Skip to content

OIDC: auto provisioning lets you create a client with any name #147

@mangelajo

Description

@mangelajo
$ jmp login --client pepe --insecure-tls-config --endpoint grpc.jumpstarter-lab.axxx:443 --namespace jumpstarter-lab --issuer https://xxx/auth/realms/xxx
Insecure TLS config is enabled. Are you sure you want to continue? [y/N]: y
Enter the Jumpstarter exporter name: y
Allow unsafe driver client imports? [y/N]: y
Please open the URL in browser:  https://xxx/auth/realms/xxx/protocol/openid-connect/auth?response_type=code&client_id=jumpstarter-cli&redirect_uri=http%3A%2F%2Flocalhost%3A50767%2Fcallback&scope=openid+profile&state=H1XxmpN2AVHDIjm4dabOr8TStmh8jm
➜  ~ jmp config client list
CURRENT  ALIAS     ENDPOINT                                                                      PATH
         pepe      grpc.jumpstarter-lab.apps.xxx:443  /Users/ajo/.config/jumpstarter/clients/pepe.yaml
➜  ~ cat /Users/ajo/.config/jumpstarter/clients/pepe.yaml
apiVersion: jumpstarter.dev/v1alpha1
kind: ClientConfig
metadata:
  namespace: jumpstarter-lab
  name: y

$ oc get clients -A
jumpstarter-lab y 13s

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions