Fix kibana cr

This commit is contained in:
dvirlabs 2025-05-22 16:11:54 +03:00
parent 86a8aa3923
commit 6500963d0b

View File

@ -13,23 +13,21 @@ spec:
oidc.oidc1:
order: 0
realm: "keycloak"
{{- if and .Values.oidc .Values.oidc.existingSecret }}
{{- $secret := lookup "v1" "Secret" "monitoring" .Values.oidc.existingSecret }}
{{- $clientSecret := (hasKey $secret.data "clientSecret") | ternary ($secret.data.clientSecret | b64dec | quote) "\"\"" }}
xpack.security.authc.oidc.realms.keycloak:
order: 0
rp.client_id: "kibana"
rp.response_type: "code"
rp.redirect_uri: "https://{{ .Values.host }}/api/security/oidc/callback"
rp.post_logout_redirect_uri: "https://{{ .Values.host }}"
{{- if and .Values.oidc .Values.oidc.existingSecret }}
rp.client_secret: {{ (lookup "v1" "Secret" "monitoring" .Values.oidc.existingSecret).data.clientSecret | b64dec | quote }}
rp.client_secret: {{ $clientSecret }}
idp.metadata_url: "https://keycloak.dvirlabs.com/realms/{{ .Values.oidc.realm }}/.well-known/openid-configuration"
idp.entity_id: "https://keycloak.dvirlabs.com/realms/{{ .Values.oidc.realm }}"
{{- else }}
rp.client_secret: ""
idp.metadata_url: ""
idp.entity_id: ""
{{- end }}
claim_patterns.principal: "preferred_username"
claim_patterns.groups: "roles"
{{- end }}
http:
tls:
selfSignedCertificate: