Bruce MacDonald

## Summary No changes from #2841, just re-opening to fix the actions which were stuck. ## Checklist - [x] Wrote appropriate unit tests - [x] Considered security implications of the...

## Summary Moving this check for the provider sync fixes a bug where issuing an access key directly to a user from an identity provider did not work. Also added...

## Is your feature request related to a problem? Please describe. To sign-up a new organization in a multi-tenant deployment it should be possible to register a new organization and...

Savepoint error logged when org is created

3

## Describe the bug When the Infra server starts the following error can sometimes be seen: ``` {"level":"error","rows":0,"query":"SAVEPOINT beforeCreate","elapsed":0.925375,"error":"ERROR: SAVEPOINT can only be used in transaction blocks (SQLSTATE 25P01)","time":1660162230114,"caller":"[email protected]/postgres.go:201"} ```...

- align CLI and UI setup - give info about private key in ui ## Summary Improving the understandability of the Google provider setup experience. This change makes the CLI...

## Describe the bug An invalid client ID and client secret can be set for an Azure OIDC provider. ## Expected behavior We rely on the OIDC provider returning an...

`kubectl` impersonation (e.g. `kubectl --as`) does not work through infra connector

2

## Describe the bug An impersonated user/group specified through `kubectl` commands is ignored and the command is run as the current user logged in to Infra. ``` # in this...

api: use standard model ID to look up access key

3

## Describe the bug Currently we use a "key ID" field to look up access keys in the database. This is left over from an earlier time when our database...