CreationTimestamp:  Thu, 18 May 2023 14:01:37 +0200
kubectl get --raw /.well-known/openid-configuration
{"issuer":"https://xxx2.hcp.westeurope.azmk8s.io","jwks_uri":"https://xxx2.hcp.westeurope.azmk8s.io:443/openid/v1/jwks","response_types_supported":["id_token"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"]}

Also token audience seems wrong: POST http://127.0.0.1:8007/api/v1/namespaces/default/serviceaccounts/default/token Body: {"apiVersion": "authentication.k8s.io/v1", "kind": "TokenRequest"} "audiences": [ "https://xxx1.hcp.westeurope.azmk8s.io", "\"xxx1.hcp.westeurope.azmk8s.io\"" ],

To Reproduce kubectl get --raw /.well-known/openid-configuration

Expected behavior jwks_uri should have the same format without additional double quotes across all instances

Screenshots

Environment (please complete the following information):

• Kubectl v1.30.0
• Kubernetes version 1.25, 1.27, 1.29.4

Additional context

[microsoft-github-policy-service[bot]]

Action required from @aritraghosh, @julia-yin, @AllenWen-at-Azure

[microsoft-github-policy-service[bot]]

Issue needing attention of @Azure/aks-leads

[microsoft-github-policy-service[bot]]

Issue needing attention of @Azure/aks-leads

[microsoft-github-policy-service[bot]]

Issue needing attention of @Azure/aks-leads