baschno/buun-stack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(lakekeeper): fix OIDC settings

Browse Source
This commit is contained in:
Masaki Yatsu
2025-09-19 15:16:25 +09:00
parent 7bc24641d8
commit 7f87dfeb41
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lakekeeper/justfile
View File

@@ -116,7 +116,8 @@ create-oidc-client:
realm=${KEYCLOAK_REALM} \
client_id=lakekeeper \
redirect_url="https://${LAKEKEEPER_HOST}/ui/callback" \
post_logout_redirect_uris="https://${LAKEKEEPER_HOST}/ui/logout,https://${LAKEKEEPER_HOST}/ui/,https://${LAKEKEEPER_HOST}/"
post_logout_redirect_uris="https://${LAKEKEEPER_HOST}/ui/logout,https://${LAKEKEEPER_HOST}/ui/,https://${LAKEKEEPER_HOST}/" \
access_token_lifespan="43200"
fi
# Add audience mapper to include 'lakekeeper' in JWT audience

2
lakekeeper/lakekeeper-values.gomplate.yaml
View File

@@ -11,7 +11,7 @@ catalog:
LAKEKEEPER__OPENID_PROVIDER_URI: "https://{{ .Env.KEYCLOAK_HOST }}/realms/{{ .Env.KEYCLOAK_REALM }}"
LAKEKEEPER__OPENID_AUDIENCE: "lakekeeper"
LAKEKEEPER__UI__OPENID_CLIENT_ID: "lakekeeper"
LAKEKEEPER__UI__OPENID_SCOPE: "openid profile email"
LAKEKEEPER__UI__OPENID_SCOPE: "openid profile lakekeeper"
# Secret management configuration
secrets: