Commit Graph
32 Commits
Author SHA1 Message Date
Jørgen StensrudandClaude Fable 5.1 46eab199ee Add forte-cli public device-code Keycloak client
/ test (pull_request) Successful in 7s
Add a shared public client `forte-cli` to the `forte` realm so downloaded
skills (forte-drop first) can do RFC 8628 device-code login through the
Auth Sidecar. Today no client in the realm has the device grant enabled,
so the flow cannot start.

Client (inline in forte-realm.json, imported verbatim by keycloak-config-cli):
- publicClient: true, standardFlowEnabled: false,
  directAccessGrantsEnabled: false
- attributes: oauth2.device.authorization.grant.enabled=true
- no secret, no redirectUris/webOrigins, no k8s.secret.sync

It has to go in the realm JSON because the self-service registrar
hardcodes publicClient:false/standardFlowEnabled:true and drops
attributes. Also add forte-cli to the cleanup CronJob's protected list
(belt-and-braces; it does not match the UUID pattern anyway).

Additive only: gitea/grafana/argocd and all other realm settings are
unchanged. Keycloak is deployed only via the upc-dev overlay, which
inherits base values, so this lands on id.forteapps.net.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QciXev3MtCxo3eomcfrDRW
2026-09-03 09:56:31 +02:00
gitea_admin b616e59231 Increase min age for keycloak client cleanup
/ test (push) Successful in 13s
increase to 15 days min age
2026-09-03 07:26:30 +00:00
danijel.simeunovic a997a6b81e kc cleanup 2026-06-03 17:41:10 +02:00
danijel.simeunovic 071f57f1d3 kc cleanup 2026-06-03 17:39:02 +02:00
danijel.simeunovic ecf871f0e4 kc fix 2026-06-03 17:36:29 +02:00
danijel.simeunovic 376d81a5ac keycloak client cleanup 2026-06-03 17:28:08 +02:00
danijel.simeunovic cf9eb47ecf script fix 2026-05-16 22:08:56 +02:00
danijel.simeunovic f36996da11 script fix 2026-05-16 21:57:44 +02:00
danijel.simeunovic 6bf7db21d0 registrar error 2026-05-16 21:55:44 +02:00
danijel.simeunovic 66f40427ee mappings 2026-05-15 15:47:25 +02:00
danijel.simeunovic 332881cbd0 fix 2026-05-14 23:47:14 +02:00
danijel.simeunovic f363afa087 browser flow override 2026-05-14 23:43:40 +02:00
danijel.simeunovic 80d7bff4bc groups 2026-05-14 21:18:17 +02:00
danijel.simeunovic 3644a3ec87 mappers 2026-05-14 21:14:57 +02:00
danijel.simeunovic bd478478f1 fix attemt 2026-05-14 20:40:44 +02:00
danijel.simeunovic fff95d98a5 remove protocol mappers 2026-05-13 23:15:28 +02:00
danijel.simeunovic 8b743efa43 KC fix 2026-05-13 23:13:09 +02:00
danijel.simeunovicandCopilot db6afaf180 vault
Co-authored-by: Copilot <copilot@github.com>
2026-04-28 22:44:57 +02:00
danijel.simeunovic 5a2f9a1b88 Update infra/values/base/keycloak-values.yaml
Signed-off-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com>
2026-04-28 19:27:38 +00:00
danijel.simeunovic 1c6f18b67c homepage 2026-04-28 20:38:59 +02:00
danijel.simeunovic 45e502d74d argocd tls 2026-04-25 11:49:17 +02:00
danijel.simeunovic 8b9ffee242 socpes 2026-04-24 20:14:28 +02:00
danijel.simeunovic 4069e255a8 org scope 2026-04-24 20:05:01 +02:00
danijel.simeunovic 3b1f498616 Update infra/values/base/keycloak-values.yaml 2026-04-24 17:40:15 +00:00
danijel.simeunovic cc47bf6b9f grafana access 2026-04-24 15:49:47 +02:00
danijel.simeunovic ece4a8d199 grafana tls 2026-04-24 15:39:46 +02:00
danijel.simeunovic 3095741590 clear KC scopes 2026-04-24 15:13:58 +02:00
danijel.simeunovic d7ba859e61 no openid 2026-04-24 15:09:10 +02:00
danijel.simeunovic 07eb9b7051 optional scopes 2026-04-24 15:05:07 +02:00
danijel.simeunovic a911ff64c3 kc scopes 2026-04-24 15:03:14 +02:00
danijel.simeunovic 9e13560e5e basic scope 2026-04-24 14:40:32 +02:00
danijel.simeunovicandDanijel Simeunovic 03a0d7c9ae feature/multicluster
Deploy Gitea Pages / build-and-deploy (push) Failing after 5s
Co-authored-by: Danijel Simeunovic <danijel.simeunovic@trumf.no>
Reviewed-on: #4
Reviewed-by: gitea_admin <admin@forteapps.net>
2026-04-18 18:14:00 +00:00