search

micahhausler / k8s-oidc-helper

Helper tool for authenticating to Kubernetes using Google's OpenID Connect
MIT License
202 stars 86 forks source link

OOB deprecation with Google #31

Open Wai-Jiang opened 1 year ago

Wai-Jiang commented 1 year ago

When running the k8s-oidc-helper command it will direct me to the application I've created in the google console. However, it will return a 400 response stating the current flow is against google's security policy and the current flow needs to be changed. Further information can be found here: https://developers.google.com/identity/protocols/oauth2/resources/oob-migration. Is there a potential fix for this?

Thanks

phamvinhdat commented 1 year ago

I created a fork and fixed in here https://github.com/phamvinhdat/k8s-oidc-helper

Wai-Jiang commented 1 year ago

I created a fork and fixed in here https://github.com/phamvinhdat/k8s-oidc-helper

Has this been tested? just installed your forked repo and a few errors show when I run the k8s-oidc-helper command

phamvinhdat commented 1 year ago

can you show me the err? I've tested and it ok

Wai-Jiang commented 1 year ago

it shows panic: open ./internal/server/html.html: no such file or directory

Wai-Jiang commented 1 year ago

if you do go install github.com/phamvinhdat/k8s-oidc-helper@latest and then run the k8s-oidc-helper command, it errors.....there's definitely a pathing issue

phamvinhdat commented 1 year ago

yes. It's my fault. I just checked by go run .... I've fixed this problem