bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(hermes): request supported OIDC scopes
Some checks failed
Tests / Declarative: Post Actions failed: 2, passed: 153
Details

Browse Source
This commit is contained in:
jenkins 2026-08-08 20:08:44 -03:00
parent 21db15597c
commit cd1fb62d0f
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
services/hermes/oauth2-proxy.yaml
View File

@ -83,7 +83,7 @@ spec:
- --oidc-issuer-url=https://sso.bstein.dev/realms/atlas
- --user-id-claim=sub
- --code-challenge-method=S256
- --scope=openid profile email groups
- --scope=openid profile email
- --email-domain=*
- --authenticated-emails-file=/etc/oauth2-proxy/allowed-emails
- --set-xauthrequest=true
@ -173,7 +173,7 @@ spec:
- --oidc-issuer-url=https://sso.bstein.dev/realms/atlas
- --user-id-claim=sub
- --code-challenge-method=S256
- --scope=openid profile email groups
- --scope=openid profile email
- --email-domain=*
- --authenticated-emails-file=/etc/oauth2-proxy/allowed-emails
- --set-xauthrequest=true
@ -263,7 +263,7 @@ spec:
- --oidc-issuer-url=https://sso.bstein.dev/realms/atlas
- --user-id-claim=sub
- --code-challenge-method=S256
- --scope=openid profile email groups
- --scope=openid profile email
- --email-domain=*
- --set-xauthrequest=true
- --pass-user-headers=true