fix: grafana oauth attempt 1

locmai · Jan 14, 2023 · 7afda47 · 7afda47
1 parent b3df4b8
commit 7afda47
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/system/templates/monitoring.yaml b/system/templates/monitoring.yaml
@@ -86,13 +86,15 @@ spec:
             auth.generic_oauth:
               name: Vault
               enabled: true
-              allow_sign_up: true
+              allow_sign_up: false
+              allowed_domains: "{{ .Values.global.domain }}"
               client_id: "\"${OIDC_CLIENT_ID}\""
               client_secret: "\"${OIDC_CLIENT_SECRET}\""
+              oauth_skip_org_role_update_sync: true
               scopes: openid groups user email
-              auth_url: "https://auth.maibaloc.com/ui/vault/identity/oidc/provider/vault-provider/authorize"
-              token_url: "https://auth.maibaloc.com/v1/identity/oidc/provider/vault-provider/token"
-              api_url: "https://auth.maibaloc.com/v1/identity/oidc/provider/vault-provider/userinfo"
+              auth_url: "https://auth.{{ .Values.global.domain }}/ui/vault/identity/oidc/provider/vault-provider/authorize"
+              token_url: "https://auth.{{ .Values.global.domain }}/v1/identity/oidc/provider/vault-provider/token"
+              api_url: "https://auth.{{ .Values.global.domain }}/v1/identity/oidc/provider/vault-provider/userinfo"
           sidecar:
             enableUniqueFilenames: false
             image: