cf-dev@lists.cloudfoundry.org

Re: UAA api /introspect does not seem to be workign as expected #uaa

Hi Jeremy, Thanks for that testcase. I followed your testcase on our UAA Server except with one change; since we are setup with MFA, I used the uaac token sso to get Marissas token. The UAA app

By Shetty, Viraj S [CTR] · #9169 · Edited

Re: Topics or presentations? CAB call: Wednesday, Sept. 16th @ 8AM PT / 11AM ET / 4PM CET

GOOD NEWS EVERYONE! We have a couple of presentations for tomorrow: Auto-patching of app images: Piyali Banerjee, CAPI, VMware New Quarks Secret feature: Mario Manno, Quarks, SUSE TT -- Troy

By Troy Topnik · #9168 ·

Re: TLS for everything

Hi everyone, Glad to see this conversation happening. I've been involved in several conversations about this over the years but I'm not sure what public artifacts exist about these efforts.

By David McClure · #9167 ·

Re: UAA api /introspect does not seem to be workign as expected #uaa

Hi Viraj, I couldn't replicate the issue you've described. While logs are always helpful, more helpful would be a small set up replicating the issue. For example, this is what I did to replicate your

By Jeremy Morony · #9166 ·

Re: TLS for everything

+1 on desiring everything to be encrypted on the network. We’re under the impression that Silk (apps.internal) traffic between cells is also unencrypted. On Tuesday, 15 September 2020, Peter

By Miki Mokrysz <miki.mokrysz@...> · #9165 ·

Re: TLS for everything

We may run into similar requirements for cloud.gov, so TLS everywhere would be A+. -- - Peter Burkholder | cloud.gov compliance & security please use cloud-gov-compliance@... for cloud.gov

By Peter Burkholder · #9164 ·

TLS for everything

Hi everyone, There has been a lot of excellent progress in securing all CF traffic with TLS and as far as I can tell there are only a few things that are still unencrypted. Is there a timeline or

By Jon Price · #9163 ·

Topics or presentations? CAB call: Wednesday, Sept. 16th @ 8AM PT / 11AM ET / 4PM CET

As of right now, we don't have any topics for discussion or presentations scheduled for the next CAB call. I'll keep polling project people informally on Slack, but if you have a topic you would like

By Troy Topnik · #9162 ·

CF K8s Networking office hours this week on Wednesday

Hello CF friends, Members of the CF K8s Networking team will be on zoom this Wednesday from 10-10:30am PDT hosting office hours for the project. We welcome questions related to routing, load

By Shannon Coen · #9161 ·

Re: CF Application Runtime PMC: Diego Project Lead Call for Nominations

Hi, everyone, VMware is nominating Amin Jamali for the Diego project lead in the Application Runtime PMC. Amin has worked at Pivotal and VMware as a core contributor to Cloud Foundry since 2015. Since

By Eric Malm · #9160 ·

Re: CF Application Runtime PMC: UAA Project Lead Call for Nominations

Hi, everyone, VMware is nominating Jeremy Morony for the UAA Project Lead in the Application Runtime PMC. Jeremy is a software engineer and manager at VMware who has been working with the UAA team

By Eric Malm · #9159 ·

CF Application Runtime PMC: Diego Project Lead Call for Nominations

Hi, everyone, Josh Collins is stepping down from his role as the Diego project lead, as he is currently focused primarily on activities with the CF CLI team. The Diego team now has an opening for its

By Eric Malm · #9158 ·

CF Application Runtime PMC: UAA Project Lead Call for Nominations

Hi, everyone, Pablo Schuhmacher, the Project Lead for the UAA team within the Application Runtime PMC, is stepping down from the project, as he is now focusing on product management responsibilities

By Eric Malm · #9157 ·

Re: UAA api /introspect does not seem to be workign as expected #uaa

Jeremy, I upgraded to the latest UAA version 74.24.0 and I still see the same issue. Is there something I can provide from logs that might help ? Thanks, Viraj

By Shetty, Viraj S [CTR] · #9156 ·

Re: UAA api /introspect does not seem to be workign as expected #uaa

Hi Jeremy, Thanks for taklng the time to respond. Really appreciate it. I have double checked this many times. From Postman, I saw the request that is being sent and checked the bearer token to see

By Shetty, Viraj S [CTR] · #9155 ·

Re: UAA api /introspect does not seem to be workign as expected #uaa

Hi Viraj, From the details provided it looks like the call to /introspect might be using the user's token in the authorize header instead of a client token. A successful curl request looks like: curl

By Jeremy Morony · #9154 ·

Re: UAA api /introspect does not seem to be workign as expected #uaa

I increased the logging for the UAA and found this exception. The error message is "User is not anonymous". Any idea what this could mean? 09-10T17:34:55.74-0400 [APP/PROC/WEB/0] OUT [2020-09-10

By Shetty, Viraj S [CTR] · #9153 · Edited

UAA api /introspect does not seem to be workign as expected #uaa

Hi All, We are using UAA version 74.14.0 We have a UAA installation for our internal applications in cloudfoundry environment. We have been having a problem in verifying the oauth token (JWT token)

By Shetty, Viraj S [CTR] · #9152 ·

Re: CF Application Runtime PMC: Release Integration Project Lead Call for Nominations

Hi, everyone, VMware is nominating Paul Warren for the Release Integration project lead in the Application Runtime PMC. Paul has worked on Cloud Foundry since 2015, serving as an engineer on UAA, the

By Eric Malm · #9151 ·

CF Application Runtime PMC: Release Integration Project Lead Call for Nominations

Hi, everyone, Saikiran Yerram, the lead for the Release Integration project within the Application Runtime PMC, is stepping down. We thank him for his tremendous service in leading the cf-for-k8s and

By Eric Malm · #9150 ·

Messages