titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity

keycloak: rerun Hermes OIDC ensure for chat/triage hostname rollout

Browse Source 
PR #34 renamed the public chat/triage hosts in
hermes_access_oidc_ensure.sh (chat.bstein.dev, triage.bstein.dev) but
the last applied hermes-access-oidc-client-ensure Job predates that
change, so Keycloak still has the old redirect_uri/webOrigins/rootUrl
registered for hermes-chat-proxy and hermes-triage-proxy. Live check
confirms Keycloak returns HTTP 400 Invalid parameter: redirect_uri for
both new hosts. Bump the Job name to force Flux to recreate the
(immutable) Job and rerun the ensure script, matching this repo's
established retry convention for this Job (ensure-7..ensure-10).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Hermes Agent 2026-08-21 08:27:17 +00:00
parent e3de466ad1
commit c857dbd9e1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/keycloak/bootstrap-jobs/hermes-access-oidc-client-job.yaml
View File

@ -3,7 +3,7 @@
apiVersion: batch/v1
kind: Job
metadata:
name: hermes-access-oidc-client-ensure-10
name: hermes-access-oidc-client-ensure-11
namespace: sso
spec:
backoffLimit: 3