bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

jenkins: fix oidc with wellknown config

Browse Source
This commit is contained in:
Brad Stein 2025-12-19 17:36:56 -03:00
parent f4fa44c842
commit 1357d783de
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
services/jenkins/helmrelease.yaml
View File

@ -180,17 +180,17 @@ spec:
clientId: "${OIDC_CLIENT_ID}" clientId: "${OIDC_CLIENT_ID}"
clientSecret: "${OIDC_CLIENT_SECRET}" clientSecret: "${OIDC_CLIENT_SECRET}"
serverConfiguration: serverConfiguration:
wellKnownOpenIDConfigurationUrl: "${OIDC_ISSUER}/.well-known/openid-configuration" wellKnown:
logoutFromOpenIdProvider: true wellKnownOpenIDConfigurationUrl: "${OIDC_ISSUER}/.well-known/openid-configuration"
scopesOverride: "openid profile email"
logoutFromOpenIdProvider: true
postLogoutRedirectUrl: "https://ci.bstein.dev" postLogoutRedirectUrl: "https://ci.bstein.dev"
scopes: "openid profile email"
sendScopesInTokenRequest: true sendScopesInTokenRequest: true
rootURLFromRequest: true rootURLFromRequest: true
userNameField: "preferred_username" userNameField: "preferred_username"
fullNameFieldName: "name" fullNameFieldName: "name"
emailFieldName: "email" emailFieldName: "email"
groupsFieldName: "groups" groupsFieldName: "groups"
escapeHatchEnabled: false
authorizationStrategy: | authorizationStrategy: |
loggedInUsersCanDoAnything: loggedInUsersCanDoAnything:
allowAnonymousRead: false allowAnonymousRead: false