Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Properly propagate private key for azure app #48550

Merged
merged 3 commits into from
Nov 12, 2024

Conversation

greedy52
Copy link
Contributor

@greedy52 greedy52 commented Nov 6, 2024

Fixes #48522

Azure middleware needs to use a private key to sign JWT and the server verifies the JWT using the App TLS cert. This is broken after the App TLS cert uses its own key instead of the core one.

Copy link

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-48550.d3pp5qlev8mo18.amplifyapp.com

@greedy52 greedy52 force-pushed the STeve/48522_fix_azure_cli_private_key branch from 9ee501b to b264cf7 Compare November 6, 2024 21:57
@greedy52 greedy52 changed the title Properly propagate new private key for azure app Properly propagate private key for azure app Nov 6, 2024
@greedy52 greedy52 marked this pull request as ready for review November 7, 2024 17:16
@github-actions github-actions bot added size/sm tsh tsh - Teleport's command line tool for logging into nodes running Teleport. labels Nov 7, 2024
tool/tsh/common/app_azure.go Show resolved Hide resolved
Copy link
Contributor

@gabrielcorado gabrielcorado left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just tested with my test plan setup and confirmed this fix the issue. Thanks!

@greedy52 greedy52 added the no-changelog Indicates that a PR does not require a changelog entry label Nov 8, 2024
@greedy52
Copy link
Contributor Author

Friendly ping @nklaassen and @fspmarshall

Copy link
Contributor

@fspmarshall fspmarshall left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM once existing feedback is addressed.

@public-teleport-github-review-bot public-teleport-github-review-bot bot removed the request for review from kopiczko November 12, 2024 19:04
@greedy52 greedy52 requested a review from nklaassen November 12, 2024 19:19
Copy link
Contributor

@nklaassen nklaassen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for fixing this, my bad 😅

@greedy52 greedy52 added this pull request to the merge queue Nov 12, 2024
Merged via the queue into master with commit 26cb848 Nov 12, 2024
40 checks passed
@greedy52 greedy52 deleted the STeve/48522_fix_azure_cli_private_key branch November 12, 2024 19:56
@public-teleport-github-review-bot

@greedy52 See the table below for backport results.

Branch Result
branch/v17 Create PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/branch/v17 no-changelog Indicates that a PR does not require a changelog entry size/sm tsh tsh - Teleport's command line tool for logging into nodes running Teleport.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Logging in to Azure CLI access not working (application access)
5 participants