fix(k8s): fix enabling OIDC auth

This commit is contained in:
Masaki Yatsu
2025-08-15 15:29:07 +09:00
parent 51097b2258
commit a1ced0a0a8
4 changed files with 75 additions and 24 deletions

View File

@@ -0,0 +1,6 @@
kube-apiserver-arg:
- "oidc-issuer-url=https://{{ .Env.KEYCLOAK_HOST }}/realms/{{ .Env.KEYCLOAK_REALM }}"
- "oidc-client-id=k8s"
- "oidc-username-claim=preferred_username"
- "oidc-groups-claim=groups"
- "oidc-groups-prefix=oidc:"