feat: modify dex expiry

sighupio · Aug 23, 2024 · 92f642e · 92f642e
1 parent 40abf2d
commit 92f642e
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 1 deletion.
diff --git a/defaults/ekscluster-kfd-v1alpha2.yaml b/defaults/ekscluster-kfd-v1alpha2.yaml
@@ -293,6 +293,9 @@ data:
         # see dex documentation for more information
         connectors: []
         additionalStaticClients: []
+        expiry:
+          signingKeys: "6h"
+          idTokens: "24h"
       oidcKubernetesAuth: # only needed as default
         enabled: false
       baseDomain: ""

diff --git a/defaults/kfddistribution-kfd-v1alpha2.yaml b/defaults/kfddistribution-kfd-v1alpha2.yaml
@@ -280,6 +280,9 @@ data:
         # see dex documentation for more information
         connectors: []
         additionalStaticClients: []
+        expiry:
+          signingKeys: "6h"
+          idTokens: "24h"
       oidcKubernetesAuth: # only needed as default
         enabled: false
       baseDomain: ""

diff --git a/defaults/onpremises-kfd-v1alpha2.yaml b/defaults/onpremises-kfd-v1alpha2.yaml
@@ -280,6 +280,9 @@ data:
         # see dex documentation for more information
         connectors: []
         additionalStaticClients: []
+        expiry:
+          signingKeys: "6h"
+          idTokens: "24h"
       oidcKubernetesAuth:
         enabled: false
       baseDomain: ""

diff --git a/templates/distribution/manifests/auth/secrets/dex.yml.tpl b/templates/distribution/manifests/auth/secrets/dex.yml.tpl
@@ -57,4 +57,7 @@ staticClients:
 {{- end }}
 {{- if .spec.distribution.modules.auth.dex.additionalStaticClients }}
 {{ .spec.distribution.modules.auth.dex.additionalStaticClients | toYaml }}
-{{- end }}
+{{- end }}
+expiry:
+  signingKeys: {{ .spec.distribution.modules.auth.dex.expiry.signingKeys }}
+  idTokens: {{ .spec.distribution.modules.auth.dex.expiry.idTokens }}