Skip to content

feat: Add CLI OIDC configuration for Tokensmith - #56

Open
alexlovelltroy wants to merge 3 commits into
mainfrom
feature/vault-oidc-cli-client
Open

alexlovelltroy wants to merge 3 commits into
mainfrom
feature/vault-oidc-cli-client

Conversation

@alexlovelltroy

Copy link
Copy Markdown
Member
  • Introduced CLIOIDCConfig to TokensmithSpec for managing CLI OIDC client settings.
  • Implemented validation for CLI OIDC redirect URIs and assignments in webhook tests.
  • Enhanced deep copy functionality for CLIOIDCConfig.
  • Updated CRD to include CLI OIDC properties with defaults.
  • Added documentation for CLI OIDC testing and publishing procedures.
  • Modified Vault reconciler to provision both confidential and public OIDC clients.
  • Implemented tests for CLI client creation and validation.

Checklist

  • My code follows the style guidelines of this project
  • I have added/updated comments where needed
  • I have added tests that prove my fix is effective or my feature works
  • I have run make test (or equivalent) locally and all tests pass
  • I have updated the relevant documentation (CLI examples, man pages, README, other docs, etc.)
  • DCO Sign-off: All commits are signed off (git commit -s) with my real name and email
  • REUSE Compliance:
    • Each new/modified source file has SPDX copyright and license headers
    • Any non-commentable files include a <filename>.license sidecar
    • All referenced licenses are present in the LICENSES/ directory

Type of Change

  • Bug fix
  • New feature
  • Breaking change
  • Documentation update
  • Dependency update
  • Build system/CI

- Introduced CLIOIDCConfig to TokensmithSpec for managing CLI OIDC client settings.
- Implemented validation for CLI OIDC redirect URIs and assignments in webhook tests.
- Enhanced deep copy functionality for CLIOIDCConfig.
- Updated CRD to include CLI OIDC properties with defaults.
- Added documentation for CLI OIDC testing and publishing procedures.
- Modified Vault reconciler to provision both confidential and public OIDC clients.
- Implemented tests for CLI client creation and validation.

Signed-off-by: Alex Lovell-Troy <alovelltroy@lanl.gov>
@alexlovelltroy
alexlovelltroy force-pushed the feature/vault-oidc-cli-client branch from ff0b4de to a229aca Compare September 22, 2026 12:39
- Changed the type of `rateLimitRequests` from `uint` to `uint32` for better compatibility.
- Removed unnecessary variable declarations for rate limit type in `buildSMDRateLimit` function.
- Updated error handling in `EnsureBucket`, `bucketReachable`, `DeleteBucket`, and `emptyBucket` methods to use `errors.AsType` for cleaner type assertions.

Signed-off-by: Alex Lovell-Troy <alovelltroy@lanl.gov>
…t config

Signed-off-by: Alex Lovell-Troy <alovelltroy@lanl.gov>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant