Flux setup
This commit is contained in:
@@ -27,11 +27,8 @@ spec:
|
|||||||
# comment. Automate this lookup once the self-service pipeline exists.
|
# comment. Automate this lookup once the self-service pipeline exists.
|
||||||
CONTROL_PLANE_REF_NAME: catalog-dev-bkphl
|
CONTROL_PLANE_REF_NAME: catalog-dev-bkphl
|
||||||
# Every audience valid anywhere in the catalog domain — grows as the
|
# Every audience valid anywhere in the catalog domain — grows as the
|
||||||
# domain gains APIs. PLACEHOLDER still: no Keycloak client exists yet
|
# domain gains APIs.
|
||||||
# for "catalog-api" (only the classic-models-api client's own audience
|
JWT_AUDIENCE_WHITELIST: '["catalog-api", "mcp-catalog"]'
|
||||||
# mapper exists today) — this openid-connect binding will reject every
|
|
||||||
# real token until that client is created.
|
|
||||||
JWT_AUDIENCE_WHITELIST: '["catalog-api"]' # PLACEHOLDER audience name, Keycloak client not created yet
|
|
||||||
substituteFrom:
|
substituteFrom:
|
||||||
- kind: ConfigMap
|
- kind: ConfigMap
|
||||||
name: dataplane-template-defaults
|
name: dataplane-template-defaults
|
||||||
|
|||||||
Reference in New Issue
Block a user