Files
teleport/examples
Tim Buckley 448d4d6dcd [v18] Fix google.protobuf.Struct handling in the Kubernetes operator (#69550)
* Fix google.protobuf.Struct handling in the Kubernetes operator

This fixes a bug in the Kubernetes operator where nested fields in a
`google.protobuf.Struct` object would be silently pruned by the
validator. This matters to the `generic_oidc` join method where the
`must_match_fields` field (which accepts structured fields to match
against an incoming JWT) could get pruned and then silently ignored,
bypassing join rules.

Note that use of nested fields _usually_ results in an error, but only
in strict mode. It's the default now, but could still plausibly be
disabled causing silent loss of rules.

* Reword comment

* Add a pruning test beyond just schema validation

* Use older reference syntax (new() isn't available in v18)
2026-08-12 01:42:03 +00:00
..
2024-06-26 19:24:16 +00:00
2024-11-13 13:40:00 +00:00