Dex

Learn about configurations >

• connectors | string

  List of connectors in YAML format, as shown in https://github.com/dexidp/dex#connectors

• enable-password-db | boolean

  Default: True

  Allows dex to keep a list of passwords which can be used to login to dex

• issuer-url | string

  Format http(s)://<publicly-accessible-dns-name>/dex (Also referred to as issuer or OIDC provider ) This is the canonical URL that OIDC clients MUST use to refer to dex. If not specified, it defaults to dex-auth's local endpoint constructed from dex-auth's Kubernetes Service DNS name, the Service port and Dex's endpoint, that is http://<dex-auth-app-name>.<namespace>.svc:5556/dex. The default is set by the charm code, not the configuration option. This configuration must be set when using a Dex connector that will try to reach Dex from outside the cluster, thus it should be a publicly accessible endpoint, for example https://my-instance.in-my-cloud.some-cloud.com/dex

• port | int

  Default: 5556

  Listening port

• public-url | string

  DEPRECATED - Please leave empty or use issuer-url instead. This configuration option will be removed soon. It has been preserved to avoid breaking compatibility with existing deployments. Publicly-accessible endpoint for cluster

• static-password | string

  Static password for logging in without an external auth service

• static-username | string

  Static username for logging in without an external auth service