-
Notifications
You must be signed in to change notification settings - Fork 27
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add github authentication #74
base: main
Are you sure you want to change the base?
Conversation
Hi @vsevel @sberyozkin @kdubb , any thoughts on this? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
looks good. a few minor changes and comments.
yes, let's try to expand the tests if possible.
@@ -271,6 +271,16 @@ echo token=$token | |||
kubectl get secret $secret_name -o json | jq -r '.data."ca.crt"' | base64 -D > /tmp/ca.crt | |||
---- | |||
|
|||
== GitHub Authentication |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you can add a bullet point in the list given at the beginning.
@@ -34,6 +34,15 @@ | |||
"code", | |||
"maintenance" | |||
] | |||
}, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do we need to add this as part of the PR @gastaldi ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No, please add it in a separate PR using the @all-contributors add @r00ta for code
command (which can be triggered by a comment in this PR)
@@ -271,6 +271,16 @@ echo token=$token | |||
kubectl get secret $secret_name -o json | jq -r '.data."ca.crt"' | base64 -D > /tmp/ca.crt | |||
---- | |||
|
|||
== GitHub Authentication | |||
|
|||
The GitHub authentication rely on a token with the `admin:org->read:org` scope generated from https://github.com/settings/tokens/new. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
typo: relies
public class VaultGitHubAuthenticationConfig { | ||
|
||
/** | ||
* Token for GitHub auth method. This property is required when selecting the github authentication type. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we don't choose, do we? it is implicit when we set this attribute. correct?
STILL WIP - Early feedback is more than welcome: i.e. if this feature is a nice to have for the project I'm happy to move on with the integration tests. I've already tested it locally and it works fine.
Relates to #73
This PR aims to provide GitHub as authentication mechanism for the vault.