Merge pull request #2811 from Infisical/fix/address-custom-audience-kube-native-auth

fix: address custom audience issue
2025-03-25 14:05:03 +00:00 · 2024-11-29 03:55:50 +08:00
parent 85c3074216 105eb70fd9
commit a200469c72
1 changed files with 2 additions and 1 deletions
--- a/backend/src/services/identity-kubernetes-auth/identity-kubernetes-auth-service.ts
+++ b/backend/src/services/identity-kubernetes-auth/identity-kubernetes-auth-service.ts
@ -120,7 +120,8 @@ export const identityKubernetesAuthServiceFactory = ({
          apiVersion: "authentication.k8s.io/v1",
          kind: "TokenReview",
          spec: {
-            token: serviceAccountJwt
+            token: serviceAccountJwt,
+            ...(identityKubernetesAuth.allowedAudience ? { audiences: [identityKubernetesAuth.allowedAudience] } : {})
          }
        },
        {