[GitHub] [solr-operator] thelabdude commented on issue #331: Support JWT authentication

2021-10-18 Thread GitBox
thelabdude commented on issue #331: URL: https://github.com/apache/solr-operator/issues/331#issuecomment-946080404 @janhoy I have a PR up for this but I'm on the fence as to whether it's worth merging? Given SolrJ doesn't support JWT, users will have to open up the Prometheus exporter endp

[GitHub] [solr-operator] thelabdude commented on issue #331: Support JWT authentication

2021-10-01 Thread GitBox
thelabdude commented on issue #331: URL: https://github.com/apache/solr-operator/issues/331#issuecomment-932395342 Will take this one up after I clean up the security code for #333 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to Gi

[GitHub] [solr-operator] thelabdude commented on issue #331: Support JWT authentication

2021-09-30 Thread GitBox
thelabdude commented on issue #331: URL: https://github.com/apache/solr-operator/issues/331#issuecomment-931499624 One problem with the `bearerTokenSecret` approach is that it would require a non-expiring access token, which are generally frowned upon, but if people want to use those, I gu

[GitHub] [solr-operator] thelabdude commented on issue #331: Support JWT authentication

2021-09-30 Thread GitBox
thelabdude commented on issue #331: URL: https://github.com/apache/solr-operator/issues/331#issuecomment-931416876 Rather than polluting the SolrCloud & Prometheus Exporter CRDs with OIDC config settings, the operator could parse out the `wellKnownUrl` and other config from a `security.jso