DevFW-CICD/stacks-instances
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(auth): 🔧 Simplify OAuth configuration structure

Browse source 
Refactors the OAuth configuration in the Grafana manifest by restructuring the indentation for clarity and organization. This change enhances readability and maintainability of the authentication settings without altering functionality.
This commit is contained in:
Daniel Sy 2025-08-13 14:24:24 +02:00
parent ae26ec6a42
commit a82d027f81
Signed by untrusted user: danielsy
GPG key ID: 1F39A8BBCD2EE3D3
1 changed files with 13 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

27
otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
View file

@ -43,17 +43,16 @@ spec:
auth:
disable_login: true
disable_login_form: true
auth.generic_oauth:
enabled: true
name: Forgejo
allow_sign_up: false
use_refresh_token: true
client_id: grafana
client_secret: "thisisasecret" # $__file{/etc/secrets/auth_generic_oauth/client_secret}
scopes: openid email profile offline_access roles
auth_url: https://dex.observability.t09.de/auth
token_url: https://dex.observability.t09.de/token
api_url: https://dex.observability.t09.de/userinfo
redirect_uri: https://grafana.observability.t09.de/login/generic_oauth
role_attribute_path: "contains(groups[*], 'admin') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'"
generic_oauth:
enabled: true
name: Forgejo
allow_sign_up: false
use_refresh_token: true
client_id: grafana
client_secret: "thisisasecret" # $__file{/etc/secrets/auth_generic_oauth/client_secret}
scopes: openid email profile offline_access roles
auth_url: https://dex.observability.t09.de/auth
token_url: https://dex.observability.t09.de/token
api_url: https://dex.observability.t09.de/userinfo
redirect_uri: https://grafana.observability.t09.de/login/generic_oauth
role_attribute_path: "contains(groups[*], 'admin') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'"