Skip to content

Conversation

@mikeywuu
Copy link

@mikeywuu mikeywuu commented Nov 28, 2025

This pull request introduces a conditional check to the Helm chart deployment template for Headlamp, ensuring that the OIDC scopes argument is only included when the relevant value is set. This improves the flexibility and correctness of the deployment configuration.

Enhancement to OIDC configuration:

  • charts/headlamp/templates/deployment.yaml: Added a conditional block so that the -oidc-scopes=$(OIDC_SCOPES) argument is only included if either $oidc.scopes or $scopes is not empty, preventing unnecessary or empty configuration arguments.## Summary

Related Issue

Fixes #4220

@linux-foundation-easycla
Copy link

linux-foundation-easycla bot commented Nov 28, 2025

CLA Signed

The committers listed above are authorized under a signed CLA.

  • ✅ login: mikeywuu / name: Mike (bd9200e)

@k8s-ci-robot
Copy link
Contributor

Welcome @mikeywuu!

It looks like this is your first PR to kubernetes-sigs/headlamp 🎉. Please refer to our pull request process documentation to help your PR have a smooth ride to approval.

You will be prompted by a bot to use commands during the review process. Do not be afraid to follow the prompts! It is okay to experiment. Here is the bot commands documentation.

You can also check if kubernetes-sigs/headlamp has its own contribution guidelines.

You may want to refer to our testing guide if you run into trouble with your tests not passing.

If you are having difficulty getting your pull request seen, please follow the recommended escalation practices. Also, for tips and tricks in the contribution process you may want to read the Kubernetes contributor cheat sheet. We want to make sure your contribution gets all the attention it needs!

Thank you, and welcome to Kubernetes. 😃

@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: mikeywuu
Once this PR has been reviewed and has the lgtm label, please assign joaquimrocha for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Nov 28, 2025
Copy link
Contributor

@skoeva skoeva left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi, thanks for looking into this issue! If you can, please sign the CLA so we can review and merge any changes

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. and removed cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. labels Nov 28, 2025
Copy link
Contributor

@skoeva skoeva left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

there's a failing test in the CI:

Test failed! To update expected templates to match current output:
  1. Review the differences above carefully
  2. If the changes are related to version, run:
     make helm-update-template-version
     This will update ALL expected templates with current Helm version
  3. Verify the changes and commit them

@mikeywuu
Copy link
Author

mikeywuu commented Dec 1, 2025

After thinking about it, im not sure if this might break something for other people. With this change, it would no longer be possible to get the scopes (OIDC_SCOPES) from the externalSecret. Im not sure what has to be in the externalSecret and what not.

Maybe you have an opinion about that?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Using external secret adds empty oidc-scopes arg parameter even if scopes are not provided

3 participants