search

hashicorp / vault-plugin-auth-kubernetes

Vault authentication plugin for Kubernetes Service Accounts
https://www.vaultproject.io/docs/auth/kubernetes.html
Mozilla Public License 2.0
206 stars 62 forks source link

JWT signing algorithm ES384 became unsupported since version 0.13.0 #159

Closed jeroenvdheuvel closed 1 year ago

jeroenvdheuvel commented 1 year ago

The JWT signing algorithm ES384 became unsupported after switch from golang-jwt to cap+jose. Likely due to a typo the RS384 algorithm is supported twice while ES384 is no longer supported. image

Kubernetes officially supports this algorithm. That means that Kubernetes clusters that use this algorithm aren't able to upgrade to Vault 1.11 successfully. Because Vault 1.11. is using version 1.13. of the vault-plugin-auth-kubernetes.

heatherezell commented 1 year ago

Closing as the linked PR was merged. :)