5bd74d4ffe
O realm do molde nao tinha os papeis que o SecurityConfig dos servicos verifica. Acrescentados ao ConfigMap de import e a copia em realm/. Nao afeta o realm que ja existe — o Keycloak so importa realm inexistente.
44 lines
1.3 KiB
YAML
44 lines
1.3 KiB
YAML
apiVersion: v1
|
|
data:
|
|
athleticmap-realm.json: |
|
|
{
|
|
"realm": "athleticmap",
|
|
"enabled": true,
|
|
"displayName": "Athletic Map",
|
|
"loginWithEmailAllowed": true,
|
|
"roles": {
|
|
"realm": [
|
|
{ "name": "admin" },
|
|
{ "name": "atm_athlete" },
|
|
{ "name": "atm_trainer" },
|
|
{ "name": "atm_team_admin" },
|
|
{ "name": "atm_fed_admin" },
|
|
{ "name": "atm_admin" },
|
|
{ "name": "atm_cadastro" },
|
|
{ "name": "atm_financeiro" },
|
|
{ "name": "atm_financeiro-leitura" }
|
|
]
|
|
},
|
|
"clients": [
|
|
{
|
|
"clientId": "spa",
|
|
"name": "Athletic Map SPA",
|
|
"publicClient": true,
|
|
"protocol": "openid-connect",
|
|
"standardFlowEnabled": true,
|
|
"implicitFlowEnabled": false,
|
|
"directAccessGrantsEnabled": false,
|
|
"redirectUris": ["https://plataforma.athleticmap.influxdigital.com.br/*"],
|
|
"webOrigins": ["https://plataforma.athleticmap.influxdigital.com.br"],
|
|
"attributes": {
|
|
"pkce.code.challenge.method": "S256",
|
|
"post.logout.redirect.uris": "https://plataforma.athleticmap.influxdigital.com.br/*"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: kc-realm-import
|
|
namespace: plataforma-prod
|