Skip to content

Commit

Permalink
Configure ORY Oathkeeper oauth2 default endpoints (#18209)
Browse files Browse the repository at this point in the history
* Move hydra to deprecated namespace

* Remove hydra crd

* Adapt last-order
  • Loading branch information
barchw authored Sep 25, 2023
1 parent ec5348a commit 88fa123
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 211 deletions.
198 changes: 0 additions & 198 deletions installation/resources/crds/ory/oauth2clients.crd.yaml

This file was deleted.

6 changes: 3 additions & 3 deletions resources/ory/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -69,13 +69,13 @@ oathkeeper:
enabled: true
config:
# REQUIRED IF ENABLED - The OAuth 2.0 Token Endpoint that will be used to validate the client credentials.
token_url: http://ory-hydra-public.kyma-system.svc.cluster.local:4444/oauth2/token
token_url: http://ory-hydra-public.hydra-deprecated.svc.cluster.local:4444/oauth2/token
oauth2_introspection:
# Set enabled to true if the authenticator should be enabled and false to disable the authenticator. Defaults to false.
enabled: true
config:
# REQUIRED IF ENABLED - The OAuth 2.0 Token Introspection endpoint.
introspection_url: http://ory-hydra-admin.kyma-system.svc.cluster.local:4445/oauth2/introspect
introspection_url: http://ory-hydra-admin.hydra-deprecated.svc.cluster.local:4445/oauth2/introspect
# Sets the strategy to be used to validate/match the token scope. Supports "hierarchic", "exact", "wildcard", "none". Defaults
# to "none".
scope_strategy: exact
Expand All @@ -84,7 +84,7 @@ oathkeeper:
enabled: true
config:
jwks_urls:
- http://ory-hydra-public.kyma-system.svc.cluster.local:4444/.well-known/jwks.json
- http://ory-hydra-public.hydra-deprecated.svc.cluster.local:4444/.well-known/jwks.json
scope_strategy: wildcard
authorizers:
allow:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -170,16 +170,6 @@ spec:
}
}
---
apiVersion: hydra.ory.sh/v1alpha1
kind: OAuth2Client
metadata:
name: lastorder
spec:
grantTypes:
- "client_credentials"
scope: "read write"
secretName: lastorder-oauth
---
apiVersion: gateway.kyma-project.io/v1beta1
kind: APIRule
metadata:
Expand Down

0 comments on commit 88fa123

Please sign in to comment.