squashme: add keycloak oidc issuer url

SwissDataScienceCenter · Aug 24, 2024 · 59ee069 · 59ee069
1 parent f62d964
commit 59ee069
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/helm-chart/renku/templates/_helpers.tpl b/helm-chart/renku/templates/_helpers.tpl
@@ -149,6 +149,10 @@ KC_DB_PASSWORD: {{ default (randAlphaNum 64) .Values.global.keycloak.postgresPas
 {{- end -}}
 {{- end -}}
 
+{{- define "renku.keycloakIssuerUrl" -}}
+{{- printf "%s/realms/%s" (include "renku.keycloakUrl" . | trimSuffix "/") .Values.global.renku.domain -}}
+{{- end -}}
+
 {{/*
 Common labels
 */}}

diff --git a/helm-chart/renku/templates/notebooks/env-secret.yaml b/helm-chart/renku/templates/notebooks/env-secret.yaml
@@ -20,6 +20,7 @@ stringData:
   NB_SESSIONS__OIDC__CLIENT_SECRET: {{ .Values.notebooks.oidc.clientSecret }}
   NB_SESSIONS__OIDC__AUTH_URL: {{ .Values.notebooks.oidc.authUrl }}
   NB_SESSIONS__OIDC__TOKEN_URL: {{ .Values.notebooks.oidc.tokenUrl }}
+  NB_SESSIONS__OIDC__ISSUER_URL: {{ template "renku.keycloakIssuerUrl" . }}
   NB_SESSIONS__OIDC__ALLOW_UNVERIFIED_EMAIL: {{ .Values.notebooks.oidc.allowUnverifiedEmail | quote }}
   NB_SESSIONS__INGRESS__HOST: {{ .Values.notebooks.sessionIngress.host }}
   NB_SESSIONS__INGRESS__TLS_SECRET: {{ .Values.notebooks.sessionIngress.tlsSecret }}