|
|
|
@ -25,6 +25,20 @@ bootstrap:
|
|
|
|
p, role:mobene-users, applications, get, mobene/*, allow
|
|
|
|
p, role:mobene-users, applications, get, mobene/*, allow
|
|
|
|
p, role:mobene-users, applications, sync, mobene/*, allow
|
|
|
|
p, role:mobene-users, applications, sync, mobene/*, allow
|
|
|
|
p, role:mobene-users, repositories, get, *, allow
|
|
|
|
p, role:mobene-users, repositories, get, *, allow
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
grafana:
|
|
|
|
|
|
|
|
grafana_ini:
|
|
|
|
|
|
|
|
auth.generic_oauth:
|
|
|
|
|
|
|
|
enabled: true
|
|
|
|
|
|
|
|
name: Keycloak
|
|
|
|
|
|
|
|
allow_sign_up: true
|
|
|
|
|
|
|
|
scopes: profile,email,groups
|
|
|
|
|
|
|
|
auth_url: https://prodwork01-keycloak-01-keycloak.smardigo.digital/auth/realms/master/protocol/openid-connect/auth
|
|
|
|
|
|
|
|
token_url: https://prodwork01-keycloak-01-keycloak.smardigo.digital/auth/realms/master/protocol/openid-connect/token
|
|
|
|
|
|
|
|
api_url: https://prodwork01-keycloak-01-keycloak.smardigo.digital/auth/realms/master/protocol/openid-connect/userinfo
|
|
|
|
|
|
|
|
client_id: grafana
|
|
|
|
|
|
|
|
client_secret: pCi7uGpA3NB5MMtIqmZGTrdqqW5K2Jkd
|
|
|
|
|
|
|
|
role_attribute_path: contains(groups[*], 'grafana-viewer') && 'Editor' || 'Viewer'
|
|
|
|
|
|
|
|
|
|
|
|
stage: prodwork01
|
|
|
|
stage: prodwork01
|
|
|
|
domain: smardigo.digital
|
|
|
|
domain: smardigo.digital
|
|
|
|
|