rubenhensen/k8scd
1
0
Fork 0
mirror of https://github.com/rubenhensen/k8scd.git synced 2026-09-17 02:12:55 +02:00
Code Issues Packages Projects Releases Wiki Activity

oidc vault config change authentik6

Browse Source
This commit is contained in:
Ruben Hensen
2026-03-15 11:41:34 +01:00
parent d8b058d46c
commit f78b3fc830
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
vault/configure-oidc.yaml
+6 -1
View File
@@ -52,6 +52,11 @@ spec:
- | - |
vault auth enable oidc 2>/dev/null || true vault auth enable oidc 2>/dev/null || true
vault auth tune -listing_visibility=unauth oidc/ vault auth tune -listing_visibility=unauth oidc/
vault policy write admin - <<'POLICY'
path "*" {
capabilities = ["create", "read", "update", "delete", "list", "sudo"]
}
POLICY
vault write auth/oidc/config \ vault write auth/oidc/config \
oidc_discovery_url="https://authentik.rubenhensen.nl/application/o/vault/" \ oidc_discovery_url="https://authentik.rubenhensen.nl/application/o/vault/" \
oidc_client_id="vault" \ oidc_client_id="vault" \
@@ -63,5 +68,5 @@ spec:
user_claim="preferred_username" \ user_claim="preferred_username" \
oidc_scopes="openid,profile,email" \ oidc_scopes="openid,profile,email" \
groups_claim="groups" \ groups_claim="groups" \
policies="default" policies="default,admin"
restartPolicy: OnFailure restartPolicy: OnFailure