cyberark / conjur-openapi-spec

OpenAPI v3 specification for Conjur / DAP v10+
https://conjur.org
Apache License 2.0
11 stars 2 forks source link

Use ca-cert variable for keycloak tests #227

Closed gl-johnson closed 1 year ago

gl-johnson commented 1 year ago

Desired Outcome

Fix pipeline failures due to OpenSSL changes.

Implemented Changes

Use updated authn-oidc configurability to provide the CA cert via Conjur policy

NOTE: this update is not required for this flow to work. The new ca-cert variable does not break the previous strategy. The reason these tests failed was a faulty openssl command:

- openssl x509 -hash -in /etc/ssl/certs/keycloak.pem -out /dev/null
+ openssl x509 -hash -in /etc/ssl/certs/keycloak.pem --noout

Additional changes:

NOTE: Kong examples are still failing due to changes with the Inso CLI that will be resolved in a separate effort.

Definition of Done

At least 1 todo must be completed in the sections below for the PR to be merged.

Changelog

Test coverage

Documentation

Behavior

Security