diff --git a/manifests/vault/oidc-job.yaml b/manifests/vault/oidc-job.yaml index 05dcce0..7fb4e88 100644 --- a/manifests/vault/oidc-job.yaml +++ b/manifests/vault/oidc-job.yaml @@ -1,7 +1,7 @@ apiVersion: batch/v1 kind: Job metadata: - name: configure-vault-oidc + name: oidc-job namespace: dev-tools spec: template: @@ -13,7 +13,7 @@ spec: command: ["/bin/sh", "-c"] args: - | - echo "⏳ Waiting for Vault to become ready..." + echo "⏳ Waiting for Vault to become available..." until curl -s http://vault.dev-tools.svc.cluster.local:8200/v1/sys/health | grep '"initialized":true'; do sleep 2 done @@ -21,20 +21,24 @@ spec: export VAULT_ADDR=http://vault.dev-tools.svc.cluster.local:8200 export VAULT_TOKEN=$(cat /vault/secrets/root-token) + echo "🔐 Enabling OIDC auth method..." vault auth enable oidc || true + echo "🔧 Configuring OIDC connection to Keycloak..." vault write auth/oidc/config \ oidc_discovery_url="https://keycloack.dvirlabs.com/realms/lab" \ oidc_client_id="vault" \ oidc_client_secret="8GWiUqwUZimb4xXHqFNTYCrTkKyc9hrY" \ - default_role="vault-role" + default_role="default" + echo "📜 Writing Vault policy..." vault policy write oidc-ui-access - <