fix(dex): Add theme

2026-03-14 16:40:09 +01:00
parent ff8f3387ea
commit 8ecd09734e
1 changed files with 108 additions and 99 deletions
@@ -14,6 +14,15 @@ config:
        mode: disable
  web:
    http: 0.0.0.0:5556
+  frontend:
+    # theme: light
+    theme: coreos
+    issuer: "Oceanbox"
+    issuerUrl: "https://oceanbox.io"
+  #   logoURL: theme/logo.png
+  #   dir: ""
+  telemetry:
+    http: 0.0.0.0:5558
  oauth2:
    skipApprovalScreen: true
  expiry:
@@ -24,24 +33,24 @@ config:
      absoluteLifetime: "720h"

  connectors:
-  - type: microsoft
-    id: microsoft
-    name: Microsoft
-    config:
-      clientID: "43667ac0-37e1-422f-99fc-50a699bb255c"
-      clientSecret: $MICROSOFT_CLIENT_SECRET
-      redirectURI: https://auth.adm.oceanbox.io/callback
+    - type: microsoft
+      id: microsoft
+      name: Microsoft
+      config:
+        clientID: "43667ac0-37e1-422f-99fc-50a699bb255c"
+        clientSecret: $MICROSOFT_CLIENT_SECRET
+        redirectURI: https://auth.adm.oceanbox.io/callback

  staticClients:
-  # - id: dex
-  #   name: Dex
-  #   secret: $CLIENT_SECRET_DEX
-  #   redirectURIs:
-  #   - https://idp.beta.oceanbox.io/dex/callback
-  #   - https://idp.dev.oceanbox.io/dex/callback
-  #   - https://idp.oceanbox.io/dex/callback
-  #   - https://idp.srv.oceanbox.io/dex/callback
-  # - id: atlantis
+    # - id: dex
+    #   name: Dex
+    #   secret: $CLIENT_SECRET_DEX
+    #   redirectURIs:
+    #   - https://idp.beta.oceanbox.io/dex/callback
+    #   - https://idp.dev.oceanbox.io/dex/callback
+    #   - https://idp.oceanbox.io/dex/callback
+    #   - https://idp.srv.oceanbox.io/dex/callback
+    # - id: atlantis
    # name: Atlantis
    # secret: $CLIENT_SECRET_ATLANTIS
    # redirectURIs:
@@ -51,27 +60,27 @@ config:
    # - https://oceanbox.app/signin-oidc
    # - https://atlantis.srv.oceanbox.io/signin-oidc

-  - id: atlantis_dev
-    name: Atlantis (dev)
-    secret: $CLIENT_SECRET_ATLANTIS_DEV
-    redirectURIs:
-    - https://maps.dev.oceanbox.io/signin-oidc
-    - https://atlantis.local.oceanbox.io:8080/signin-oidc
-    - https://codex.local.oceanbox.io:8080/signin-oidc
-    - https://simkir-maps.dev.oceanbox.io/signin-oidc
-    - https://jonas-atlantis.dev.oceanbox.io/signin-oidc
-    - https://atlantis.beta.oceanbox.io/signin-oidc
-    - https://stig-atlantis.dev.oceanbox.io/signin-oidc
-    - https://codex.local.oceanbox.io:10380/signin-oidc
-    - https://ole-atlantis.dev.oceanbox.io/signin-oidc
-    - https://bast-atlantis.dev.oceanbox.io/signin-oidc
-    - https://mrtz-atlantis.dev.oceanbox.io/signin-oidc
-    - https://codex.dev.tos.obx/signin-oidc
-    - https://simkir-codex.dev.oceanbox.io/signin-oidc
-    - https://simkir-atlantis.dev.oceanbox.io/signin-oidc
-    - https://codex.dev.oceanbox.io/signin-oidc
+    - id: atlantis_dev
+      name: Atlantis (dev)
+      secret: $CLIENT_SECRET_ATLANTIS_DEV
+      redirectURIs:
+        - https://maps.dev.oceanbox.io/signin-oidc
+        - https://atlantis.local.oceanbox.io:8080/signin-oidc
+        - https://codex.local.oceanbox.io:8080/signin-oidc
+        - https://simkir-maps.dev.oceanbox.io/signin-oidc
+        - https://jonas-atlantis.dev.oceanbox.io/signin-oidc
+        - https://atlantis.beta.oceanbox.io/signin-oidc
+        - https://stig-atlantis.dev.oceanbox.io/signin-oidc
+        - https://codex.local.oceanbox.io:10380/signin-oidc
+        - https://ole-atlantis.dev.oceanbox.io/signin-oidc
+        - https://bast-atlantis.dev.oceanbox.io/signin-oidc
+        - https://mrtz-atlantis.dev.oceanbox.io/signin-oidc
+        - https://codex.dev.tos.obx/signin-oidc
+        - https://simkir-codex.dev.oceanbox.io/signin-oidc
+        - https://simkir-atlantis.dev.oceanbox.io/signin-oidc
+        - https://codex.dev.oceanbox.io/signin-oidc

-  # - id: sorcerer
+    # - id: sorcerer
    # name: Sorcerer
    # secret: $CLIENT_SECRET_SORCERER
    # redirectURIs:
@@ -80,64 +89,64 @@ config:
    # - https://sorcerer.ekman.oceanbox.io/signin-oidc
    # - https://sorcerer.data.oceanbox.io/signin-oidc

-  - id: sorcerer_dev
-    name: Sorcerer (dev)
-    secret: $CLIENT_SECRET_SORCERER_DEV
-    redirectURIs:
-    - https://simkir-sorcerer.ekman.oceanbox.io/signin-oidc
-    - https://jonas-sorcerer.ekman.oceanbox.io/signin-oidc
-    - https://stig-sorcerer.dev.vtn.obx/signin-oidc
-    - https://simkir-sorcerer.dev.vtn.obx/signin-oidc
-    - https://ole-sorcerer.ekman.oceanbox.io/signin-oidc
-    - https://sorcerer.vtn.oceanbox.io/signin-oidc
-    - https://mrtz-sorcerer.dev.vtn.obx/signin-oidc
-    - https://sorcerer.ekman.oceanbox.io/signin-oidc
-    - https://bast-sorcerer.ekman.oceanbox.io/signin-oidc
-    - https://sorcerer.data.oceanbox.io/signin-oidc
-    - https://ole-sorcerer.dev.vtn.obx/signin-oidc
-    - https://stig-sorcerer.ekman.oceanbox.io/signin-oidc
+    - id: sorcerer_dev
+      name: Sorcerer (dev)
+      secret: $CLIENT_SECRET_SORCERER_DEV
+      redirectURIs:
+        - https://simkir-sorcerer.ekman.oceanbox.io/signin-oidc
+        - https://jonas-sorcerer.ekman.oceanbox.io/signin-oidc
+        - https://stig-sorcerer.dev.vtn.obx/signin-oidc
+        - https://simkir-sorcerer.dev.vtn.obx/signin-oidc
+        - https://ole-sorcerer.ekman.oceanbox.io/signin-oidc
+        - https://sorcerer.vtn.oceanbox.io/signin-oidc
+        - https://mrtz-sorcerer.dev.vtn.obx/signin-oidc
+        - https://sorcerer.ekman.oceanbox.io/signin-oidc
+        - https://bast-sorcerer.ekman.oceanbox.io/signin-oidc
+        - https://sorcerer.data.oceanbox.io/signin-oidc
+        - https://ole-sorcerer.dev.vtn.obx/signin-oidc
+        - https://stig-sorcerer.ekman.oceanbox.io/signin-oidc

 envVars:
- name: DEX_DB_USER
-  valueFrom:
-    secretKeyRef:
-      name: dex-db-app
-      key: username
- name: DEX_DB_PASSWORD
-  valueFrom:
-    secretKeyRef:
-      name: dex-db-app
-      key: password
- name: MICROSOFT_CLIENT_SECRET
-  valueFrom:
-    secretKeyRef:
-      name: dex-microsoft
-      key: clientSecret
-# - name: CLIENT_SECRET_DEX
-#   valueFrom:
-#     secretKeyRef:
-#       name: dex-clients
-#       key: dex
-# - name: CLIENT_SECRET_ATLANTIS
-#   valueFrom:
-#     secretKeyRef:
-#       name: dex-clients
-#       key: atlantis
- name: CLIENT_SECRET_ATLANTIS_DEV
-  valueFrom:
-    secretKeyRef:
-      name: dex-clients
-      key: atlantis_dev
-# - name: CLIENT_SECRET_SORCERER
-#   valueFrom:
-#     secretKeyRef:
-#       name: dex-clients
-#       key: sorcerer
- name: CLIENT_SECRET_SORCERER_DEV
-  valueFrom:
-    secretKeyRef:
-      name: dex-clients
-      key: sorcerer_dev
+  - name: DEX_DB_USER
+    valueFrom:
+      secretKeyRef:
+        name: dex-db-app
+        key: username
+  - name: DEX_DB_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: dex-db-app
+        key: password
+  - name: MICROSOFT_CLIENT_SECRET
+    valueFrom:
+      secretKeyRef:
+        name: dex-microsoft
+        key: clientSecret
+  # - name: CLIENT_SECRET_DEX
+  #   valueFrom:
+  #     secretKeyRef:
+  #       name: dex-clients
+  #       key: dex
+  # - name: CLIENT_SECRET_ATLANTIS
+  #   valueFrom:
+  #     secretKeyRef:
+  #       name: dex-clients
+  #       key: atlantis
+  - name: CLIENT_SECRET_ATLANTIS_DEV
+    valueFrom:
+      secretKeyRef:
+        name: dex-clients
+        key: atlantis_dev
+  # - name: CLIENT_SECRET_SORCERER
+  #   valueFrom:
+  #     secretKeyRef:
+  #       name: dex-clients
+  #       key: sorcerer
+  - name: CLIENT_SECRET_SORCERER_DEV
+    valueFrom:
+      secretKeyRef:
+        name: dex-clients
+        key: sorcerer_dev

 ingress:
  enabled: true
@@ -147,14 +156,14 @@ ingress:
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/backend-protocol: HTTP
  hosts:
-  - host: auth.adm.oceanbox.io
-    paths:
-    - path: /
-      pathType: ImplementationSpecific
+    - host: auth.adm.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
  tls:
-  - secretName: auth.adm.oceanbox.io-tls
-    hosts:
-    - auth.adm.oceanbox.io
+    - secretName: auth.adm.oceanbox.io-tls
+      hosts:
+        - auth.adm.oceanbox.io

 resources:
  limits: