Describe the bug
Kubernetes api is returning corupted jwks_uri containing addtitional double quotes.
https://\"REDACTED.hcp.westeurope.azmk8s.io\":443
I haven't found any important differencies between aks instances except that the aks instance with corrupted jwks_uri is the older one.
The cluster upgrades didn't have any effect. (Tested 1.25, 1.27, 1.29.4)
Instance1:
CreationTimestamp: Tue, 07 Dec 2021 13:43:38 +0100
kubectl get --raw /.well-known/openid-configuration
{"issuer":"https://xxx1.hcp.westeurope.azmk8s.io","jwks_uri":"https://\"xxx1.hcp.westeurope.azmk8s.io\":443/openid/v1/jwks","response_types_supported":["id_token"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"]}
Instance2:
CreationTimestamp: Thu, 18 May 2023 14:01:37 +0200
kubectl get --raw /.well-known/openid-configuration
{"issuer":"https://xxx2.hcp.westeurope.azmk8s.io","jwks_uri":"https://xxx2.hcp.westeurope.azmk8s.io:443/openid/v1/jwks","response_types_supported":["id_token"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"]}
Describe the bug Kubernetes api is returning corupted jwks_uri containing addtitional double quotes.
https://\"REDACTED.hcp.westeurope.azmk8s.io\":443
I haven't found any important differencies between aks instances except that the aks instance with corrupted jwks_uri is the older one. The cluster upgrades didn't have any effect. (Tested 1.25, 1.27, 1.29.4)Also token audience seems wrong: POST http://127.0.0.1:8007/api/v1/namespaces/default/serviceaccounts/default/token Body: {"apiVersion": "authentication.k8s.io/v1", "kind": "TokenRequest"}
"audiences": [ "https://xxx1.hcp.westeurope.azmk8s.io", "\"xxx1.hcp.westeurope.azmk8s.io\"" ],
To Reproduce kubectl get --raw /.well-known/openid-configuration
Expected behavior jwks_uri should have the same format without additional double quotes across all instances
Screenshots
Environment (please complete the following information):
Additional context