mirror of
https://github.com/2martens/cloud-configuration.git
synced 2026-10-17 08:37:56 +02:00
change: Use pkce and refresh tokens
This commit is contained in:
@@ -24,7 +24,6 @@ kube-prometheus-stack:
|
|||||||
name: Keycloak-OAuth
|
name: Keycloak-OAuth
|
||||||
allow_sign_up: true
|
allow_sign_up: true
|
||||||
client_id: ${GF_AUTH_GENERIC_OAUTH_CLIENT_ID}
|
client_id: ${GF_AUTH_GENERIC_OAUTH_CLIENT_ID}
|
||||||
client_secret: ${GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET}
|
|
||||||
scopes: openid email profile offline_access roles
|
scopes: openid email profile offline_access roles
|
||||||
email_attribute_path: email
|
email_attribute_path: email
|
||||||
login_attribute_path: username
|
login_attribute_path: username
|
||||||
@@ -33,6 +32,8 @@ kube-prometheus-stack:
|
|||||||
token_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/token
|
token_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/token
|
||||||
api_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/userinfo
|
api_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/userinfo
|
||||||
role_attribute_path: contains(resource_access."grafana-oauth".roles, 'admin') && 'Admin' || contains(resource_access."grafana-oauth".roles, 'editor') && 'Editor' || 'Viewer'
|
role_attribute_path: contains(resource_access."grafana-oauth".roles, 'admin') && 'Admin' || contains(resource_access."grafana-oauth".roles, 'editor') && 'Editor' || 'Viewer'
|
||||||
|
use_pkce: true
|
||||||
|
use_refresh_token: true
|
||||||
ingress:
|
ingress:
|
||||||
enabled: true
|
enabled: true
|
||||||
ingressClassName: public
|
ingressClassName: public
|
||||||
|
|||||||
Reference in New Issue
Block a user