Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,8 @@ Group-based authorization allows to control access to a specific application bas
| `Admin` | `/UDS Core/Admin` | Defined for Administrators |
| `Auditor` | `/UDS Core/Auditor` | Defined for regular Users |

The `/` character is used to define group hierarchy in Keycloak. To include it as part of a group name, escape it with a `~`, for example: `a~/b~/c`.

Below is an example to configure authorization based on the `Admin` (`/UDS Core/Admin`) Group:

```yaml
Expand Down
4 changes: 4 additions & 0 deletions src/keycloak/chart/templates/statefulset.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -116,6 +116,10 @@ spec:
- name: KC_HTTPS_CLIENT_AUTH
value: request

# Escape Slashes in Group Names
- name: KC_SPI_GROUP_JPA_ESCAPE_SLASHES_IN_GROUP_PATH
value: "true"

## Activate the nginx provider
- name: KC_SPI_X509CERT_LOOKUP_PROVIDER
value: nginx
Expand Down
Loading