Skip to content

Commit 75fd4ed

Browse files
authored
Update CheCluster patch when deploying Che with Keycloak as OIDC prov… (#2817)
* Update CheCluster patch when deploying Che with Keycloak as OIDC provider Signed-off-by: Anatolii Bazko <abazko@redhat.com> * Fixup Signed-off-by: Anatolii Bazko <abazko@redhat.com> --------- Signed-off-by: Anatolii Bazko <abazko@redhat.com>
1 parent b071358 commit 75fd4ed

File tree

2 files changed

+14
-1
lines changed

2 files changed

+14
-1
lines changed

modules/administration-guide/pages/installing-che-on-minikube-keycloak-oidc.adoc

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -307,6 +307,12 @@ spec:
307307
gateway:
308308
oAuthProxy:
309309
cookieExpireSeconds: 300
310+
deployment:
311+
containers:
312+
- env:
313+
- name: OAUTH2_PROXY_BACKEND_LOGOUT_URL
314+
value: "http://keycloak.$(minikube ip).nip.io/realms/che/protocol/openid-connect/logout?id_token_hint=\{id_token}"
315+
name: oauth-proxy
310316
components:
311317
cheServer:
312318
extraProperties:
@@ -333,6 +339,7 @@ helm install che \
333339
--set networking.auth.identityProviderURL=https://keycloak.$(minikube ip).nip.io/realms/che . && \
334340
sleep 5s && \
335341
{orch-cli} patch checluster/eclipse-che --patch '{"spec": {"components": {"cheServer": {"extraProperties": {"CHE_OIDC_USERNAME__CLAIM": "email"}}}}}' --type=merge -n eclipse-che
342+
{orch-cli} patch checluster/eclipse-che --patch '{"spec": {"networking": {"auth": {"gateway": {"deployment": {"containers": [{"name": "oauth-proxy", "env":[{"name": "OAUTH2_PROXY_BACKEND_LOGOUT_URL", "value": "http://keycloak.$(minikube ip).nip.io/realms/che/protocol/openid-connect/logout?id_token_hint=\{id_token}"}]}]}}}}}}' --type=merge -n eclipse-che
336343
----
337344

338345
.Verification steps

modules/administration-guide/pages/installing-che-on-the-virtual-kubernetes-cluster.adoc

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -628,7 +628,13 @@ spec:
628628
gateway:
629629
oAuthProxy:
630630
cookieExpireSeconds: 300
631-
components:
631+
deployment:
632+
containers:
633+
- env:
634+
- name: OAUTH2_PROXY_BACKEND_LOGOUT_URL
635+
value: "http://$KEYCLOAK_HOST/realms/che/protocol/openid-connect/logout?id_token_hint=\{id_token}"
636+
name: oauth-proxy
637+
components:
632638
cheServer:
633639
extraProperties:
634640
CHE_OIDC_USERNAME__CLAIM: email

0 commit comments

Comments
 (0)