From a82d027f81d4075d3f8eef4bf764734d454cbc31 Mon Sep 17 00:00:00 2001 From: Daniel Sy Date: Wed, 13 Aug 2025 14:24:24 +0200 Subject: [PATCH] =?UTF-8?q?refactor(auth):=20=F0=9F=94=A7=20Simplify=20OAu?= =?UTF-8?q?th=20configuration=20structure?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Refactors the OAuth configuration in the Grafana manifest by restructuring the indentation for clarity and organization. This change enhances readability and maintainability of the authentication settings without altering functionality. --- .../grafana-operator/manifests/grafana.yaml | 27 +++++++++---------- 1 file changed, 13 insertions(+), 14 deletions(-) diff --git a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml index 3815699..40b2d34 100644 --- a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml +++ b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml @@ -43,17 +43,16 @@ spec: auth: disable_login: true disable_login_form: true - auth.generic_oauth: - enabled: true - name: Forgejo - allow_sign_up: false - use_refresh_token: true - client_id: grafana - client_secret: "thisisasecret" # $__file{/etc/secrets/auth_generic_oauth/client_secret} - scopes: openid email profile offline_access roles - auth_url: https://dex.observability.t09.de/auth - token_url: https://dex.observability.t09.de/token - api_url: https://dex.observability.t09.de/userinfo - redirect_uri: https://grafana.observability.t09.de/login/generic_oauth - role_attribute_path: "contains(groups[*], 'admin') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'" - + generic_oauth: + enabled: true + name: Forgejo + allow_sign_up: false + use_refresh_token: true + client_id: grafana + client_secret: "thisisasecret" # $__file{/etc/secrets/auth_generic_oauth/client_secret} + scopes: openid email profile offline_access roles + auth_url: https://dex.observability.t09.de/auth + token_url: https://dex.observability.t09.de/token + api_url: https://dex.observability.t09.de/userinfo + redirect_uri: https://grafana.observability.t09.de/login/generic_oauth + role_attribute_path: "contains(groups[*], 'admin') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'"