@@ -921,19 +921,14 @@ moodle:
921921 existingSecret : " crucible-infra-postgresql"
922922 existingSecretUserKey : " username"
923923 existingSecretPasswordKey : " postgres-password"
924- # # Keycloak OAuth2 Configuration
925- keycloak :
924+ # # OIDC OAuth2 Configuration
925+ oidc :
926926 enabled : true
927- url : " https://{{ .Values.global.domain }}/keycloak"
928- realm : " crucible"
927+ discoveryUrl : " https://{{ .Values.global.domain }}/keycloak/realms/crucible/.well-known/openid-configuration"
929928 clientId : " moodle-client"
930929 existingSecret : " crucible-moodle"
931930 existingSecretKey : " client-secret"
932931 name : " Crucible Keycloak"
933- icon : " https://{{ .Values.global.domain }}/keycloak/resources/awfhy/login/keycloak/img/keycloak-logo.png"
934- loginScopes : " openid profile email"
935- loginScopesOffline : " openid profile email offline_access"
936- requireConfirmation : false
937932 showOnLoginPage : true
938933 # # User field mappings (maps OAuth2 claims to Moodle user fields)
939934 userFieldMappings :
@@ -942,10 +937,8 @@ moodle:
942937 - " family_name:lastname"
943938 - " email:email"
944939 - " sub:idnumber"
945- # # Site configuration for internal Keycloak communication
946940 disableCurlSecurityBlockedHosts : true
947- disableCurlSecurityAllowedPorts : true
948- # # Optional: Custom CA certificate for Keycloak HTTPS (enabled for local development)
941+ # # Optional: Custom CA certificate for OIDC provider HTTPS (enabled for local development)
949942 caCert :
950943 key : " crucible-dev.crt"
951944 path : " /opt/sei/certs/crucible-dev.crt"
0 commit comments