cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-08 21:14:56 +09:00

Files

T

Andrei Kvapil 3fef40e9f7 [dashboard] Add keycloakInternalUrl for backend-to-backend OIDC requests (#2224 )

## What this PR does

Adds `authentication.oidc.keycloakInternalUrl` platform value that
allows oauth2-proxy
in the dashboard to route backend calls (token exchange, JWKS, userinfo,
logout) through
an internal cluster URL while keeping browser redirects on the external
Keycloak URL.

When set, oauth2-proxy uses `--skip-oidc-discovery` and explicit
endpoint URLs pointing
to the internal Keycloak service. This avoids external DNS lookups and
TLS overhead for
pod-to-pod communication.

Fully backward-compatible: when the value is empty (default), behavior
is unchanged.

### Release note

```release-note
[dashboard] Added `authentication.oidc.keycloakInternalUrl` platform value to route oauth2-proxy backend requests through internal Keycloak service URL, bypassing external DNS and TLS.
```

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added configuration support for an internal KeyCloak URL, enabling
backend authentication requests to be routed through an alternative
endpoint while maintaining existing external URLs for browser
interactions.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-03-16 14:54:41 +01:00

images/migrations

feat(monitoring): migrate VictoriaLogs from VLogs to VLCluster (#2153 )

2026-03-11 08:58:19 +01:00

sources

Fix/backups (#2149 )

2026-03-16 17:31:06 +04:00

templates

feat(dashboard): add keycloakInternalUrl for backend-to-backend OIDC requests

2026-03-16 11:03:55 +05:00

Chart.yaml

Calculate tags and version automatically (#100 )