From 725a511d2ec206439362da1c35a6c52b37682618 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Sat, 26 Jul 2025 16:23:25 +0200 Subject: [PATCH] change: Use pkce and refresh tokens --- argocd/prometheus/monitoring/argocd_values.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/argocd/prometheus/monitoring/argocd_values.yaml b/argocd/prometheus/monitoring/argocd_values.yaml index 48a53bb..38ab47b 100644 --- a/argocd/prometheus/monitoring/argocd_values.yaml +++ b/argocd/prometheus/monitoring/argocd_values.yaml @@ -24,7 +24,6 @@ kube-prometheus-stack: name: Keycloak-OAuth allow_sign_up: true client_id: ${GF_AUTH_GENERIC_OAUTH_CLIENT_ID} - client_secret: ${GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET} scopes: openid email profile offline_access roles email_attribute_path: email login_attribute_path: username @@ -33,6 +32,8 @@ kube-prometheus-stack: token_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/token api_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/userinfo role_attribute_path: contains(resource_access."grafana-oauth".roles, 'admin') && 'Admin' || contains(resource_access."grafana-oauth".roles, 'editor') && 'Editor' || 'Viewer' + use_pkce: true + use_refresh_token: true ingress: enabled: true ingressClassName: public