Hi Jeremy, Thanks for that testcase. I followed your testcase on our UAA Server except with one change; since we are setup with MFA, I used the uaac token sso to get Marissas token. The UAA app

GOOD NEWS EVERYONE! We have a couple of presentations for tomorrow: Auto-patching of app images: Piyali Banerjee, CAPI, VMware New Quarks Secret feature: Mario Manno, Quarks, SUSE TT -- Troy

Hi everyone, Glad to see this conversation happening. I've been involved in several conversations about this over the years but I'm not sure what public artifacts exist about these efforts.

Hi Viraj, I couldn't replicate the issue you've described. While logs are always helpful, more helpful would be a small set up replicating the issue. For example, this is what I did to replicate your

+1 on desiring everything to be encrypted on the network. We’re under the impression that Silk (apps.internal) traffic between cells is also unencrypted. On Tuesday, 15 September 2020, Peter

We may run into similar requirements for cloud.gov, so TLS everywhere would be A+. -- - Peter Burkholder | cloud.gov compliance & security please use cloud-gov-compliance@... for cloud.gov

Hi everyone, There has been a lot of excellent progress in securing all CF traffic with TLS and as far as I can tell there are only a few things that are still unencrypted. Is there a timeline or

As of right now, we don't have any topics for discussion or presentations scheduled for the next CAB call. I'll keep polling project people informally on Slack, but if you have a topic you would like

Hello CF friends, Members of the CF K8s Networking team will be on zoom this Wednesday from 10-10:30am PDT hosting office hours for the project. We welcome questions related to routing, load

Hi, everyone, VMware is nominating Amin Jamali for the Diego project lead in the Application Runtime PMC. Amin has worked at Pivotal and VMware as a core contributor to Cloud Foundry since 2015. Since

Hi, everyone, VMware is nominating Jeremy Morony for the UAA Project Lead in the Application Runtime PMC. Jeremy is a software engineer and manager at VMware who has been working with the UAA team

Hi, everyone, Josh Collins is stepping down from his role as the Diego project lead, as he is currently focused primarily on activities with the CF CLI team. The Diego team now has an opening for its

Hi, everyone, Pablo Schuhmacher, the Project Lead for the UAA team within the Application Runtime PMC, is stepping down from the project, as he is now focusing on product management responsibilities

Jeremy, I upgraded to the latest UAA version 74.24.0 and I still see the same issue. Is there something I can provide from logs that might help ? Thanks, Viraj

Hi Jeremy, Thanks for taklng the time to respond. Really appreciate it. I have double checked this many times. From Postman, I saw the request that is being sent and checked the bearer token to see

Hi Viraj, From the details provided it looks like the call to /introspect might be using the user's token in the authorize header instead of a client token. A successful curl request looks like: curl

I increased the logging for the UAA and found this exception. The error message is "User is not anonymous". Any idea what this could mean? 09-10T17:34:55.74-0400 [APP/PROC/WEB/0] OUT [2020-09-10

Hi All, We are using UAA version 74.14.0 We have a UAA installation for our internal applications in cloudfoundry environment. We have been having a problem in verifying the oauth token (JWT token)

Hi, everyone, VMware is nominating Paul Warren for the Release Integration project lead in the Application Runtime PMC. Paul has worked on Cloud Foundry since 2015, serving as an engineer on UAA, the

Hi, everyone, Saikiran Yerram, the lead for the Release Integration project within the Application Runtime PMC, is stepping down. We thank him for his tremendous service in leading the cf-for-k8s and