Oidc Gatekeeper

Channel Revision Published Runs on
latest/beta 396 09 Jul 2024
Ubuntu 20.04
latest/edge 447 27 Sep 2024
Ubuntu 20.04
ckf-1.9/stable 423 30 Jul 2024
Ubuntu 20.04
ckf-1.9/edge 448 27 Sep 2024
Ubuntu 20.04
ckf-1.8/stable 350 26 Feb 2024
Ubuntu 20.04
ckf-1.8/edge 433 27 Aug 2024
Ubuntu 20.04
ckf-1.7/stable 320 14 Dec 2023
Ubuntu 20.04
ckf-1.7/beta 176 28 Mar 2023
Ubuntu 20.04
ckf-1.7/edge 320 14 Dec 2023
Ubuntu 20.04
juju deploy oidc-gatekeeper --channel latest/beta
Show information

Platform:

Learn about configurations >

  • ca-bundle | string

    Custom CA to be trusted by OIDC gatekeeper. It is suggested to have the config: ca-bundle: | -----BEGIN CERTIFICATE----- .... -----END CERTIFICATE-----

  • client-id | string

    Default: authservice-oidc

    OpenID Connect client ID

  • client-name | string

    Default: Ambassador Auth OIDC

    Human-friendly OpenID Connect client name

  • client-secret | string

    OpenID Connect client secret

  • oidc-scopes | string

    Default: profile email groups

    OpenID Connect scopes

  • public-url | string

    Publicly-accessible endpoint for cluster

  • skip-auth-urls | string

    If not empty, this is a comma-separated list of paths, e.g. "/path1/,/path2/". That list defines which paths do not need to be authenticated on OIDC. The DEX path is always added to this list.

  • userid-claim | string

    Default: email

    OpenID Connect claim whose value will be used as the userid.