sheppy/no-secrets-athq-ansible
1
0
Fork 0
mirror of https://github.com/FAUSheppy/no-secrets-athq-ansible synced 2025-12-10 04:48:34 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: oidc config on harbor side

Browse Source
This commit is contained in:
Johnathen Sheppard
2023-12-29 15:06:19 +00:00
parent c07c80c24f
commit 9baacd5597
4 changed files with 14 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
roles/harbor-registry/files/harbor-oidc.json
View File

@@ -1,12 +1,12 @@
{
"auth_mode": "oidc_auth",
"oidc_name": "keycloak",
"oidc_endpoint": "https://",
"oidc_name": "AtlantisHQ Accounts",
"oidc_endpoint": "https://keycloak.atlantishq.de/realms/master",
"oidc_groups_claim": "groups",
"oidc_admin_group": "admin",
"oidc_client_id": "defaultwithclientkey",
"oidc_client_secret": "asdfasdfasdfasdfasddfasdfasdfasdf",
"oidc_scope": "openid,email,profile,offline_access",
"oidc_client_id": "z_harbor",
"oidc_client_secret": "HISTORY_PURGED_SECRET",
"oidc_scope": "openid,email,profile",
"oidc_verify_cert": "true",
"oidc_auto_onboard": "true",
"oidc_user_claim": "preferred_username"

2
roles/harbor-registry/templates/harbor.config.yaml
View File

@@ -28,7 +28,7 @@ http:
# Uncomment external_url if you want to enable external proxy
# And when it enabled the hostname will no longer used
external_url: https://harbor.atlantishq.de
external_url: https://harbor-registry.atlantishq.de
# The initial password of Harbor admin
# It only works in first time to install harbor