People who code: we want your input. Take the Survey

Hot answers tagged


I have come to the (preliminary) conclusion that this cannot be done. First, I had set the wrong idp-issuer-url. I had selected the IDP that normally serves during OIDC authentication to the Kubernetes cluster. But $token (or $CI_JOB_JWT in GitLab CI/CD parlance) was not generated there but by GitLab instead. Inspection e.g. at indicates "iss&...

Only top voted, non community-wiki answers of a minimum length are eligible