This repository was archived by the owner on Apr 25, 2026. It is now read-only.
fix: use correct dummy ARN for claim-based OIDC provider when listing access keys - #21549
#21549Merged
Merged
fix: use correct dummy ARN for claim-based OIDC provider when listing access keys#21549
Conversation
When listing OIDC access keys, use the correct ARN when looking up the provider configuration for the claim-based provider. Without this it was impossible to list access keys for a claim-based provider, only for a role-policy-based provider. Fixes minio#21548
harshavardhana
approved these changes
Sep 6, 2025
dormanze
added a commit
to dormanze/minio
that referenced
this pull request
Oct 9, 2025
* upstream/master: (29 commits) Fix formatting of features in README.md Updating readme for MinIO docs (minio#21625) fix: timeN function return final closure not be called (minio#21615) Use new gofumpt (minio#21613) fix: after saveRebalanceStats cancel will be empty (minio#21597) fix: incorrect poolID when after decommission adding pools (minio#21590) fix: LDAP TLS handshake fails with StartTLS and tls_skip_verify=off (minio#21582) fix: remove unnecessary replication checks (minio#21569) fix: conditional checks write for multipart (minio#21567) Update yaml files to latest version RELEASE.2025-09-06T17-38-46Z fix: use correct dummy ARN for claim-based OIDC provider when listing access keys (minio#21549) Fix support for legacy compression env variables (minio#21533) fix: return error on conditional write for non existing object (minio#21550) Updated object-browser to the latest version v2.0.4 (minio#21564) fix: when save the rebalanceStats not found the config file (minio#21547) Run modernize (minio#21546) Revert `dns.msgUnPath`, fixes minio#21541 (minio#21542) fix: invalid checksum on site replication with conforming checksum types (minio#21535) fix: use amqp.ParseURL to parse amqp url (minio#21528) http/listener: fix bugs and simplify (minio#21514) ...
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Community Contribution License
All community contributions in this pull request are licensed to the project maintainers
under the terms of the Apache 2 license.
By creating this pull request I represent that I have the right to license the
contributions to the project maintainers under the Apache 2 license.
Description
When listing OIDC access keys, use the correct ARN when looking up the provider configuration for the claim-based provider. Without this it was impossible to list access keys for a claim-based provider, only for a role-policy-based provider.
Motivation and Context
mc idp openid accesskey listwould not list access keys related to a claim-based OIDC provider, only those related to role policy based providers. This PR fixes the issue by using the correct "dummy" ARN when looking up the claim-based provider in the map.How to test this PR?
Given a minio instance with a claim-based OIDC provider configured, compare the output of
mc idp openid accesskey list myminiobefore this change:vs after:
Types of changes
mc idp openid accesskey listdoes not work for claim-based provider #21548Checklist:
commit-idorPR #here)