Skip to content

EventTransform: Support OIDC and authz #8538

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
pierDipi opened this issue Mar 20, 2025 · 0 comments
Open

EventTransform: Support OIDC and authz #8538

pierDipi opened this issue Mar 20, 2025 · 0 comments
Labels
area/eventtransform kind/feature-request triage/accepted Issues which should be fixed (post-triage)

Comments

@pierDipi
Copy link
Member

pierDipi commented Mar 20, 2025

Problem

JSONata EventTransform doesn't yet support OIDC and EventPolicy, we should add support for it

The transform-jsonata data plane is in this repo: https://github.com/knative-extensions/eventing-integrations/tree/main/transform-jsonata, there we need to:

  • verify JWT tokens given the audience in an environment variable and the key set in a mounted configmap
  • verify authorized subjects passed in a mounted configmap

Once the data plane part is complete, we would need to configure it in the EventTransform reconciler and when we create resources

Exit Criteria

  • JSONata EventTransform sets the audience in the addressable status (Verified with end to end test)
  • JSONata EventTransform verifies JWT tokens (Verified with end to end test)
  • JSONata EventTransform prevents unauthorized access as configured with EventPolicies (Verified with end to end test)

Time Estimate (optional):
How many developer-days do you think this may take to resolve?

10-30

Additional context (optional)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/eventtransform kind/feature-request triage/accepted Issues which should be fixed (post-triage)
Projects
Status: 🔖 Ready
Status: Ready To Work
Development

No branches or pull requests

1 participant