change: Use pkce and refresh tokens

This commit is contained in:
2025-07-26 16:23:25 +02:00
parent 6c00d864e6
commit 725a511d2e
@@ -24,7 +24,6 @@ kube-prometheus-stack:
name: Keycloak-OAuth name: Keycloak-OAuth
allow_sign_up: true allow_sign_up: true
client_id: ${GF_AUTH_GENERIC_OAUTH_CLIENT_ID} client_id: ${GF_AUTH_GENERIC_OAUTH_CLIENT_ID}
client_secret: ${GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET}
scopes: openid email profile offline_access roles scopes: openid email profile offline_access roles
email_attribute_path: email email_attribute_path: email
login_attribute_path: username login_attribute_path: username
@@ -33,6 +32,8 @@ kube-prometheus-stack:
token_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/token token_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/token
api_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/userinfo api_url: https://id.2martens.de/realms/twomartens/protocol/openid-connect/userinfo
role_attribute_path: contains(resource_access."grafana-oauth".roles, 'admin') && 'Admin' || contains(resource_access."grafana-oauth".roles, 'editor') && 'Editor' || 'Viewer' role_attribute_path: contains(resource_access."grafana-oauth".roles, 'admin') && 'Admin' || contains(resource_access."grafana-oauth".roles, 'editor') && 'Editor' || 'Viewer'
use_pkce: true
use_refresh_token: true
ingress: ingress:
enabled: true enabled: true
ingressClassName: public ingressClassName: public