ai-workspace-infra/iac_modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

playbook/jobs/init_gitlab: update

Browse Source
This commit is contained in:
Haitao Pan 2023-05-12 20:39:41 +08:00
parent a61afcb166
commit ab8705269e
2 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
playbook/jobs/init_gitlab
View File

@ -17,3 +17,6 @@
- secret_name: gitlab-tls
keyfile: /etc/ssl/apollo-ev.com.key
certfile: /etc/ssl/apollo-ev.com.pem
gitlab_oidc_client_id: gitlab_oidc
gitlab_oidc_isser: 'https://keycloak.apollo-ev.com/realms/cloud-sso'
gitlab_oidc_redirect_uri: 'https://gitlab.apollo-ev.com/users/auth/openid_connect/callback'

10
playbook/roles/gitlab/templates/provider.yaml
View File

@ -1,4 +1,4 @@
name: 'openid_connect'
playbook/roles/gitlab/templates/provider.yamlname: 'openid_connect'
label: 'keycloak-sso'
args:
name: 'openid_connect'
@ -11,8 +11,8 @@ args:
response_type: 'code'
client_auth_method: 'query'
send_scope_to_token_endpoint: true
issuer: 'https://keycloak.onwalk.net/realms/cloud-sso'
issuer: '{{ gitlab_oidc_isser }}'
client_options:
identifier: 'gitlab-oidc'
secret: '{{ gitlab_odic_client_token }}'
redirect_uri: 'https://gitlab.onwalk.net/users/auth/openid_connect/callback'
identifier: '{{ gitlab_oidc_client_id }}'
secret: '{{ gitlab_oidc_client_token }}'
redirect_uri: '{{ gitlab_oidc_redirect_uri }}'