change: Enable refresh tokens for grafana and switch to PUBLIC with pkce
continuous-integration/drone/push Build is passing

This commit is contained in:
2025-07-26 16:20:45 +02:00
parent 3a0fa35c25
commit 2025eb86a6
+3 -2
View File
@@ -257,11 +257,12 @@ resource "keycloak_openid_client" "twomartens_grafana_monitoring" {
realm_id = keycloak_realm.twomartens_realm.id realm_id = keycloak_realm.twomartens_realm.id
name = "Grafana Monitoring Cluster" name = "Grafana Monitoring Cluster"
enabled = true enabled = true
access_type = "CONFIDENTIAL" access_type = "PUBLIC"
client_id = "grafana-oauth" client_id = "grafana-oauth"
standard_flow_enabled = true standard_flow_enabled = true
use_refresh_tokens = false use_refresh_tokens = true
full_scope_allowed = false full_scope_allowed = false
pkce_code_challenge_method = "S256"
valid_redirect_uris = [ valid_redirect_uris = [
"https://grafana.k8s.monitoring.2martens.de/login/generic_oauth" "https://grafana.k8s.monitoring.2martens.de/login/generic_oauth"