diff --git a/helm/airflow/values.yaml b/helm/airflow/values.yaml index b76c7ea..d15d7dc 100644 --- a/helm/airflow/values.yaml +++ b/helm/airflow/values.yaml @@ -42,12 +42,17 @@ apiServer: "remote_app": { "client_id": "airflow", "client_secret": "AtBq4q8FcHe4tsVWfT0rrJ4RjKdzMnhG", - "server_metadata_url": "https://keycloak.idir-belfares.fr/auth/realms/k8s-apps/.well-known/openid-configuration", + "authorize_url": "https://keycloak.idir-belfares.fr/auth/realms/k8s-apps/protocol/openid-connect/auth", "access_token_url": "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/token", + "userinfo_endpoint": "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/userinfo", + "jwks_uri": "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/certs", "client_kwargs": { "scope": "openid email profile", "token_endpoint_auth_method": "client_secret_post" - } + }, + "jwks_options": {"verify_exp": true}, + "token_endpoint_auth_method": "client_secret_post", + "issuer": "https://keycloak.idir-belfares.fr/auth/realms/k8s-apps" } } ] \ No newline at end of file