[BUG] Client certificates not used with openid auth endpoints about security-dashboards-plugin HOT 3 CLOSED

[Triage] Hi @Simple-Analysis, @cwperks will follow up but in the meantime if you could provide additional information on your configuration that would be appreciated. It sounds like you may be using a custom configuration of some sort and it is hard to determine the cause of these types of issues without detailed settings.

from security-dashboards-plugin.

Hi @scrawfor99, my configuration is not too unique. Our IdP is only accessible behind an API Gateway that enforces mutual TLS, so any request to that endpoint will fail without client certificates. My workaround for the longest time was to reference a pod in the same namespace as OpenSearch that serves the OpenID connect configuration json with modified authorization and token endpoints that do not require mutual TLS (bypassing the API Gateway).

I would share this configuration but I operate in an airgapped network. Please let me know if I can answer any questions though!

I tried to take a stab at the code changes and submitted the PR. I'm not really familiar with TypeScript, so any feedback would be greatly appreciated. I have not had a chance to run tests yet but I wanted to make this progress known for everyone's awareness.

Thank you!

from security-dashboards-plugin.

Closing this issue as #1650 has been merged. Thank you for your contribution @Simple-Analysis!

from security-dashboards-plugin.