chore: ElasticSearch | remove oidc for now
chore: ElasticSearch | remove oidc for now
This commit is contained in:
@@ -20,11 +20,11 @@ spec:
|
||||
tls:
|
||||
certificate:
|
||||
secretName: elasticsearch-es-http-tls-internal
|
||||
secureSettings:
|
||||
- secretName: kibana-authentik
|
||||
entries:
|
||||
- key: client-secret
|
||||
path: "xpack.security.authc.realms.oidc.authentik.rp.client_secret"
|
||||
# secureSettings:
|
||||
# - secretName: kibana-authentik
|
||||
# entries:
|
||||
# - key: client-secret
|
||||
# path: "xpack.security.authc.realms.oidc.authentik.rp.client_secret"
|
||||
nodeSets:
|
||||
- name: node
|
||||
count: 3
|
||||
@@ -47,18 +47,18 @@ spec:
|
||||
storageClassName: longhorn
|
||||
config:
|
||||
node.roles: ["master", "data"]
|
||||
xpack.security.authc.token.enabled: true
|
||||
xpack.security.authc.realms.oidc.authentik:
|
||||
order: 2
|
||||
rp.client_id: "atlY82FGIBYvUg87cnENzks5ft1AUUtIfQsXSDog"
|
||||
rp.response_type: code
|
||||
rp.redirect_uri: "https://kibana.dogar.dev/api/security/oidc/callback"
|
||||
op.issuer: "https://auth.dogar.dev/application/o/kibana/"
|
||||
op.authorization_endpoint: "https://auth.dogar.dev/application/o/authorize/"
|
||||
op.token_endpoint: "https://auth.dogar.dev/application/o/token/"
|
||||
op.jwkset_path: "https://auth.dogar.dev/application/o/kibana/jwks/"
|
||||
op.userinfo_endpoint: "https://auth.dogar.dev/application/o/userinfo/"
|
||||
op.endsession_endpoint: "https://auth.dogar.dev/application/o/kibana/end-session/"
|
||||
rp.post_logout_redirect_uri: "https://kibana.dogar.dev/security/logged_out"
|
||||
claims.principal: sub
|
||||
claims.groups: groups
|
||||
# xpack.security.authc.token.enabled: true
|
||||
# xpack.security.authc.realms.oidc.authentik:
|
||||
# order: 2
|
||||
# rp.client_id: "atlY82FGIBYvUg87cnENzks5ft1AUUtIfQsXSDog"
|
||||
# rp.response_type: code
|
||||
# rp.redirect_uri: "https://kibana.dogar.dev/api/security/oidc/callback"
|
||||
# op.issuer: "https://auth.dogar.dev/application/o/kibana/"
|
||||
# op.authorization_endpoint: "https://auth.dogar.dev/application/o/authorize/"
|
||||
# op.token_endpoint: "https://auth.dogar.dev/application/o/token/"
|
||||
# op.jwkset_path: "https://auth.dogar.dev/application/o/kibana/jwks/"
|
||||
# op.userinfo_endpoint: "https://auth.dogar.dev/application/o/userinfo/"
|
||||
# op.endsession_endpoint: "https://auth.dogar.dev/application/o/kibana/end-session/"
|
||||
# rp.post_logout_redirect_uri: "https://kibana.dogar.dev/security/logged_out"
|
||||
# claims.principal: sub
|
||||
# claims.groups: groups
|
||||
|
||||
@@ -16,9 +16,9 @@ spec:
|
||||
config:
|
||||
server.publicBaseUrl: "https://kibana.dogar.dev"
|
||||
xpack.security.authc.providers:
|
||||
oidc.authentik:
|
||||
order: 0
|
||||
realm: authentik
|
||||
description: "Log in with Authentik"
|
||||
# oidc.authentik:
|
||||
# order: 0
|
||||
# realm: authentik
|
||||
# description: "Log in with Authentik"
|
||||
basic.basic1:
|
||||
order: 1
|
||||
|
||||
Reference in New Issue
Block a user