Skip to content

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please release Azure OIDC support #2070

Closed
3 tasks done
adeturner opened this issue Dec 21, 2023 · 0 comments
Closed
3 tasks done

Please release Azure OIDC support #2070

adeturner opened this issue Dec 21, 2023 · 0 comments

Comments

@adeturner
Copy link

Welcome

  • Yes, I'm using a binary release within 2 latest releases.
  • Yes, I've searched similar issues on GitHub and didn't find any.
  • Yes, I've included all information below (version, config, etc).

What did you expect to see?

Github actions Azure Federated Identity OIDC authentication is not compatible with the current release of Lego.

It is fixed in #2036 azuredns: allow oidc authentication has been merged but does not seem to be in a release yet

Please can you create release so vancluever/terraform-provider-acme can be updated.

See also vancluever/terraform-provider-acme#352 (comment)

Sorry - probably shouldn't be a bug and the feature has already been added, so guess its more of a request

What did you see instead?

code = Unknown desc = azuredns: DefaultAzureCredential authentication failed

How do you use lego?

Through Terraform ACME provider

Reproduction steps

resource "acme_certificate" "cert" {
  account_key_pem = acme_registration.,mycert[0].account_key_pem
  common_name     = var.myname

  dns_challenge {
    # https://registry.terraform.io/providers/vancluever/acme/latest/docs/guides/dns-providers-azuredns
    provider = "azuredns"
    config = {
      AZURE_AUTH_METHOD         = "oidc"
      AZURE_RESOURCE_GROUP      = var.public_dns_rg
      AZURE_ZONE_NAME           = var.public_dns_zone
      AZURE_CLIENT_ID           = data.azurerm_client_config.current.client_id
      AZURE_SUBSCRIPTION_ID     = data.azurerm_client_config.current.subscription_id
      AZURE_TENANT_ID           = data.azurerm_client_config.current.tenant_id
      AZURE_TTL                 = 300
      AZURE_PROPAGATION_TIMEOUT = 150
    }
  }
}

Version of lego

github.com/go-acme/lego/v4 v4.14.2

Logs

code = Unknown desc = azuredns: DefaultAzureCredential authentication failed

Go environment (if applicable)

n/a

@adeturner adeturner added the bug label Dec 21, 2023
@ldez ldez changed the title Please release Azure OIDC support : #2036 Please release Azure OIDC support Dec 21, 2023
@ldez ldez removed the bug label Dec 21, 2023
@go-acme go-acme locked and limited conversation to collaborators Dec 21, 2023
@ldez ldez converted this issue into discussion #2071 Dec 21, 2023

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

Labels
None yet
Development

No branches or pull requests

2 participants