AWS eks documentation change
Summary
Fixed formatting of example URLs by removing markdown link syntax
Security assessment
Changes only correct URL display formatting in documentation. No security implications as OIDC configuration requirements remain unchanged.
Diff
diff --git a/eks/latest/userguide/authenticate-oidc-identity-provider.md b/eks/latest/userguide/authenticate-oidc-identity-provider.md index 556243863..1c7cfb233 100644 --- a//eks/latest/userguide/authenticate-oidc-identity-provider.md +++ b//eks/latest/userguide/authenticate-oidc-identity-provider.md @@ -39 +39 @@ Before you can associate an OIDC identity provider with your cluster, you need t -The URL of the OIDC identity provider that allows the API server to discover public signing keys for verifying tokens. The URL must begin with `https://` and should correspond to the `iss` claim in the provider’s OIDC ID tokens. In accordance with the OIDC standard, path components are allowed but query parameters are not. Typically the URL consists of only a host name, like ` [https://server.example.org](https://server.example.org) ` or ` [https://example.com](https://example.com) `. This URL should point to the level below `.well-known/openid-configuration` and must be publicly accessible over the internet. +The URL of the OIDC identity provider that allows the API server to discover public signing keys for verifying tokens. The URL must begin with `https://` and should correspond to the `iss` claim in the provider’s OIDC ID tokens. In accordance with the OIDC standard, path components are allowed but query parameters are not. Typically the URL consists of only a host name, like `https://server.example.org` or `https://example.com`. This URL should point to the level below `.well-known/openid-configuration` and must be publicly accessible over the internet. @@ -148 +148 @@ If you want to prevent an OIDC identity provider from being associated with a cl -The following example policy allows OIDC identity provider association if the `clientID` is `kubernetes` and the `issuerUrl` is ` [https://cognito-idp.us-west-2amazonaws.com/*](https://cognito-idp.us-west-2amazonaws.com/*) `. +The following example policy allows OIDC identity provider association if the `clientID` is `kubernetes` and the `issuerUrl` is `https://cognito-idp.us-west-2amazonaws.com/*`.