Add SNI to NIC JWT Policy #7993

javorszky · 2025-07-07T14:27:37Z

Proposed changes

Closes #7427

Adds the ability to specify SNI related options for jwt policies.

There are two configuration options:

sniEnabled, which controls the value of the proxy_ssl_server_name nginx directive, and
sniName, which controls the value of the proxy_ssl_name` nginx directive

Specifying sniName without SNI being enabled will result in an error.

Documentation PR: nginx/documentation#795

Checklist

Before creating a PR, run through this checklist and mark each as complete.

I have read the CONTRIBUTING doc
I have added tests that prove my fix is effective or that my feature works
I have checked that all unit tests pass after adding my changes
I have updated necessary documentation
I have rebased my branch onto main
I will ensure my PR is targeting the main branch and pulling from my branch from my own fork

codecov · 2025-07-07T14:29:32Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 53.03%. Comparing base (ab54158) to head (a4f0b07).
Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7993      +/-   ##
==========================================
+ Coverage   52.99%   53.03%   +0.03%     
==========================================
  Files          90       90              
  Lines       21750    21768      +18     
==========================================
+ Hits        11527    11544      +17     
+ Misses       9746     9745       -1     
- Partials      477      479       +2

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

pkg/apis/configuration/v1/types.go

internal/configs/version2/templates_test.go

Signed-off-by: Haywood Shannon <[email protected]> Signed-off-by: Haywood Shannon <[email protected]>

github-actions · 2025-07-17T00:55:00Z

Package Report

gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx, 1.27.5-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-module-njs, 1.27.5+0.8.10-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-module-otel, 1.27.5+0.1.2-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-agent, 3.0.3~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx, 1.27.5-1~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-module-njs, 1.27.5+0.8.10-1~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-module-otel, 1.27.5+0.1.2-1~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-agent, 3.0.3~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus, 34-2~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-njs, 34+0.8.9-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-otel, 34+0.1.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-fips-check, 34+0.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-agent, 3.0.3~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus, 34-2~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-njs, 34+0.8.9-1~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-otel, 34+0.1.1-1~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-fips-check, 34+0.1-1~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-agent, 3.0.3~bookworm, arm64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus, 34-2~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-njs, 34+0.8.9-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-otel, 34+0.1.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-fips-check, 34+0.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-appprotect, 34+5.442.0-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect, 34+5.442.0-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect-attack-signatures, 2025.07.17-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect-threat-campaigns, 2025.07.16-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-agent, 2.42.0~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus, 34-2~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-njs, 34+0.8.9-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-otel, 34+0.1.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-fips-check, 34+0.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-appprotect, 34+5.442.0-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect-module-plus, 34+5.442.0-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect-plugin, 6.16.0-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-agent, 2.42.0~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus, 34-2~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-njs, 34+0.8.9-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-otel, 34+0.1.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-fips-check, 34+0.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-appprotectdos, 34+4.6.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect-dos, 34+4.6.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus, 34-2~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-njs, 34+0.8.9-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-otel, 34+0.1.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-fips-check, 34+0.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-appprotect, 34+5.442.0-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect, 34+5.442.0-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect-attack-signatures, 2025.07.17-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect-threat-campaigns, 2025.07.16-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-plus-module-appprotectdos, 34+4.6.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, app-protect-dos, 34+4.6.1-1~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85, nginx-agent, 2.42.0~bookworm, amd64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx, 1.27.5-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-module-njs, 1.27.5.0.8.10-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-module-otel, 1.27.5.0.1.2-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-agent, 3.0.3, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx, 1.27.5-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-module-njs, 1.27.5.0.8.10-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-module-otel, 1.27.5.0.1.2-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-agent, 3.0.3, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-plus, 34-r2, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-plus-module-njs, 34.0.8.9-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-plus-module-otel, 34.0.1.1-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-plus-module-fips-check, 34.0.1-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-agent, 3.0.3, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-plus, 34-r2, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-plus-module-njs, 34.0.8.9-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-plus-module-otel, 34.0.1.1-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-plus-module-fips-check, 34.0.1-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine, nginx-agent, 3.0.3, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus, 34-r2, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-njs, 34.0.8.9-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-otel, 34.0.1.1-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-fips-check, 34.0.1-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-agent, 3.0.3, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus, 34-r2, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-njs, 34.0.8.9-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-otel, 34.0.1.1-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-fips-check, 34.0.1-r1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-agent, 3.0.3, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus, 34-r2, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-njs, 34.0.8.9-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-otel, 34.0.1.1-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-fips-check, 34.0.1-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-agent, 2.42.0, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-appprotect, 34.5.442.0-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, app-protect, 34.5.442.0-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, app-protect-attack-signatures, 2025.07.17-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, app-protect-threat-campaigns, 2025.07.16-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus, 34-r2, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-njs, 34.0.8.9-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-otel, 34.0.1.1-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-fips-check, 34.0.1-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-agent, 2.42.0, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, nginx-plus-module-appprotect, 34.5.442.0-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, app-protect-module-plus, 34.5.442.0-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-alpine-fips, app-protect-plugin, 6.16.0-r1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx, 1.27.5-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-module-njs, 1.27.5+0.9.0-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-module-otel, 1.27.5+0.1.2-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-agent, 3.0.3-1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx, 1.27.5-1.el9.ngx, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-module-njs, 1.27.5+0.9.0-1.el9.ngx, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-module-otel, 1.27.5+0.1.2-1.el9.ngx, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-agent, 3.0.3-1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus, 34-2.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-njs, 34+0.8.9-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-otel, 34+0.1.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-fips-check, 34+0.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-agent, 3.0.3-1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus, 34-2.el9.ngx, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-njs, 34+0.8.9-1.el9.ngx, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-otel, 34+0.1.1-1.el9.ngx, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-fips-check, 34+0.1-1.el9.ngx, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-agent, 3.0.3-1, aarch64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus, 34-2.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-njs, 34+0.8.9-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-otel, 34+0.1.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-fips-check, 34+0.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-agent, 2.42.0-1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-appprotect, 34+5.442.0-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect, 34+5.442.0-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect-attack-signatures, 2025.07.17-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect-threat-campaigns, 2025.07.16-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus, 34-2.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-njs, 34+0.8.9-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-otel, 34+0.1.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-fips-check, 34+0.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-agent, 2.42.0-1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-appprotect, 34+5.442.0-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect-module-plus, 34+5.442.0-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect-plugin, 6.16.0-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus, 34-2.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus-module-njs, 34+0.8.9-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus-module-otel, 34+0.1.1-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus-module-fips-check, 34+0.1-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-agent, 2.42.0-1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus-module-appprotect, 34+5.442.0-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, app-protect, 34+5.442.0-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, app-protect-attack-signatures, 2025.07.17-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, app-protect-threat-campaigns, 2025.07.16-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus, 34-2.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus-module-njs, 34+0.8.9-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus-module-otel, 34+0.1.1-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus-module-fips-check, 34+0.1-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-agent, 2.42.0-1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, nginx-plus-module-appprotect, 34+5.442.0-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, app-protect-module-plus, 34+5.442.0-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-nap-v5/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi8, app-protect-plugin, 6.16.0-1.el8.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus, 34-2.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-njs, 34+0.8.9-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-otel, 34+0.1.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-fips-check, 34+0.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-appprotectdos, 34+4.6.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect-dos, 34+4.6.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus, 34-2.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-njs, 34+0.8.9-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-otel, 34+0.1.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-fips-check, 34+0.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-appprotect, 34+5.442.0-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-plus-module-appprotectdos, 34+4.6.1-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, nginx-agent, 2.42.0-1, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect, 34+5.442.0-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect-attack-signatures, 2025.07.17-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect-threat-campaigns, 2025.07.16-1.el9.ngx, x86_64
gcr.io/f5-gcs-7899-ptg-ingrss-ctlr/dev/nginx-ic-dos-nap/nginx-plus-ingress:t-ae048fe6cdf38e4c4d0daaa5c1ed9b85-ubi, app-protect-dos, 34+4.6.1-1.el9.ngx, x86_64

Signed-off-by: Haywood Shannon <[email protected]> Signed-off-by: Haywood Shannon <[email protected]>

…o feat/7427-sni-in-jwt-policy

Signed-off-by: Haywood Shannon <[email protected]> Signed-off-by: Haywood Shannon <[email protected]>

github-actions bot added enhancement Pull requests for new features/feature enhancements go Pull requests that update Go code labels Jul 7, 2025

javorszky force-pushed the feat/7427-sni-in-jwt-policy branch from 8e60efa to 76d3797 Compare July 8, 2025 12:44

javorszky marked this pull request as ready for review July 8, 2025 12:45

javorszky requested a review from a team as a code owner July 8, 2025 12:45

javorszky mentioned this pull request Jul 8, 2025

feat: Add sni related config options to jwt policy nginx/documentation#795

Merged

10 tasks

javorszky added 7 commits July 8, 2025 16:50

Add SNI related options and validation

ba9bfeb

Add the new options to the crd definitions

92f8e01

Update snaps

569d490

Rename sniServerName to sniName

5cbb50b

Add unit tests for sni

bc3b54f

Move SNI into JwksURI struct

72063bd

If JwksURI is not set, SNI should not be set

7c2c3e4

javorszky force-pushed the feat/7427-sni-in-jwt-policy branch from 5a23849 to 7c2c3e4 Compare July 8, 2025 16:12

vepatel reviewed Jul 10, 2025

View reviewed changes

pkg/apis/configuration/v1/types.go Outdated Show resolved Hide resolved

vepatel reviewed Jul 10, 2025

View reviewed changes

internal/configs/version2/templates_test.go Show resolved Hide resolved

haywoodsh added 3 commits July 14, 2025 14:49

Merge branch 'main' into feat/7427-sni-in-jwt-policy

4ca5372

add test to routes and include docs to crd

5cf8aa9

Signed-off-by: Haywood Shannon <[email protected]> Signed-off-by: Haywood Shannon <[email protected]>

Merge branch 'main' into feat/7427-sni-in-jwt-policy

9b705a4

vepatel mentioned this pull request Jul 15, 2025

Added SNI support for JWT secrets retrieved from HTTPS URL #7500

Closed

6 tasks

vepatel previously approved these changes Jul 15, 2025

View reviewed changes

AlexFenlon previously approved these changes Jul 15, 2025

View reviewed changes

Merge branch 'main' into feat/7427-sni-in-jwt-policy

88c2590

haywoodsh added 2 commits July 17, 2025 02:11

add unit test for validation

495e3b6

Signed-off-by: Haywood Shannon <[email protected]> Signed-off-by: Haywood Shannon <[email protected]>

Merge remote-tracking branch 'origin/feat/7427-sni-in-jwt-policy' int…

caa15a2

…o feat/7427-sni-in-jwt-policy

haywoodsh dismissed stale reviews from vepatel and AlexFenlon via caa15a2 July 17, 2025 01:12

haywoodsh marked this pull request as draft July 17, 2025 08:52

haywoodsh added 5 commits July 17, 2025 09:59

Merge branch 'main' into feat/7427-sni-in-jwt-policy

ba53e1b

test codecov

e4f2e1a

Signed-off-by: Haywood Shannon <[email protected]> Signed-off-by: Haywood Shannon <[email protected]>

edit tests

ca1db5f

Signed-off-by: Haywood Shannon <[email protected]> Signed-off-by: Haywood Shannon <[email protected]>

Merge branch 'main' into feat/7427-sni-in-jwt-policy

bf66afb

remove redundant tests

1de6c83

Signed-off-by: Haywood Shannon <[email protected]> Signed-off-by: Haywood Shannon <[email protected]>

haywoodsh marked this pull request as ready for review July 21, 2025 02:08

Merge branch 'main' into feat/7427-sni-in-jwt-policy

7e98f07

vepatel approved these changes Jul 21, 2025

View reviewed changes

AlexFenlon approved these changes Jul 21, 2025

View reviewed changes

pdabelf5 approved these changes Jul 22, 2025

View reviewed changes

Merge branch 'main' into feat/7427-sni-in-jwt-policy

a4f0b07

haywoodsh enabled auto-merge (squash) July 22, 2025 08:33

haywoodsh merged commit 96044a3 into main Jul 22, 2025
83 checks passed

haywoodsh deleted the feat/7427-sni-in-jwt-policy branch July 22, 2025 09:07

nixx mentioned this pull request Jul 24, 2025

[Bug]: JWT validation does not work with requests larger than 1MB using JWKSUri as source for keys - POC #8069

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add SNI to NIC JWT Policy #7993

Add SNI to NIC JWT Policy #7993

Uh oh!

javorszky commented Jul 7, 2025 •

edited

Loading

Uh oh!

codecov bot commented Jul 7, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Jul 17, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Add SNI to NIC JWT Policy #7993

Add SNI to NIC JWT Policy #7993

Uh oh!

Conversation

javorszky commented Jul 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Proposed changes

Checklist

Uh oh!

codecov bot commented Jul 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Jul 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Package Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

javorszky commented Jul 7, 2025 •

edited

Loading

codecov bot commented Jul 7, 2025 •

edited

Loading

github-actions bot commented Jul 17, 2025 •

edited

Loading