bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

harbor: enable keycloak oidc settings

Browse Source
This commit is contained in:
Brad Stein 2026-01-13 20:42:26 -03:00
parent fbde129d4c
commit bcef167b50
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
services/harbor/helmrelease.yaml
View File

@ -117,6 +117,21 @@ spec:
existingSecret: harbor-core
existingXsrfSecret: harbor-core
existingXsrfSecretKey: CSRF_KEY
# OIDC config; client secret is stored out-of-band.
configureUserSettings: |
{
"auth_mode": "oidc_auth",
"oidc_name": "Keycloak",
"oidc_endpoint": "https://sso.bstein.dev/realms/atlas",
"oidc_client_id": "harbor",
"oidc_verify_cert": true,
"oidc_auto_onboard": true,
"oidc_scope": "openid,profile,email,groups",
"oidc_groups_claim": "groups",
"oidc_user_claim": "preferred_username",
"oidc_admin_group": "admin",
"oidc_logout": true
}
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution: