New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[v1.14] Only enable groups params if secrets are present (google oidc) #1233
Conversation
pkg/render/dex_config.go
Outdated
@@ -458,7 +458,7 @@ func (d *dexConfig) Connector() map[string]interface{} { | |||
} | |||
|
|||
//Google specific. | |||
if d.idpSecret.Data[serviceAccountSecretField] != nil || d.idpSecret.Data[adminEmailSecretField] == nil { | |||
if d.idpSecret.Data[serviceAccountSecretField] != nil && d.idpSecret.Data[adminEmailSecretField] != nil { | |||
config["serviceAccountFilePath"] = serviceAccountSecretLocation |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Minor: Any reason "serviceAccountFilePath"
is hard-coded string instead of a constant like the other values?
The string is only used once, so there's that. But, it still feels more consistent to have it defined in a const like the others.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
ada7784
to
1f1762b
Compare
…are present (google (#1236) * Only enable groups params if secrets are present (google oidc) * PR suggestion * Add google sa + path test
Cannot be picked.
Only enable groups params if secrets are present (google oidc)