Read the vlogs client secret from the vlogs namespace path
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful

This commit is contained in:
2026-09-28 22:53:01 +10:00
parent e90e6d027b
commit 89a5caf353
+2 -2
View File
@@ -1,5 +1,5 @@
# OAuth2/OIDC provider + application for vlogs (the VictoriaLogs query UI,
# served at https://vlogs.unkin.net in the logging namespace). An oauth2-proxy
# served at https://vlogs.unkin.net in the vlogs namespace). An oauth2-proxy
# in front of the UI performs the OIDC login; access is gated on the user's
# hierarchical ak_groups claim (akP-vlogs-admin).
# client_secret is read from Vault (seeded out of band), never committed.
@@ -11,7 +11,7 @@ client_id: vlogs
launch_url: https://vlogs.unkin.net/
client_secret_vault:
mount: kv
path: kubernetes/namespace/logging/default/vlogs-oauth-credentials
path: kubernetes/namespace/vlogs/default/oauth-credentials
scope_mappings:
- goauthentik.io/providers/oauth2/scope-openid
- goauthentik.io/providers/oauth2/scope-email