Bạn cần tạo 1 secret trên k8s
Key là: CONFIG_OVERWRITE_JSON
value như sau:
{
"auth_mode": "oidc_auth",
"oidc_name": "SINGLE SIGN-ON (SSO)",
"oidc_endpoint": "https://login.microsoftonline.com/b1351590-3037-xxxx-ae38-25e9a5c37e00/v2.0",
"oidc_client_id": "ce81fd87-a63c-44b5-8d1d-xxxxxfb2aa15",
"oidc_client_secret": "6ml8Q~IlVRWmjxxxxxUwVekqc_6VLkJRjIYaTe",
"oidc_scope": "openid,email,profile,offline_access",
"oidc_verify_cert": "true",
"oidc_auto_onboard": "true",
"oidc_user_claim": "preferred_username",
"self_registration": "true",
"read_only": "false",
"project_creation_restriction": "adminonly",
"token_expiration": "30",
"robot_token_duration": "365"
}
Trong value helm bạn thêm như sau:
core:
extraEnvVars:
- name: CONFIG_OVERWRITE_JSON
valueFrom:
secretKeyRef:
name: oidc-config # name of your already created secret
key: CONFIG_OVERWRITE_JSON
và đây là thông tin helm chart:
helmCharts: - name: harbor includeCRDs: false releaseName: harbor version: 1.16.2 repo: https://helm.goharbor.io valuesFile: values_helm.yaml namespace: harbor
