bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

gitea: relax required signin, set admin group+skip 2fa

Browse Source
This commit is contained in:
Brad Stein 2025-12-14 21:42:08 -03:00
parent 2ffc906487
commit 0d93929e3d
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/gitea/deployment.yaml
View File

@ -63,6 +63,8 @@ spec:
value: "false" value: "false"
- name: GITEA__log__LEVEL - name: GITEA__log__LEVEL
value: "debug" value: "debug"
- name: GITEA__service__REQUIRE_SIGNIN_VIEW
value: "false"
- name: DB_TYPE - name: DB_TYPE
value: "postgres" value: "postgres"
- name: DB_HOST - name: DB_HOST

8
services/gitea/oidc-job.yaml
View File

@ -71,7 +71,9 @@ spec:
--secret "$CLIENT_SECRET" \ --secret "$CLIENT_SECRET" \
--auto-discover-url "$DISCOVERY_URL" \ --auto-discover-url "$DISCOVERY_URL" \
--scopes "openid profile email" \ --scopes "openid profile email" \
--group-claim-name groups --group-claim-name groups \
--admin-group admin \
--skip-local-2fa
else else
echo "Creating keycloak auth source" echo "Creating keycloak auth source"
$BIN -c "$APPINI" admin auth add-oauth \ $BIN -c "$APPINI" admin auth add-oauth \
@ -81,5 +83,7 @@ spec:
--secret "$CLIENT_SECRET" \ --secret "$CLIENT_SECRET" \
--auto-discover-url "$DISCOVERY_URL" \ --auto-discover-url "$DISCOVERY_URL" \
--scopes "openid profile email" \ --scopes "openid profile email" \
--group-claim-name groups --group-claim-name groups \
--admin-group admin \
--skip-local-2fa
fi fi