change auth for vmcp

2026-06-17 14:49:54 +01:00
parent ad0e5df277
commit 4de136186f
5 changed files with 43 additions and 2 deletions
@@ -18,6 +18,23 @@ spec:
    oidcConfigRef:
      name: state-docs-vmcp-oidc
      audience: state-docs-vmcp
+  authServerConfig:
+    issuer: https://state-docs.ngorse.com
+    upstreamProviders:
+      - name: keycloak
+        type: oidc
+        oidcConfig:
+          issuerUrl: https://cloak.olb42.com/realms/home-lab
+          clientId: state-docs-vmcp
+          clientSecretFile: /var/run/secrets/toolhive/client-secret
+          redirectUri: https://state-docs.ngorse.com/oauth/callback
+          scopes:
+            - openid
+            - profile
+            - email
+            - offline_access
+    allowedAudiences:
+      - state-docs-vmcp
  config:
    aggregation:
      conflictResolution: prefix