This commit is contained in:
2024-05-28 09:29:16 +02:00
parent 7ffab78e88
commit feba13a85a

View File

@@ -15,8 +15,8 @@ resource "kubectl_manifest" "cm_env_back" {
TAIGA_SITES_SCHEME: https
TAIGA_ASYNC_RABBITMQ_HOST: ${kubectl_manifest.rabbit.name}
TAIGA_EVENTS_RABBITMQ_HOST: ${kubectl_manifest.rabbit.name}
SESSION_COOKIE_SECURE: "False"
CSRF_COOKIE_SECURE: "False"
SESSION_COOKIE_SECURE: "True"
CSRF_COOKIE_SECURE: "True"
ENABLE_TELEMETRY: "False"
PUBLIC_REGISTER_ENABLED: "True"
ENABLE_GITHUB_AUTH: "False"
@@ -28,7 +28,7 @@ resource "kubectl_manifest" "cm_env_back" {
ENABLE_OIDC_AUTH: "True"
OIDC_RP_SCOPES: "openid email profile"
OIDC_BASE_URL: "${module.oauth2.sso_configuration_url}"
OIDC_OP_JWKS_ENDPOINT: "${module.oauth2.sso_configuration_url}"
OIDC_OP_JWKS_ENDPOINT: "${module.oauth2.sso_configuration_url}jwks/"
OIDC_OP_AUTHORIZATION_ENDPOINT: "${module.oauth2.sso_authorize_url}"
OIDC_OP_TOKEN_ENDPOINT: "${module.oauth2.sso_token_url}"
OIDC_OP_USER_ENDPOINT: "${module.oauth2.sso_userinfo_url}"
@@ -53,13 +53,12 @@ resource "kubectl_manifest" "cm_env_front" {
PUBLIC_REGISTER_ENABLED: "true"
ENABLE_GITHUB_AUTH: "false"
ENABLE_GITLAB_AUTH: "false"
ENABLE_OIDC_AUTH: "true"
ENABLE_SLACK: "false"
ENABLE_GITHUB_IMPORTER: "false"
ENABLE_JIRA_IMPORTER: "false"
ENABLE_TRELLO_IMPORTER: "false"
ENABLE_OIDC_AUTH: "true"
OIDC_BUTTON_TEXT: "vynil"
OIDC_BUTTON_TEXT: "${var.domain}"
OIDC_MOUNT_POINT: "/api/oidc"
EOF
}