mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 22:13:18 +09:00
Myasnikov Daniil
edd54252c3
OIDC values do not reach tenant realm-group templates unless Helm also knows the Keycloak API. Harbor's Gateway setting bypasses its Ingress certificate branches, so certificate fixtures need the ingress path. Assisted-By: LLM Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
31 lines
958 B
YAML
31 lines
958 B
YAML
# OIDC on, per-host ACME through http01, services exposed. The other side of the
|
|
# branches fresh.yaml leaves off.
|
|
_cluster:
|
|
root-host: "example.org"
|
|
bundle-name: "paas-full"
|
|
solver: "http01"
|
|
issuer-name: "letsencrypt-prod"
|
|
wildcard-secret-name: ""
|
|
wildcard-issue: "false"
|
|
oidc-enabled: "true"
|
|
oidc-insecure-skip-verify: "false"
|
|
keycloak-internal-url: "https://keycloak.cozy-keycloak.svc.cluster.local"
|
|
extra-keycloak-redirect-uri-for-dashboard: ""
|
|
expose-ingress: "tenant-root"
|
|
expose-services: "tenant-root"
|
|
cluster-domain: "cluster.local"
|
|
scheduling:
|
|
dedicatedNodesForWindowsVMs: "false"
|
|
globalAppTopologySpreadConstraints: |
|
|
topologySpreadConstraints:
|
|
- maxSkew: 1
|
|
topologyKey: topology.kubernetes.io/zone
|
|
whenUnsatisfiable: ScheduleAnyway
|
|
_namespace:
|
|
etcd: "tenant-test"
|
|
ingress: "tenant-test"
|
|
gateway: ""
|
|
monitoring: "tenant-test"
|
|
seaweedfs: "tenant-test"
|
|
host: "example.org"
|