0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-10-30 08:37:31 +09:00

Files

T

Myasnikov Daniil 65ce407cbc fix(info): use root-host for Keycloak OIDC issuer URL in tenant kubeconfig

The kubeconfig generated for non-root tenants pointed
`--oidc-issuer-url` at `keycloak.<TENANT>.<ROOT-DOMAIN>` because
`$host` was sourced from `_namespace.host` (tenant-specific
subdomain). Keycloak's ingress and cert live at
`keycloak.<ROOT-DOMAIN>` (built from `_cluster.root-host`), so
`kubectl oidc-login` failed TLS verification against the
nginx-ingress default fake cert.

The existing lookup-based override that tried to read
`tenant-root`'s `spec.values.host` no longer triggers since
PR #1787 migrated tenant-root to `valuesFrom` (Secret-backed),
leaving `spec.values` empty.

Use `_cluster.root-host` directly, matching what the dashboard
gatekeeper template already does for the same Keycloak realm.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>

2026-05-21 11:28:20 +05:00

charts

Configure all apps to use new function to generate subjects

2025-06-16 20:32:11 +02:00

logos

Add new info logo in common style (#649 )

2025-02-25 15:12:06 +01:00

templates

fix(info): use root-host for Keycloak OIDC issuer URL in tenant kubeconfig

2026-05-21 11:28:20 +05:00

.helmignore

feature/mv-kubeconfig