RFC: Making automated Mender Deployment/ Releases more secure using OIDC

General Discussions
1

Hi everyone,

I submitted an Issue on GitHub to discuss adding an OIDC endpoint to mender server, so that GitHub Action builds and GitLab CI Jobs could interface with the mender server api without static tokens! I would highly appreciate any feedback :slight_smile:

The issue: RFC: Add OIDC authentication flow for Deployments (enable GitHub Actions / GitLab CI to deploy without static tokens) · Issue #1043 · mendersoftware/mender-server · GitHub

Kind regards,
Tom

2

Hi @alabs-tomscholz,

Thanks for reaching out and submitting! I have pointed the relevant people to the PR, so hopefully we can get the discussion and everything that follow going.

Greetz,
Josef

1 Like