Helm

HQ Changelog

Added support for certificate / signature verification

In case SAML IdP requires certificate verification, same can be now provided.

Reference certificate from Secret

values.yaml

lensesHq:
  auth:
    saml:
      authnRequestSignature:
        enabled: false
        authnRequestSigningCert:
          referenceFromSecret: true
          secretName: hq-agent-test-authority
          secretKeyName: hq-tls-test.crt.pem
        authnRequestSigningKey:
          secret:
            name: saml-test
            key: privatekey.key

Certificate through String

values.yaml

lensesHq:
  auth:
    saml:
      authnRequestSignature:
        enabled: false
        authnRequestSigningCert:
          stringData: |
            -----BEGIN CERTIFICATE-----
            ....
            -----END CERTIFICATE-----
        authnRequestSigningKey:
          secret:
            name: saml-test
            key: privatekey.key

Small bugfixes

• HQ on AutnRequest does not send self-signed certificate to avoid validation issues