From 89a5caf3539c8a883bf227e31ccc3ca0002960d4 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Mon, 28 Sep 2026 22:53:01 +1000 Subject: [PATCH] Read the vlogs client secret from the vlogs namespace path --- config/providers_oauth2/vlogs.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/providers_oauth2/vlogs.yaml b/config/providers_oauth2/vlogs.yaml index 23e59e3..ee18e70 100644 --- a/config/providers_oauth2/vlogs.yaml +++ b/config/providers_oauth2/vlogs.yaml @@ -1,5 +1,5 @@ # OAuth2/OIDC provider + application for vlogs (the VictoriaLogs query UI, -# served at https://vlogs.unkin.net in the logging namespace). An oauth2-proxy +# served at https://vlogs.unkin.net in the vlogs namespace). An oauth2-proxy # in front of the UI performs the OIDC login; access is gated on the user's # hierarchical ak_groups claim (akP-vlogs-admin). # client_secret is read from Vault (seeded out of band), never committed. @@ -11,7 +11,7 @@ client_id: vlogs launch_url: https://vlogs.unkin.net/ client_secret_vault: mount: kv - path: kubernetes/namespace/logging/default/vlogs-oauth-credentials + path: kubernetes/namespace/vlogs/default/oauth-credentials scope_mappings: - goauthentik.io/providers/oauth2/scope-openid - goauthentik.io/providers/oauth2/scope-email -- 2.47.3