bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

zot: align oidc client to oauth2-proxy; add vault redirect

Browse Source
This commit is contained in:
Brad Stein 2025-12-09 20:49:25 -03:00
parent 8f9f6dd5b3
commit 9d6881725a
3 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
services/keycloak/zot-client-bootstrap.yaml
View File

@ -2,7 +2,7 @@
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: keycloak-zot-client-bootstrap-3 name: keycloak-zot-client-bootstrap-4
namespace: sso namespace: sso
labels: labels:
app: keycloak-zot-client-bootstrap app: keycloak-zot-client-bootstrap
@ -37,7 +37,7 @@ spec:
- name: CLIENT_IDS - name: CLIENT_IDS
value: "oauth2-proxy oauth2-proxy-zot" value: "oauth2-proxy oauth2-proxy-zot"
- name: REDIRECT_URIS - name: REDIRECT_URIS
value: '["https://auth.bstein.dev/oauth2/callback","https://registry.bstein.dev/oauth2/callback","https://longhorn.bstein.dev/oauth2/callback","https://secret.bstein.dev/ui/vault/auth/oidc/oidc/callback"]' value: '["https://auth.bstein.dev/oauth2/callback","https://registry.bstein.dev/oauth2/callback","https://longhorn.bstein.dev/oauth2/callback","https://secret.bstein.dev/oauth2/callback","https://secret.bstein.dev/ui/vault/auth/oidc/oidc/callback"]'
- name: WEB_ORIGINS - name: WEB_ORIGINS
value: '["https://registry.bstein.dev","https://auth.bstein.dev","https://longhorn.bstein.dev","https://secret.bstein.dev"]' value: '["https://registry.bstein.dev","https://auth.bstein.dev","https://longhorn.bstein.dev","https://secret.bstein.dev"]'
command: command:

2
services/zot/configmap.yaml
View File

@ -24,7 +24,7 @@ data:
"providers": { "providers": {
"oidc": { "oidc": {
"issuer": "https://sso.bstein.dev/realms/atlas", "issuer": "https://sso.bstein.dev/realms/atlas",
"clientID": "zot", "clientID": "oauth2-proxy",
"clientSecret": "__CLIENT_SECRET__", "clientSecret": "__CLIENT_SECRET__",
"scopes": ["openid", "profile", "email", "groups"] "scopes": ["openid", "profile", "email", "groups"]
} }

2
services/zot/deployment.yaml
View File

@ -73,7 +73,7 @@ spec:
- name: ZOT_CLIENT_SECRET - name: ZOT_CLIENT_SECRET
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: zot-oidc-client name: oauth2-proxy-zot-oidc
key: client_secret key: client_secret
volumeMounts: volumeMounts:
- name: cfg-src - name: cfg-src