samply/bridgehead
1
0
Fork 0
mirror of https://github.com/samply/bridgehead.git synced 2026-08-14 21:00:41 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: oidc config in project-manager and lens for cce

Browse Source
This commit is contained in:
David Juarez
2026-07-31 13:22:25 +02:00
parent 360e66916d
commit f1b0796d24
3 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cce/modules/lens-compose.yml
+3 -3
View File
@@ -23,9 +23,9 @@ services:
OAUTH2_PROXY_PROVIDER: oidc OAUTH2_PROXY_PROVIDER: oidc
OAUTH2_PROXY_SKIP_PROVIDER_BUTTON: "true" OAUTH2_PROXY_SKIP_PROVIDER_BUTTON: "true"
# Use the same issuer as Project Manager so Lens can forward the token to its API. # Use the same issuer as Project Manager so Lens can forward the token to its API.
OAUTH2_PROXY_OIDC_ISSUER_URL: ${PM_OIDC_URL} OAUTH2_PROXY_OIDC_ISSUER_URL: ${LENS_OIDC_PRIVATE_URL}
OAUTH2_PROXY_CLIENT_ID: ${PM_OIDC_PRIVATE_CLIENT_ID} OAUTH2_PROXY_CLIENT_ID: ${LENS_OIDC_PRIVATE_CLIENT_ID}
OAUTH2_PROXY_CLIENT_SECRET: ${PM_OIDC_PRIVATE_SECRET} OAUTH2_PROXY_CLIENT_SECRET: ${LENS_OIDC_PRIVATE_SECRET}
OAUTH2_PROXY_COOKIE_SECRET: ${LENS_AUTH_COOKIE_SECRET} OAUTH2_PROXY_COOKIE_SECRET: ${LENS_AUTH_COOKIE_SECRET}
OAUTH2_PROXY_COOKIE_NAME: _BRIDGEHEAD_oauth2_lens OAUTH2_PROXY_COOKIE_NAME: _BRIDGEHEAD_oauth2_lens
OAUTH2_PROXY_COOKIE_REFRESH: 4m OAUTH2_PROXY_COOKIE_REFRESH: 4m
cce/modules/lens-setup.sh
+5
View File
@@ -3,4 +3,9 @@
if [ -n "$ENABLE_LENS" ];then if [ -n "$ENABLE_LENS" ];then
LENS_AUTH_COOKIE_SECRET="$(echo "This is a salt string to generate one consistent cookie secret for the Lens oauth2 proxy." | sha1sum | openssl pkeyutl -sign -inkey /etc/bridgehead/pki/${SITE_ID}.priv.pem | base64 | tr -d '\n' | head -c 32)" LENS_AUTH_COOKIE_SECRET="$(echo "This is a salt string to generate one consistent cookie secret for the Lens oauth2 proxy." | sha1sum | openssl pkeyutl -sign -inkey /etc/bridgehead/pki/${SITE_ID}.priv.pem | base64 | tr -d '\n' | head -c 32)"
OVERRIDE+=" -f ./$PROJECT/modules/lens-compose.yml" OVERRIDE+=" -f ./$PROJECT/modules/lens-compose.yml"
LENS_OIDC_PRIVATE_URL="https://sso.verbis.dkfz.de/application/o/cce-project-manager-api/"
LENS_OIDC_PRIVATE_CLIENT_ID="cce-project-manager-api"
LENS_OIDC_PRIVATE_SECRET="$(echo \"This is a salt string to generate the private secret for the project manager oidc public client. It is not required to be secret.\" | sha1sum | openssl pkeyutl -sign -inkey /etc/bridgehead/pki/${SITE_ID}.priv.pem | base64 | head -c 30)"
fi fi
cce/modules/project-manager-compose.yml
+2
View File
@@ -44,6 +44,8 @@ services:
depends_on: depends_on:
project-manager-api-db: project-manager-api-db:
condition: service_healthy condition: service_healthy
forward_proxy:
condition: service_healthy
project-manager-api-db: project-manager-api-db:
container_name: project-manager-api-db container_name: project-manager-api-db