From 1633cd8a24451d887853958af15f6f95621b8b99 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Fri, 9 May 2025 18:51:50 +0300
Subject: [PATCH] Fix keycloack url

---
 manifests/vault/values.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/manifests/vault/values.yaml b/manifests/vault/values.yaml
index 2d3db9f..7372d5e 100644
--- a/manifests/vault/values.yaml
+++ b/manifests/vault/values.yaml
@@ -44,6 +44,12 @@ server:
             oidc_client_secret="8GWiUqwUZimb4xXHqFNTYCrTkKyc9hrY" \
             default_role="vault-role"
 
+          vault policy write oidc-ui-access - <<EOF
+          path "auth/oidc/role/vault-role" {
+            capabilities = ["read"]
+          }
+          EOF
+
           vault write auth/oidc/role/vault-role \
             bound_audiences="vault" \
             allowed_redirect_uris="https://vault.dvirlabs.com/ui/vault/auth/oidc/oidc/callback" \
@@ -51,8 +57,10 @@ server:
             groups_claim="groups" \
             oidc_scopes="profile email groups" \
             policies="default" \
+            token_policies="oidc-ui-access" \
             ttl="1h"
 
+
       env:
         - name: VAULT_TOKEN
           valueFrom: