fix: vault configur setting

locmai · Jul 25, 2022 · 245b628 · 245b628
1 parent 8d1523a
commit 245b628
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/platform/files/oidc/main.go b/platform/files/oidc/main.go
@@ -37,7 +37,7 @@ func main() {
 	// Initialize Vault config and client
 	config := vault.DefaultConfig()
 
-	config.Address = "https://vault." + domain
+	config.Address = "https://auth." + domain
 	client, err := vault.NewClient(config)
 
 	unseal_secrets, err := k8sclient.CoreV1().Secrets("platform").Get(context.TODO(), "vault-unseal-keys", metav1.GetOptions{})
@@ -258,7 +258,7 @@ func main() {
 		map[string]interface{}{
 			"allowed_client_ids": boundary_client.Data["client_id"],
 			"scopes_supported":   "groups,user,email",
-			"issuer":             "http://vault.platform.svc.cluster.local:8200",
+			"issuer":             "https://auth." + domain,
 		}); err != nil {
 		log.Fatal(err)
 	}

diff --git a/platform/templates/argo-workflow.yaml b/platform/templates/argo-workflow.yaml
@@ -30,7 +30,7 @@ spec:
           extraArgs:
             - --auth-mode=sso
           sso:
-            issuer: "https://auth.maibaloc.com/v1/identity/oidc/provider/vault-provider"
+            issuer: "https://auth.{{ .Values.global.domain }}/v1/identity/oidc/provider/vault-provider"
             sessionExpiry: 240h
             clientId:
               name: humble-oidc-secrets

diff --git a/platform/workflows/templates/configure-vault.yaml b/platform/workflows/templates/configure-vault.yaml
@@ -13,7 +13,7 @@ spec:
     templates:
     - name: configure-vault
       container:
-        image: locmai/humble-vault-config-tool:0.0.1
+        image: locmai/humble-vault-config-tool:0.0.2
         command: [/vault-init-tool]
         env:
         - name: HUMBLE_DOMAIN