Switched from metadata_url to metadata for end user authentication

[allenhouchins]

Switched from metadata_url to metadata for end user authentication.

[getvictor]

Hey @getvictor do you know why we're hitting this GitOps error? https://github.com/fleetdm/fleet/actions/runs/13165608227/job/36744901826#step:6:184

Maybe $DOGFOOD_SSO_METADATA has newlines, which messes things up

[allenhouchins]

@getvictor The odd thing about this is that same exact variable works without issue further down in the yaml.

The error also mentions JSON but the data inside that variable is XML.

[noahtalerman]

The odd thing about this is that same exact variable works without issue further down in the yaml.

@allenhouchins agreed. I think we should get some engineering help digging in. Can you please file a bug for this?

[allenhouchins]

@noahtalerman
Issue: #26135
Also ran into this while testing: #26075

[allenhouchins]

Keeping this pull request open while this bug is being looked at: #26135

[sgress454]

@allenhouchins based on my testing for #26135 I would experiment with moving this two spaces forward or two spaces back, i.e.

      metadata: |-
      $DOGFOOD_SSO_METADATA

or

      metadata: |-
          $DOGFOOD_SSO_METADATA

and see if either of those works.

[allenhouchins]

@sgress454 No change in behavior.
Two spaces forward: 2927aa3
Two spaces backward: c1bc859

[sgress454]

👍 thanks for trying

[sgress454]

@allenhouchins so based on everything I'm seeing, this is gonna require a new secret. The indentation in the current one won't work for mdm. I can provide a new version of the secret to try.