Skip to content

v0.12.0-dd.0
Compare
Choose a tag to compare
@mdgreenfield mdgreenfield released this 05 Apr 23:40
· 38 commits to main since this release
v0.12.0-dd.0
b479907
This commit was signed with the committer’s verified signature.
mdgreenfield Matt Greenfield
GPG key ID: A7F6715F057137A5
Learn about vigilant mode. 
PROD-347: Add access token endpoint

Adds the <mountPath>/token/<role> endpoint to return an Oauth access
token. This access token is not leased because these tokens have a TTL
of 60m and are not revokable upstream.

Caveats:
- The <mountPath>/roles/<role> backend will create a separate App/SP
  with the same logic as the <mountPath>/roles/<role> creds. So, a
  unified App/Service Principal is not used between the various
  endpoints for a given role.
- No changes were made to how deleting a role revokes the cloud
  resources used by the <mountPath>/creds/<role> endpoint.
- An "existing Service Principal" still creates an App password as
  opposed to a service principal password.
Assets 4
Loading