You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Oathkeeper Public API URL, used to manage rules
41
-
- type: -e
42
-
value: 'BASE_URL=https://iam.io/dev/path'
43
-
description: Public URL Login UI will be served from.
44
-
- type: -e
45
-
value: 'ACCESS_TOKEN_VERIFICATION_STRATEGY=jwks'
14
+
parameters: >-
15
+
-p 8080:8080
16
+
run_conclusion: |
17
+
Access the API at `http://localhost:8080`.
18
+
19
+
config:
20
+
'`OTEL_GRPC_ENDPOINT`':
21
+
type: env
22
+
description: Tracing server GRPC endpoint, e.g., `tempo-0.tempo-endpoints.stg-identity-jaas-dev.svc.cluster.local:4317`. Has priority on OTEL_HTTP_ENDPOINT.
23
+
'`OTEL_HTTP_ENDPOINT`':
24
+
type: env
25
+
description: Tracing server HTTP endpoint, e.g., `http://tempo-0.tempo-endpoints.stg-identity-jaas-dev.svc.cluster.local:4318`.
26
+
'`TRACING_ENABLED`':
27
+
type: env
28
+
description: Tracing enablement, e.g., `true`.
29
+
'`LOG_FILE`':
30
+
type: env
31
+
description: Destination file for logs, e.g., `log.txt`.
32
+
'`LOG_LEVEL`':
33
+
type: env
34
+
description: Log level, e.g., `error`.
35
+
'`HYDRA_ADMIN_URL`':
36
+
type: env
37
+
description: Hydra Admin API URL, used to manage clients, e.g., `http://hydra.io:4445`.
38
+
'`KRATOS_ADMIN_URL`':
39
+
type: env
40
+
description: Kratos Admin API URL, used to manage identities, e.g., `http://kratos.io:4434`.
41
+
'`KRATOS_PUBLIC_URL`':
42
+
type: env
43
+
description: Kratos Public API URL, used to manage identities, e.g., `http://kratos.io:4433`.
44
+
'`OATHKEEPER_PUBLIC_URL`':
45
+
type: env
46
+
description: Oathkeeper Public API URL, used to manage rules.
47
+
'`BASE_URL`':
48
+
type: env
49
+
description: Public URL Login UI will be served from, e.g., `https://iam.io/dev/path`.
50
+
'`ACCESS_TOKEN_VERIFICATION_STRATEGY`':
51
+
type: env
46
52
description: Strategy used to verify JWT tokens.
47
-
- type: -e
48
-
value: 'AUTHENTICATION_ENABLED="true"'
53
+
'`AUTHENTICATION_ENABLED`':
54
+
type: env
49
55
description: Authentication enable flag.
50
-
- type: -e
51
-
value: 'AUTHORIZATION_ENABLED="true"'
56
+
default: '"false"'
57
+
'`AUTHORIZATION_ENABLED`':
58
+
type: env
52
59
description: Authorization enable flag.
53
-
- type: -e
54
-
value: 'CONTEXT_PATH=/dev/path'
60
+
default: '"false"'
61
+
'`CONTEXT_PATH`':
62
+
type: env
55
63
description: Path needed by the UI to work behind an ingress proxy.
56
-
- type: -e
57
-
value: 'IDP_CONFIGMAP_NAME=providers'
64
+
'`IDP_CONFIGMAP_NAME`':
65
+
type: env
58
66
description: Name of kubernetes configmap where Kratos IDP are configured.
59
-
- type: -e
60
-
value: 'IDP_CONFIGMAP_NAMESPACE=default'
67
+
'`IDP_CONFIGMAP_NAMESPACE`':
68
+
type: env
61
69
description: Namespace of kubernetes configmap where Kratos IDP are configured.
62
-
- type: -e
63
-
value: 'RULES_CONFIGMAP_NAME=rules'
70
+
'`RULES_CONFIGMAP_NAME`':
71
+
type: env
64
72
description: Name of kubernetes configmap where Oathkeeper rules are configured.
65
-
- type: -e
66
-
value: 'RULES_CONFIGMAP_NAMESPACE=default'
73
+
'`RULES_CONFIGMAP_NAMESPACE`':
74
+
type: env
67
75
description: Namespace of kubernetes configmap where Oathkeeper rules are configured.
68
-
- type: -e
69
-
value: 'RULES_CONFIGMAP_FILENAME=rules.yaml'
76
+
'`RULES_CONFIGMAP_FILENAME`':
77
+
type: env
70
78
description: Name of the file where Oathkeeper rules are configured.
71
-
- type: -e
72
-
value: 'SCHEMAS_CONFIGMAP_NAME=schemas'
79
+
'`SCHEMAS_CONFIGMAP_NAME`':
80
+
type: env
73
81
description: Name of kubernetes configmap where Kratos identity schemas are configured.
74
-
- type: -e
75
-
value: 'SCHEMAS_CONFIGMAP_NAMESPACE=default'
82
+
'`SCHEMAS_CONFIGMAP_NAMESPACE`':
83
+
type: env
76
84
description: Namespace of kubernetes configmap where Kratos identity schemas are configured.
Launch Admin UI web server(s) using environment variables.
138
-
debug:
139
-
text: ""
85
+
'`MAIL_FROM_ADDRESS`':
86
+
type: env
87
+
description: Email sender. Required.
88
+
'`MAIL_HOST`':
89
+
type: env
90
+
description: SMPT server host. Required.
91
+
'`MAIL_PORT`':
92
+
type: env
93
+
description: SMTP server port. Required.
94
+
'`MAIL_USERNAME`':
95
+
type: env
96
+
description: SMTP username. If present, both username and password are used.
97
+
'`MAIL_PASSWORD`':
98
+
type: env
99
+
description: SMTP password.
100
+
'`OAUTH2_AUTH_COOKIES_ENCRYPTION_KEY`':
101
+
type: env
102
+
description: Key used to encrypt authentication cookies.
103
+
'`OAUTH2_CLIENT_ID`':
104
+
type: env
105
+
description: OAuth2 client ID, needed for OIDC authentication.
106
+
'`OAUTH2_CLIENT_SECRET`':
107
+
type: env
108
+
description: OAuth2 client secret, needed for OIDC authentication.
109
+
'`OAUTH2_CODEGRANT_SCOPES`':
110
+
type: env
111
+
description: OAuth2 scopes needed by the application, needed for OIDC authentication.
112
+
default: 'openid,offline_access'
113
+
'`OAUTH2_REDIRECT_URI`':
114
+
type: env
115
+
description: OAuth2 redirect URI, e.g.'https://iam..io/dev/api/v0/auth/callback', where /api/v0/auth/callback is the endpoint used by the application, needed for OIDC authentication.
116
+
'`OIDC_ISSUER`':
117
+
type: env
118
+
description: OAuth2 server issuer.
119
+
'`OPENFGA_API_HOST`':
120
+
type: env
121
+
description: OpenFGA server address.
122
+
'`OPENFGA_API_SCHEME`':
123
+
type: env
124
+
description: OpenFGA server scheme, either 'http' or 'https'.
125
+
'`OPENFGA_API_TOKEN`':
126
+
type: env
127
+
description: OpenFGA server API token, needed for authentication to the server.
128
+
'`OPENFGA_AUTHORIZATION_MODEL_ID`':
129
+
type: env
130
+
description: OpenFGA model ID.
131
+
'`OPENFGA_STORE_ID`':
132
+
type: env
133
+
description: OpenFGA store ID.
134
+
'`-p <port>:8080`':
135
+
type: port
136
+
description: Expose the container's port `8080` on the host's `<port>`.
137
+
'`/usr/bin/identity-platform-admin-ui serve`':
138
+
type: app
139
+
description: Launch Admin UI web server(s) using environment variables.
0 commit comments