Documentation, JWT Builder Workload Identity and JWK Rotation
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 45/100
- Issue type
- Documentation
- Clarity
- Needs clarification
- Activity status
- Active
- Domain
- authentication, documentation, security
Research direction
Start by reading development epic 35645 and the linked jwt-1.0, JSON Web Token, and IBM WebSphere Liberty documentation topics to understand the feature and existing coverage. Done means updating the affected topics with the workload identity and JWK rotation configuration and behavior, and defining any required new topic and navigation placement.
Written by the indexing model from the issue text.
Description
Feature epic details
- Link to development epic: https://github.com/OpenLiberty/open-liberty/issues/35645
- Target GA release:
26.0.0.12
Operating systems
Does the documentation apply to all operating systems?
- Yes
- No; specify operating systems: ______
** details below are a work in progress **
Summary
Provide a concise summary of your feature. What is the update, why does it matter, and to whom? What do 80% of target users need to know to be most easily productive using your runtime update?
Enhance the JWT Builder to be able to set a workload identity claim, generated by the server, in the JWTs that it issues. This claim cannot be modified via the JwtBuilder API to provide attestation.
Also, add the ability to define the rotation interval of the JWKs used for signing and verifying the JWTs issued by the JWT Builder as well as define the maximum number of JWKs retained by the JWK endpoint for verifying JWTs.
Configuration
List any new or changed properties, parameters, elements, attributes, etc. Include default values and configuration examples where relevant:
Example configuration:
<jwtBuilder
workloadIdentityClaim="workload-identity"
jwkRotationTime="60m"
jwkMaxKeys="3"
/>
Updates to existing topics
To update existing topics, specify a link to the topics that are affected. Include a copy of the current text and the exact text to which it will change. For example: Change ABC to XYZ
- https://openliberty.io/docs/latest/reference/feature/jwt-1.0.html
- https://openliberty.io/docs/latest/json-web-token.html
- https://www.ibm.com/docs/en/was-liberty/nd?topic=liberty-building-json-web-tokens-in
Create a new topic
To create a topic, specify a first draft of the topic that you want added and the section in the navigation where the topic should go.
- Dominant language
- No language data
- Stars
- 14
- Forks
- 58
- Avg merge
- 1h 4m
- Merged PRs (30d)
- 21
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from OpenLiberty/docs
-
source mismatchOpen
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
OpenLiberty/docs#8579 ·
Maintainers usually reply within 1 day
-
Jandex extended pathOpen
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
OpenLiberty/docs#8451 · 1 comment ·
Maintainers usually reply within 1 day
-
CVE update for 26.0.0.10Possibly taken @ramkumar-k-9286 claimed this 18 days ago. Open26.0.0.10
OpenLiberty/docs#8563 · 5 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
26.0.0.11
Difficulty 5/5 Over a week Newbie friendliness 25/100
OpenLiberty/docs#8548 ·
Maintainers usually reply within 1 day
-
Document the new set of Liberty container images based on UBI Micro (26.0.0.9)May be free again @jantley-ibm claimed this 63 days ago, and no pull request is open. Open26.0.0.11
OpenLiberty/docs#8499 · 6 comments · 1 assignee ·
Maintainers usually reply within 1 day
All issues in OpenLiberty/docs
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
scaleway/scaleway-cli#6492 ·
Maintainers usually reply within 1 day
-
Pull-through from gcr.io returns 500 when pulling using podman/buildahPossibly taken A pull request linked to this issue is open or already merged. OpenIssue Triage-Needed
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
pulp/pulp_container#2581 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
homotechsual/NinjaOne#109 ·
-
[安全] 为粘贴到 Shell 的代码引用转义路径Possibly taken @myot233 claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 64/100
Maintainers usually reply within 3 days