Files
no-secrets-athq-ansible/roles/harbor-registry/files/harbor-oidc.json

14 lines
451 B
JSON

{
"auth_mode": "oidc_auth",
"oidc_name": "AtlantisHQ Accounts",
"oidc_endpoint": "https://keycloak.atlantishq.de/realms/master",
"oidc_groups_claim": "groups",
"oidc_admin_group": "pki",
"oidc_client_id": "z_harbor",
"oidc_client_secret": "{{ keycloak_clients['harbor']['client_secret'] }}",
"oidc_scope": "openid,email,profile",
"oidc_verify_cert": "true",
"oidc_auto_onboard": "true",
"oidc_user_claim": "preferred_username"
}