Issues

• Static JWKS rejects tokens that have no kid header

  area/securitykind/bug
  gardener/oidc-webhook-authenticator#272 · Filter by author RaphaelFakhri opened on Nov 4, 2026

• Per issuer metrics

  kind/enhancement
  gardener/oidc-webhook-authenticator#238 · Filter by author dimityrmirchev opened on May 11, 2026
  2

• Evaluate dropping custom handling of MaxTokenExpirationSeconds in favour of replacing it with CEL expression

  kind/enhancementlifecycle/frozen
  gardener/oidc-webhook-authenticator#199 · Filter by author dimityrmirchev opened on Oct 23, 2025
  3

• Deprecate clientID in favour of new field called "audiences"

  area/ipceikind/enhancementlifecycle/frozen
  gardener/oidc-webhook-authenticator#197 · Filter by author dimityrmirchev opened on Oct 20, 2025
  11

  

• Improve resilience when reconciling OIDC resources that require remote JWKS

  kind/enhancementlifecycle/frozen
  gardener/oidc-webhook-authenticator#154 · Filter by author dimityrmirchev opened on May 9, 2024
  1