bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

jenkins: fix oidc jcasc schema

Browse Source
This commit is contained in:
Brad Stein 2025-12-19 16:44:24 -03:00
parent af411e795c
commit f4fa44c842
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
services/jenkins/helmrelease.yaml
View File

@ -179,19 +179,18 @@ spec:
oic: oic:
clientId: "${OIDC_CLIENT_ID}" clientId: "${OIDC_CLIENT_ID}"
clientSecret: "${OIDC_CLIENT_SECRET}" clientSecret: "${OIDC_CLIENT_SECRET}"
tokenServerUrl: "${OIDC_TOKEN_URL}" serverConfiguration:
authorizationServerUrl: "${OIDC_AUTH_URL}" wellKnownOpenIDConfigurationUrl: "${OIDC_ISSUER}/.well-known/openid-configuration"
userInfoUrl: "${OIDC_USERINFO_URL}"
logoutFromOpenIdProvider: true logoutFromOpenIdProvider: true
postLogoutRedirectUrl: "https://ci.bstein.dev" postLogoutRedirectUrl: "https://ci.bstein.dev"
scopes: "openid profile email" scopes: "openid profile email"
sendScopesInTokenRequest: true
rootURLFromRequest: true rootURLFromRequest: true
userNameField: "preferred_username" userNameField: "preferred_username"
fullNameFieldName: "name" fullNameFieldName: "name"
emailFieldName: "email" emailFieldName: "email"
groupsFieldName: "groups" groupsFieldName: "groups"
escapeHatchEnabled: false escapeHatchEnabled: false
maxClockSkew: 120
authorizationStrategy: | authorizationStrategy: |
loggedInUsersCanDoAnything: loggedInUsersCanDoAnything:
allowAnonymousRead: false allowAnonymousRead: false