Create service account fails about jwt-to-rbac

[pbalogh-sa]

Hello @danielwhatmuff, currently jwt-to-rbac doesn't handle jwt-s issued with github connector. This is on our roadmap, the next week we'll release it. #8

[pbalogh-sa]

@danielwhatmuff thanks for your notice about typo, but it doesn't cause error due to defined struct use FederatedClaimas as well. I'll fix it.

jwt-to-rbac/pkg/tokenhandler/token_handler.go

Lines 33 to 36 in ba28d31

	type User struct {
	Email string
	Groups []string
	FederatedClaimas FederatedClaims

[pbalogh-sa]

@danielwhatmuff you have to add federated:id to oauth2config scope in your auth app as well.
The jwt structure has to be like this:

{
  "iss": "http://dex/dex",
  "sub": "sub",
  "aud": "example-app",
  "exp": 1550864685,
  "iat": 1550778285,
  "at_hash": "hash",
  "email": "[email protected]",
  "email_verified": true,
  "groups": [
    "pokeorg",
    "pokeorg:admin",
    "pokeorg:developer"
  ],
  "name": "Peter Balogh",
  "federated_claims": {
    "connector_id": "github",
    "user_id": "userid"
  }
}

[pbalogh-sa]

Hello @danielwhatmuff, could you be so kind to take a try now. Readme updated as well:
https://github.com/banzaicloud/jwt-to-rbac#define-github-custom-roles-in-config