mirror of
https://github.com/dredx/prole.git
synced 2026-09-27 05:14:29 +00:00
0a799ca191
- Introduced `gitlab_post_remediation_success` flag to streamline corrective action logging. - Adjusted logic to skip unnecessary workload convergence gates when remediation is successful.
31 lines
906 B
YAML
31 lines
906 B
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: gitlab-google-oidc
|
|
namespace: gitlab
|
|
labels:
|
|
app.kubernetes.io/managed-by: prole-installer
|
|
# GitLab OmniAuth provider config for OpenID Connect via knoe-auth.
|
|
# See: https://docs.gitlab.com/ee/administration/auth/oidc.html
|
|
# Applied by etc/init_gitlab.sh --mode k8s
|
|
stringData:
|
|
provider: |
|
|
name: ${GITLAB_OIDC_PROVIDER_NAME}
|
|
label: "Google Workspace"
|
|
icon: "https://www.google.com/favicon.ico"
|
|
args:
|
|
name: ${GITLAB_OIDC_PROVIDER_NAME}
|
|
scope:
|
|
- openid
|
|
- profile
|
|
- email
|
|
response_type: code
|
|
issuer: "${GITLAB_OIDC_ISSUER}"
|
|
client_auth_method: query
|
|
uid_field: email
|
|
send_scope_to_token_endpoint: false
|
|
client_options:
|
|
identifier: "${GITLAB_OIDC_CLIENT_ID}"
|
|
secret: "${GITLAB_OIDC_CLIENT_SECRET}"
|
|
redirect_uri: "${GITLAB_OIDC_REDIRECT_URI}"
|