Skip to content

Commit 3a2b48f

Browse files
fix: default keycloak realm envs (#455)
## Description Updating default values for keycloak realm settings, identity-config realm.json files now use default values in the realm.json so there is no need for default values to live in uds-core. So removed those default values and instead added a comment block of values that could be used to override the default values. ## Related Issue [Relates to this uds-identity-config PR](defenseunicorns/uds-identity-config#95) ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Test, docs, adr added or updated as needed - [x] [Contributor Guide Steps](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)(https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md#submitting-a-pull-request) followed
1 parent 936f40b commit 3a2b48f

File tree

1 file changed

+12
-4
lines changed

1 file changed

+12
-4
lines changed

src/keycloak/chart/values.yaml

Lines changed: 12 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,20 @@ domain: "###ZARF_VAR_DOMAIN###"
1515
# The primary Keycloak realm
1616
realm: uds
1717

18-
# UDS Identity Config Environment Variables. More info here: https://github.com/defenseunicorns/uds-identity-config/blob/main/docs/CUSTOMIZE.md#templated-realm-values
18+
# UDS Identity Config Realm Environment Variables. More info here: https://github.com/defenseunicorns/uds-identity-config/blob/main/docs/CUSTOMIZE.md#templated-realm-values
1919
realmInitEnv:
2020
GOOGLE_IDP_ENABLED: false
21-
# Other UDS Identity Config fields that will be used in the realm.json initalization of keycloak
22-
# GOOGLE_IDP_CLIENTID: ""
23-
# GOOGLE_IDP_CLIENT_SECRET: ""
21+
# GOOGLE_IDP_ID: ""
22+
# GOOGLE_IDP_SIGNING_CERT: ""
23+
# GOOGLE_IDP_NALE_ID_FORMAT: ""
24+
# GOOGLE_IDP_CORE_ENTITY_ID: ""
25+
# GOOGLE_IDP_ADMIN_GROUP: ""
26+
# GOOGLE_IDP_AUDITOR_GROUP: ""
27+
# PASSWORD_POLICY: "hashAlgorithm(pbkdf2-sha256) and forceExpiredPasswordChange(90) and specialChars(2) and lowerCase(0) and upperCase(0) and passwordHistory(5) and length(12) and notUsername(undefined) and digits(0)"
28+
# EMAIL_VERIFICATION_ENABLED: true
29+
# OTP_ENABLED: true
30+
# TERMS_AND_CONDITIONS_ENABLED: true
31+
# REALM_X509_OCSP_FAIL_OPEN: true
2432

2533
# Generates an initial password for first admin user - only use if install is headless
2634
# (i.e. cannot hit keycloak UI with `zarf connect keycloak`), password should be changed after initial login

0 commit comments

Comments
 (0)