rblundon
fe564d7227
git-subtree-dir: cluster-config git-subtree-split: 654f23903bd1f9a27a4810bd289d165b6cfdbb0c
44 lines
1.0 KiB
YAML
44 lines
1.0 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1alpha1
|
|
kind: Component
|
|
|
|
resources:
|
|
- oidc-client-secret.yaml
|
|
- console.yaml
|
|
|
|
patches:
|
|
- patch: |-
|
|
- op: add
|
|
path: /spec/identityProviders/-
|
|
value:
|
|
name: LabSSO
|
|
mappingMethod: claim
|
|
type: OpenID
|
|
openID:
|
|
clientID: openshift
|
|
clientSecret:
|
|
name: oidc-client-secret
|
|
extraScopes:
|
|
- email
|
|
- profile
|
|
extraAuthorizeParameters:
|
|
include_granted_scopes: "true"
|
|
claims:
|
|
preferredUsername:
|
|
- preferred_username
|
|
- email
|
|
name:
|
|
- nickname
|
|
- given_name
|
|
- name
|
|
email:
|
|
- custom_email_claim
|
|
- email
|
|
groups:
|
|
- groups
|
|
issuer: https://sso.ocplab.com/realms/ocplab
|
|
target:
|
|
group: config.openshift.io
|
|
kind: OAuth
|
|
name: cluster
|
|
version: v1
|