update realm

2026-06-10 22:16:36 +02:00
parent 7461ddc6a4
commit 05c56b3f9e
2 changed files with 60 additions and 58 deletions
@@ -1,29 +1,30 @@
-hostAliases:
- ip: "13.140.150.2"
-  hostnames:
-    - "keycloak.13.140.150.2.nip.io"
-
-config:
-  existingSecret: oauth2-proxy-alertmanager
-  cookie_secure: false
-  reverse_proxy: true
-  set_xauthrequest: true
-  cookie_samesite: "lax"
-  redirect_url: http://alertmanager.13.140.150.2.nip.io/oauth2/callback
-
-extraArgs:
-  provider: oidc
-  oidc-issuer-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps"
-  email-domain: "*"
-  insecure-oidc-allow-unverified-email: "true"
-  upstream: "http://monitoring-kube-prometheus-alertmanager.monitoring.svc.cluster.local:9093"
-
-ingress:
-  enabled: true
-  className: nginx
-
-  hosts:
-    - alertmanager.13.140.150.2.nip.io
-
-  path: /
-  pathType: Prefix
+hostAliases:
+- ip: "13.140.150.2"
+  hostnames:
+    - "keycloak.13.140.150.2.nip.io"
+
+config:
+  existingSecret: oauth2-proxy-alertmanager
+  cookie_secure: false
+  reverse_proxy: true
+  set_xauthrequest: true
+  cookie_samesite: "lax"
+  redirect_url: http://alertmanager.13.140.150.2.nip.io/oauth2/callback
+
+extraArgs:
+  provider: oidc
+  oidc-issuer-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps"
+  login-url: "http://keycloak.13.140.150.2.nip.io/auth/realms/k8s-apps/protocol/openid-connect/auth"
+  redeem-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/token"
+  oidc-jwks-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/certs"
+  email-domain: "*"
+  insecure-oidc-allow-unverified-email: "true"
+  upstream: "http://monitoring-kube-prometheus-alertmanager.monitoring.svc.cluster.local:9093"
+
+ingress:
+  enabled: true
+  className: nginx
+  hosts:
+    - alertmanager.13.140.150.2.nip.io
+  path: /
+  pathType: Prefix
@@ -1,29 +1,30 @@
-hostAliases:
- ip: "13.140.150.2"
-  hostnames:
-    - "keycloak.13.140.150.2.nip.io"
-
-config:
-  existingSecret: oauth2-proxy-prometheus
-  cookie_secure: false
-  reverse_proxy: true
-  set_xauthrequest: true
-  cookie_samesite: "lax"
-  redirect_url: http://prometheus.13.140.150.2.nip.io/oauth2/callback
-
-extraArgs:
-  provider: oidc
-  oidc-issuer-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps"
-  email-domain: "*"
-  insecure-oidc-allow-unverified-email: "true"
-  upstream: "http://monitoring-kube-prometheus-prometheus.monitoring.svc.cluster.local:9090"
-
-ingress:
-  enabled: true
-  className: nginx
-
-  hosts:
-    - prometheus.13.140.150.2.nip.io
-
-  path: /
-  pathType: Prefix
+hostAliases:
+- ip: "13.140.150.2"
+  hostnames:
+    - "keycloak.13.140.150.2.nip.io"
+
+config:
+  existingSecret: oauth2-proxy-prometheus
+  cookie_secure: false
+  reverse_proxy: true
+  set_xauthrequest: true
+  cookie_samesite: "lax"
+  redirect_url: http://prometheus.13.140.150.2.nip.io/oauth2/callback
+
+extraArgs:
+  provider: oidc
+  oidc-issuer-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps"
+  login-url: "http://keycloak.13.140.150.2.nip.io/auth/realms/k8s-apps/protocol/openid-connect/auth"
+  redeem-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/token"
+  oidc-jwks-url: "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/certs"
+  email-domain: "*"
+  insecure-oidc-allow-unverified-email: "true"
+  upstream: "http://monitoring-kube-prometheus-prometheus.monitoring.svc.cluster.local:9090"
+
+ingress:
+  enabled: true
+  className: nginx
+  hosts:
+    - prometheus.13.140.150.2.nip.io
+  path: /
+  pathType: Prefix