Forte/launchpad
6
0
Fork 0
Code Issues 1 Pull Requests 5 Actions Packages Wiki Activity
551 Commits 29 Branches 0 Tags
46eab199ee8f11bc2ab47bb316a2ad480fe1d21e
Commit Graph
57 Commits
Author SHA1 Message Date
Jørgen StensrudandClaude Fable 5.1 46eab199ee Add forte-cli public device-code Keycloak client
/ test (pull_request) Successful in 7s
Details 
Add a shared public client `forte-cli` to the `forte` realm so downloaded
skills (forte-drop first) can do RFC 8628 device-code login through the
Auth Sidecar. Today no client in the realm has the device grant enabled,
so the flow cannot start.

Client (inline in forte-realm.json, imported verbatim by keycloak-config-cli):
- publicClient: true, standardFlowEnabled: false,
  directAccessGrantsEnabled: false
- attributes: oauth2.device.authorization.grant.enabled=true
- no secret, no redirectUris/webOrigins, no k8s.secret.sync

It has to go in the realm JSON because the self-service registrar
hardcodes publicClient:false/standardFlowEnabled:true and drops
attributes. Also add forte-cli to the cleanup CronJob's protected list
(belt-and-braces; it does not match the UUID pattern anyway).

Additive only: gitea/grafana/argocd and all other realm settings are
unchanged. Keycloak is deployed only via the upc-dev overlay, which
inherits base values, so this lands on id.forteapps.net.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QciXev3MtCxo3eomcfrDRW
 2026-09-03 09:56:31 +02:00
gitea_admin b616e59231 Increase min age for keycloak client cleanup
/ test (push) Successful in 13s
Details 
increase to 15 days min age
 2026-09-03 07:26:30 +00:00
danijel.simeunovic 7f4a0bccf1 notify mail 2026-07-02 15:27:16 +02:00
danijel.simeunovic a997a6b81e kc cleanup 2026-06-03 17:41:10 +02:00
danijel.simeunovic 071f57f1d3 kc cleanup 2026-06-03 17:39:02 +02:00
danijel.simeunovic ecf871f0e4 kc fix 2026-06-03 17:36:29 +02:00
danijel.simeunovic 376d81a5ac keycloak client cleanup 2026-06-03 17:28:08 +02:00
danijel.simeunovic a7106bc8f4 new tls wildcard 2026-05-29 21:58:34 +02:00
danijel.simeunovic cf9eb47ecf script fix 2026-05-16 22:08:56 +02:00
danijel.simeunovic f36996da11 script fix 2026-05-16 21:57:44 +02:00
danijel.simeunovic 6bf7db21d0 registrar error 2026-05-16 21:55:44 +02:00
danijel.simeunovic f048b47a0f vaultwarden 2026-05-16 15:39:55 +02:00
danijel.simeunovic 66f40427ee mappings 2026-05-15 15:47:25 +02:00
danijel.simeunovic 332881cbd0 fix 2026-05-14 23:47:14 +02:00
danijel.simeunovic f363afa087 browser flow override 2026-05-14 23:43:40 +02:00
danijel.simeunovic bc42347cb6 gitea+ACCOUNT_LINKING 2026-05-14 21:30:53 +02:00
danijel.simeunovic 80d7bff4bc groups 2026-05-14 21:18:17 +02:00
danijel.simeunovic 3644a3ec87 mappers 2026-05-14 21:14:57 +02:00
danijel.simeunovic bd478478f1 fix attemt 2026-05-14 20:40:44 +02:00
danijel.simeunovic 67b1d95509 account linking 2026-05-14 19:39:38 +02:00
danijel.simeunovic fff95d98a5 remove protocol mappers 2026-05-13 23:15:28 +02:00
danijel.simeunovic 8b743efa43 KC fix 2026-05-13 23:13:09 +02:00
danijel.simeunovic a088425b70 homepage config 2026-04-29 10:04:20 +02:00
danijel.simeunovic b3b3edf82c no header 2026-04-28 23:03:15 +02:00
danijel.simeunovic 308755a4b3 layout 2026-04-28 23:02:13 +02:00
danijel.simeunovicandCopilot db6afaf180 vault 
Co-authored-by: Copilot <copilot@github.com>
 2026-04-28 22:44:57 +02:00
danijel.simeunovic 5a2f9a1b88 Update infra/values/base/keycloak-values.yaml 
Signed-off-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com>
 2026-04-28 19:27:38 +00:00
danijel.simeunovic 1c6f18b67c homepage 2026-04-28 20:38:59 +02:00
danijel.simeunovic 290c8b91f8 db pass 2026-04-27 14:05:38 +02:00
danijel.simeunovic a776bae4bd image tag 2026-04-27 13:00:37 +02:00
danijel.simeunovic 1281e8ef37 databunker 2026-04-27 12:54:18 +02:00
danijel.simeunovic 45e502d74d argocd tls 2026-04-25 11:49:17 +02:00
danijel.simeunovic 167d893233 clean scopes gitea 2026-04-24 20:18:02 +02:00
danijel.simeunovic 8b9ffee242 socpes 2026-04-24 20:14:28 +02:00
danijel.simeunovic 4069e255a8 org scope 2026-04-24 20:05:01 +02:00
danijel.simeunovic 3b1f498616 Update infra/values/base/keycloak-values.yaml 2026-04-24 17:40:15 +00:00
danijel.simeunovic cc47bf6b9f grafana access 2026-04-24 15:49:47 +02:00
danijel.simeunovic c1d61398f0 SSO grafana 2026-04-24 15:45:50 +02:00
danijel.simeunovic ece4a8d199 grafana tls 2026-04-24 15:39:46 +02:00
danijel.simeunovic 03c47ad109 remove trivy 2026-04-24 15:24:58 +02:00
danijel.simeunovic 3095741590 clear KC scopes 2026-04-24 15:13:58 +02:00
danijel.simeunovic d7ba859e61 no openid 2026-04-24 15:09:10 +02:00
danijel.simeunovic 07eb9b7051 optional scopes 2026-04-24 15:05:07 +02:00
danijel.simeunovic a911ff64c3 kc scopes 2026-04-24 15:03:14 +02:00
danijel.simeunovic 9e13560e5e basic scope 2026-04-24 14:40:32 +02:00
danijel.simeunovic 3d84acb278 DEFAULT_EMAIL_NOTIFICATIONS 2026-04-24 14:25:29 +02:00
gitea_adminanddanijel.simeunovic 8505481291 feature/multi-cloud (#14) 
Co-authored-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com>
Reviewed-on: #14
 2026-04-24 08:48:53 +00:00
danijel.simeunovic 3f0f70699b karpor 2026-04-24 09:43:16 +02:00
danijel.simeunovic 1fa070b041 argo 2026-04-23 13:35:42 +02:00
danijel.simeunovic 9c905355e3 argocd known host 2026-04-23 13:28:34 +02:00