Compare commits

..
Author SHA1 Message Date
Renovate Bot 105ed6daf1 chore(deps): update helm release fluent-bit to v0.58.3
renovate/stability-days Updates have met minimum release age requirement
scan.yaml / test (pull_request) Successful in 5s
2026-10-03 00:05:03 +00:00
jorgen.stensrudandClaude Opus 5.5 4a4b8e3540 feat(keycloak): forte-cli device-code client + forte-drop-mcp audience mapper (#44)
scan.yaml / test (push) Successful in 5s
Adds the shared public forte-cli client (RFC 8628 device-code only) to the forte realm, with an oidc-audience-mapper that puts https://mcp.drop.forteapps.net/mcp into aud so the forte-drop-mcp sidecar accepts its tokens. Supersedes #26.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 11:25:34 +00:00
2 changed files with 16 additions and 2 deletions
+1 -1
View File
@@ -17,7 +17,7 @@ spec:
sources:
- repoURL: https://fluent.github.io/helm-charts
chart: fluent-bit
targetRevision: 0.58.2
targetRevision: 0.58.3
helm:
releaseName: fluent-bit
valueFiles:
+14
View File
@@ -200,8 +200,22 @@ keycloakConfigCli:
"webOrigins": [],
"attributes": {
"oauth2.device.authorization.grant.enabled": "true"
},
"protocolMappers": [
{
"name": "audience-forte-drop-mcp",
"protocol": "openid-connect",
"protocolMapper": "oidc-audience-mapper",
"consentRequired": false,
"config": {
"included.custom.audience": "https://mcp.drop.forteapps.net/mcp",
"access.token.claim": "true",
"id.token.claim": "false",
"introspection.token.claim": "true"
}
}
]
}
],
"browserFlow": "browser-auto-idp",
"authenticationFlows": [