fix(global): oidc with signingKey in authentik-application

This commit is contained in:
WrenIX 2024-02-08 16:18:39 +01:00
parent b1600ed81a
commit 8bedadd126
Signed by: wrenix
GPG key ID: 7AFDB012974B1BB5
2 changed files with 2 additions and 2 deletions

View file

@ -40,7 +40,7 @@ spec:
redirectURL: "https://{{ $url }}/login/generic_oauth" redirectURL: "https://{{ $url }}/login/generic_oauth"
clientID: {{ .Values.grafana.auth.authentik.clientID | default (derivePassword 1 "long" .Values.commons.masterPassword "grafana" "clientID") | quote }} clientID: {{ .Values.grafana.auth.authentik.clientID | default (derivePassword 1 "long" .Values.commons.masterPassword "grafana" "clientID") | quote }}
clientSecret: {{ .Values.grafana.auth.authentik.clientSecret | default (derivePassword 1 "long" .Values.commons.masterPassword "grafana" "clientSecret") | quote }} clientSecret: {{ .Values.grafana.auth.authentik.clientSecret | default (derivePassword 1 "long" .Values.commons.masterPassword "grafana" "clientSecret") | quote }}
# signingKey: signingKey: "authentik Self-signed Certificate"
scopes: scopes:
- name: "authentik default OAuth Mapping: OpenID 'openid'" - name: "authentik default OAuth Mapping: OpenID 'openid'"
- name: "authentik default OAuth Mapping: OpenID 'email'" - name: "authentik default OAuth Mapping: OpenID 'email'"

View file

@ -34,7 +34,7 @@ spec:
redirectURL: "https://{{ $host }}/apps/user_oidc/code" redirectURL: "https://{{ $host }}/apps/user_oidc/code"
clientID: {{ .Values.auth.clientID | default (derivePassword 1 "long" .Values.commons.masterPassword "nextcloud" "auth.clientID") | quote }} clientID: {{ .Values.auth.clientID | default (derivePassword 1 "long" .Values.commons.masterPassword "nextcloud" "auth.clientID") | quote }}
clientSecret: {{ .Values.auth.clientSecret | default (derivePassword 1 "long" .Values.commons.masterPassword "nextcloud" "auth.clientSecret") | quote }} clientSecret: {{ .Values.auth.clientSecret | default (derivePassword 1 "long" .Values.commons.masterPassword "nextcloud" "auth.clientSecret") | quote }}
# signingKey: signingKey: "authentik Self-signed Certificate"
scopes: scopes:
- name: "authentik default OAuth Mapping: OpenID 'openid'" - name: "authentik default OAuth Mapping: OpenID 'openid'"
- name: "authentik default OAuth Mapping: OpenID 'email'" - name: "authentik default OAuth Mapping: OpenID 'email'"