Update hydra configs

RADAR-base · Jan 18, 2025 · b7824a9 · b7824a9
1 parent f8a5906
commit b7824a9
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/etc/cp-schema-registry/values.yaml b/etc/cp-schema-registry/values.yaml
@@ -19,6 +19,7 @@ resources:
 ingress:
   enabled: true
   annotations:
+    kubernetes.io/ingress.class: nginx
     cert-manager.io/cluster-issuer: letsencrypt-prod
     nginx.ingress.kubernetes.io/enable-cors: "true"
     nginx.ingress.kubernetes.io/rewrite-target: /$1

diff --git a/etc/hydra/values.yaml b/etc/hydra/values.yaml
@@ -8,7 +8,7 @@ ingress:
     hosts:
       - host: localhost
         paths:
-          - path: "/admin/hydra(/|$)(.*)" 
+          - path: "/admin/hydra(/|$)(.*)"
             pathType: ImplementationSpecific
     tls:
       - secretName: radar-base-tls
@@ -52,6 +52,8 @@ hydra:
     oauth2:
       allowed_top_level_claims: [scope,roles,authorities,sources,user_name]
       mirror_top_level_claims: false
+      client_credentials:
+        default_grant_allowed_scope: true
 
     serve:
       public:

diff --git a/helmfile.d/10-services.yaml b/helmfile.d/10-services.yaml
@@ -393,11 +393,11 @@ releases:
       - name: hydra.config.urls.self.issuer
         value: https://{{ .Values.server_name }}/hydra/
       - name: hydra.config.urls.login
-        value: https://{{ .Values.server_name }}/kratos-ui/login
+        value: https://{{ .Values.server_name }}/kratos-ui/auth/oauth-login
       - name: hydra.config.urls.logout
-        value: https://{{ .Values.server_name }}/kratos-ui/logout
+        value: https://{{ .Values.server_name }}/kratos-ui/auth/logout
       - name: hydra.config.urls.consent
-        value: https://{{ .Values.server_name }}/kratos-ui/consent
+        value: https://{{ .Values.server_name }}/kratos-ui/auth/consent
       - name: ingress.public.hosts[0].host
         value: {{ .Values.server_name }}
       - name: ingress.admin.tls[0].hosts