mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-09-08 01:07:18 +00:00
Both oidc and dex take tap.auth.oidc.issuer, but the failure hard-coded "oidc", so a dex operator was sent looking for a setting they had not configured. The README also documented tap.auth.rolesClaim as `role` where the chart defaults it to `groups`, which is the kind of mismatch an operator only finds after their SSO claims fail to map.