Does the oauthOidcAllClaims filter provide the possibility to lookup sensitive data from Kubernetes Secrets about skipper HOT 7 OPEN

@lukibahr That would be a feature to support which makes a lot of sense!
In skipper we would use read from file via our secrets module.

from skipper.

Looks like duplicate of #1952

from skipper.

@szuecs Is there a reference implementation already in skipper where we use the secrets module?

from skipper.

In many auth filters it is in use or also in net/Client (skipper's http client)

from skipper.

@szuecs Is there any chance to get this implemented in the next couple of days or weeks? I'm currently not familiar enough with the entire codebase, to get this implemented and propose a MR for this.

Thanks

from skipper.

MR?

I will have holidays until January, so I am not really available next days.
Maybe I can give a bit of context to the code. We implement these kind of features in filters.
Filters are created by an instance of a "spec". You likely want to create a new spec for this similar to the others (share spec with different new kind of "typ").
A filter instance is created by CreateFilter().

The entry point of the code that does the call path to work on the request is https://github.com/zalando/skipper/blob/master/filters/auth/oidc.go#L756.

from skipper.

I will have a look into it, after getting familiar with the codebase.

from skipper.