studio/people
Archived
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🔧(helm) configure resource server in staging

Browse Source 
Allow desk-staging app to interact with AgentConnect integration env
to introspect a received access token.

Other environment (pre-prod and production) will be configured when
at least one interconnection with a service provider has been
validated.
This commit is contained in:
lebaudantoine
2024-08-29 11:51:52 +02:00
committed by aleb_the_flash
parent ff2cbe3aed
commit 8c54e701c1
3 changed files with 21 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
secrets

Submodule secrets updated: d7cfe7bcdc...a31bc360ab

6
src/helm/desk/templates/secrets.yaml
View File

@@ -9,3 +9,9 @@ stringData:
DJANGO_SECRET_KEY: {{ .Values.djangoSecretKey }}
OIDC_RP_CLIENT_ID: {{ .Values.oidc.clientId }}
OIDC_RP_CLIENT_SECRET: {{ .Values.oidc.clientSecret }}
{{ if .Values.resourceServer }}
OIDC_RS_CLIENT_ID: {{ .Values.resourceServer.clientId }}
OIDC_RS_CLIENT_SECRET: {{ .Values.resourceServer.clientSecret }}
OIDC_RS_PRIVATE_KEY_STR: |
{{ .Values.resourceServer.privateKey | indent 4 }}
{{ end }}

14
src/helm/env.d/staging/values.desk.yaml.gotmpl
View File

@@ -33,6 +33,8 @@ backend:
OIDC_OP_TOKEN_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/token
OIDC_OP_USER_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/userinfo
OIDC_OP_LOGOUT_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/session/end
OIDC_OP_INTROSPECTION_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/checktoken
OIDC_OP_URL: https://fca.integ01.dev-agentconnect.fr/api/v2
OIDC_RP_CLIENT_ID:
secretKeyRef:
name: backend
@@ -41,6 +43,18 @@ backend:
secretKeyRef:
name: backend
key: OIDC_RP_CLIENT_SECRET
OIDC_RS_CLIENT_ID:
secretKeyRef:
name: backend
key: OIDC_RS_CLIENT_ID
OIDC_RS_CLIENT_SECRET:
secretKeyRef:
name: backend
key: OIDC_RS_CLIENT_SECRET
OIDC_RS_PRIVATE_KEY_STR:
secretKeyRef:
name: backend
key: OIDC_RS_PRIVATE_KEY_STR
OIDC_RP_SIGN_ALGO: RS256
OIDC_RP_SCOPES: "openid email"
OIDC_REDIRECT_ALLOWED_HOSTS: https://desk-staging.beta.numerique.gouv.fr