fix(alpha): add missing auth for grpc api

camunda · Dec 13, 2024 · fb4c6f0 · fb4c6f0
1 parent 7ef728e
commit fb4c6f0
Show file tree

Hide file tree

Showing 4 changed files with 33 additions and 1 deletion.
diff --git a/charts/camunda-platform-alpha/templates/core/configmap.yaml b/charts/camunda-platform-alpha/templates/core/configmap.yaml
@@ -38,7 +38,6 @@ data:
                 redirect-uri: "{{ tpl .Values.global.identity.auth.core.redirectUrl $ | default $redirectURIDefault }}/login/oauth2/code/core"
                 provider: oidcclient
                 scope: openid,profile
-
     {{- else }}
     spring:
       profiles:
@@ -70,6 +69,18 @@ data:
         # zeebe.broker.gateway
         gateway:
           enable: true
+          # zeebe.broker.gateway.security
+          security:
+            authentication:
+            {{- if .Values.global.identity.auth.enabled }}
+              mode: identity
+              {{- $issuerURIDefault := (include "camundaPlatform.authIssuerBackendUrl" . | replace ":80" "") }}
+              issuerBackendUrl: {{ (include "camundaPlatform.authIssuerUrl" .) | default $issuerURIDefault | quote }}
+              audience: {{ include "core.authClientId" . | quote }}
+              type: {{ lower .Values.global.identity.auth.type | default "keycloak" }}
+            {{- else }}
+              mode: none
+            {{- end }}
           network:
             host: 0.0.0.0
             port: {{ .Values.core.service.grpcPort }}

diff --git a/charts/camunda-platform-alpha/test/unit/core/golden/configmap-authorizations.golden.yaml b/charts/camunda-platform-alpha/test/unit/core/golden/configmap-authorizations.golden.yaml
@@ -58,6 +58,13 @@ data:
         # zeebe.broker.gateway
         gateway:
           enable: true
+          # zeebe.broker.gateway.security
+          security:
+            authentication:
+              mode: identity
+              issuerBackendUrl: "http://localhost:18080/auth/realms/camunda-platform"
+              audience: "core"
+              type: keycloak
           network:
             host: 0.0.0.0
             port: 26500

diff --git a/charts/camunda-platform-alpha/test/unit/core/golden/configmap-log4j2.golden.yaml b/charts/camunda-platform-alpha/test/unit/core/golden/configmap-log4j2.golden.yaml
@@ -58,6 +58,13 @@ data:
         # zeebe.broker.gateway
         gateway:
           enable: true
+          # zeebe.broker.gateway.security
+          security:
+            authentication:
+              mode: identity
+              issuerBackendUrl: "http://localhost:18080/auth/realms/camunda-platform"
+              audience: "core"
+              type: keycloak
           network:
             host: 0.0.0.0
             port: 26500

diff --git a/charts/camunda-platform-alpha/test/unit/core/golden/configmap.golden.yaml b/charts/camunda-platform-alpha/test/unit/core/golden/configmap.golden.yaml
@@ -58,6 +58,13 @@ data:
         # zeebe.broker.gateway
         gateway:
           enable: true
+          # zeebe.broker.gateway.security
+          security:
+            authentication:
+              mode: identity
+              issuerBackendUrl: "http://localhost:18080/auth/realms/camunda-platform"
+              audience: "core"
+              type: keycloak
           network:
             host: 0.0.0.0
             port: 26500