mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 14:02:56 +09:00
Self-review fix: the KeycloakClientScope rendered for the per-cluster audience used `included.custom.audience` (raw string), but the project convention — set in `packages/system/keycloak-configure/templates/configure-kk.yaml` for the legacy global `kubernetes-client` scope — is `included.client.audience` (refers to a clientId in the same realm). Both keys make Keycloak emit the audience claim with the same value in our setup, but the `client.audience` form is the idiomatic one when the audience IS a registered client in the realm. Signed-off-by: Ivan Okhotnikov <ivan.okhotnikov@aenix.io>
How to test packages local
cd packages/core/installer
make image-cozystack REGISTRY=YOUR_CUSTOM_REGISTRY
make apply
kubectl delete po -l app=source-controller -n cozy-fluxcd