Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat(Add OIDC preview integration #808

Open
wants to merge 13 commits into
base: master
Choose a base branch
from
6 changes: 5 additions & 1 deletion ci/create_or_update_k8s-azure.sh
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,11 @@ helm upgrade --install ${NAME} ./helm-chart --namespace ${NAME} \
--set ingress.hosts[0].host=${NAME}.dev.molgenis.org \
--set ingress.tls[0].host=${NAME}.dev.molgenis.org \
--set ingress.tls[0].secretName=dev.molgenis.org \
--set adminPassword=adminArmadillo! \
--set config.spring.security.user.password=${ADMINPASS} \
#--set config.spring.security.oauth2.client.registration.molgenis.redirect-uri=https://${NAME}.dev.molgenis.org/login/oauth2/code/molgenis \
--set config.spring.security.oauth2.client.registration.molgenis.client-id=${OIDC_CLIENTID} \
--set config.spring.security.oauth2.client.registration.molgenis.client-secret=${OIDC_CLIENTSECRET} \
--set config.spring.security.oauth2.resourceserver.opaquetoken.client-id=${OIDC_CLIENTID} \
--set image.tag=${TAG_NAME} \
--set image.pullPolicy=Always \

Expand Down
23 changes: 22 additions & 1 deletion helm-chart/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -30,14 +30,35 @@ config:
port: 8085
package-whitelist:
- dsBase
- resourcer
resourcer
- dsMediation
- dsMTLBase
function-blacklist: [ ]
options:
datashield:
# the seed can only be 9 digits
seed: 342325352
spring:
security:
user:
password: fith5gaexaiH0noojo
oauth2:
client:
provider:
molgenis:
issuer-uri: 'https://lifecycle-auth.molgenis.org'
registration:
molgenis:
redirect-uri: 'localhost'
client-id: clientid
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

shouldn't you put the id and secret you set above here?

client-secret: client-sd
resourceserver:
jwt:
issuer-uri: 'https://lifecycle-auth.molgenis.org'
opaquetoken:
client-id: clientid




image:
Expand Down