Skip to content

fix: bound OIDC redirect schema validation - #27

Merged
patrickleet merged 1 commit into
mainfrom
fix/oidc-client-kubernetes-schema
Sep 1, 2026
Merged

fix: bound OIDC redirect schema validation#27
patrickleet merged 1 commit into
mainfrom
fix/oidc-client-kubernetes-schema

Conversation

@patrickleet

Copy link
Copy Markdown
Contributor

Summary

  • remove uniqueItems from OIDC redirect arrays because Kubernetes 1.34 forbids its quadratic validation
  • bound redirect arrays and URI lengths so the exact-URI CEL rules remain within the CRD cost budget

Verification

  • up project build
  • OIDCClient composition render
  • generated CRD accepted by production Kubernetes server-side dry-run

Follow-up to #26.

@patrickleet
patrickleet merged commit fc7ebe1 into main Sep 1, 2026
1 of 3 checks passed
@patrickleet
patrickleet deleted the fix/oidc-client-kubernetes-schema branch September 1, 2026 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant