sec: KC_HOSTNAME_STRICT=true; argocd no dominio branded

platform/argocd-ingress.yaml

@@ -0,0 +1,25 @@
+# Exposição do ArgoCD via Traefik com TLS (Let's Encrypt)
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: argocd
+  namespace: argocd
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  ingressClassName: traefik
+  tls:
+    - hosts:
+        - argocd.athleticmap.influxdigital.com.br
+      secretName: argocd-tls
+  rules:
+    - host: argocd.athleticmap.influxdigital.com.br
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: argocd-server
+                port:
+                  number: 80

tenants/demo/20-keycloak.yaml

@@ -46,7 +46,7 @@ spec:
             - name: KC_HOSTNAME
               value: "auth-demo.athleticmap.influxdigital.com.br"
             - name: KC_HOSTNAME_STRICT
-              value: "false"
+              value: "true"
           ports:
             - containerPort: 8080
             - containerPort: 9000

tenants/piloto/20-keycloak.yaml

@@ -46,7 +46,7 @@ spec:
             - name: KC_HOSTNAME
               value: "auth-piloto.athleticmap.influxdigital.com.br"
             - name: KC_HOSTNAME_STRICT
-              value: "false"
+              value: "true"
           ports:
             - containerPort: 8080
             - containerPort: 9000