feat: switch secret generator to base64url

onecx · Jun 25, 2024 · c36e7db · c36e7db
1 parent 8ffde44
commit c36e7db
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 0 deletions.
diff --git a/templates/secret-keycloak-client.yaml b/templates/secret-keycloak-client.yaml
@@ -7,6 +7,7 @@ metadata:
   {{- if .Values.operator.secretgenerator.enabled }}
   {{- if .Values.operator.keycloak.client.secret.generator.enabled }}
     secret-generator.v1.mittwald.de/autogenerate: secret
+    secret-generator.v1.mittwald.de/encoding: {{ .Values.operator.keycloak.client.secret.generator.encoding }}
   {{- end }}
   {{- end }}
   labels:

diff --git a/tests/oidc-client-secret.yaml b/tests/oidc-client-secret.yaml
@@ -0,0 +1,13 @@
+# global:
+#   oidc:
+#     client:
+#       url: "http://google.sk"
+# oidc:
+#   client:
+#     url: "http://google.com"
+operator:
+  secretgenerator:
+    enabled: true
+  keycloak:
+    client:
+      enabled: true
diff --git a/values.yaml b/values.yaml
@@ -382,6 +382,8 @@ operator:
         generator:
           # enabled or disable secret generator annotation for kc client resource
           enabled: true
+          # secret generator encoding base64 | base64url | base32 | hex
+          encoding: base64url
 
       # definition
       spec: