status-im
/
infra-role-alertmanager
mirror of https://github.com/status-im/infra-role-alertmanager.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

oauth-proxy: Add option to setup oauth with keycloak 

Modify the call to oauth proxy role so it is possible to use keycloak-oidc provider along with github.

Referenced issue: https://github.com/status-im/infra-misc/issues/285

Signed-off-by: markoburcul <marko@status.im>
This commit is contained in:
markoburcul 2024-08-20 17:43:32 +02:00 committed by Marko Burčul
parent f9f0c5a8fb
commit 6bba694dcc
2 changed files with 21 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
defaults/main.yml
View File

@ -39,13 +39,17 @@ alertmanager_receivers_extra: []
# send_resolved: true
# OAuth
alertmanager_oauth_provider: 'keycloak-oidc'
alertmanager_oauth_compose_file: '{{ alertmanager_service_path }}/docker-compose.oauth.yml'
alertmanager_oauth_cont_port: 8092
#alertmanager_oauth_id: ~
#alertmanager_oauth_secret: ~
#alertmanager_oauth_cookie_secret: ~
#alertmanager_oauth_gh_org: ~
alertmanager_oauth_gh_org: 'status-im'
alertmanager_oauth_gh_teams: []
alertmanager_oauth_keycloak_realm: 'logos-co'
alertmanager_oauth_keycloak_groups: []
alertmanager_oauth_keycloak_roles: []
# Route configuration
alertmanager_group_by: ['alertname', 'fleet']

28
tasks/container.yml
View File

@ -10,18 +10,22 @@
- name: Create OAuth compose file
include_role: name=infra-role-oauth-proxy
vars:
oauth_service_name: '{{ alertmanager_service_name }}-oauth'
oauth_service_path: '{{ alertmanager_service_path }}'
oauth_compose_path: '{{ alertmanager_oauth_compose_file }}'
oauth_domain: '{{ alertmanager_domain | mandatory }}'
oauth_github_org: '{{ alertmanager_oauth_gh_org | mandatory }}'
oauth_github_teams: '{{ alertmanager_oauth_gh_teams | mandatory }}'
oauth_id: '{{ alertmanager_oauth_id | mandatory }}'
oauth_secret: '{{ alertmanager_oauth_secret | mandatory }}'
oauth_cookie_secret: '{{ alertmanager_oauth_cookie_secret | mandatory }}'
oauth_local_port: '{{ alertmanager_oauth_cont_port | mandatory }}'
oauth_local_addr: '0.0.0.0'
oauth_upstream_url: 'http://app:{{ alertmanager_webui_port }}/'
oauth_service_name: '{{ alertmanager_service_name }}-oauth'
oauth_service_path: '{{ alertmanager_service_path }}'
oauth_compose_path: '{{ alertmanager_oauth_compose_file }}'
oauth_provider: '{{ alertmanager_oauth_provider | mandatory }}'
oauth_domain: '{{ alertmanager_domain | mandatory }}'
oauth_github_org: '{{ alertmanager_oauth_gh_org }}'
oauth_github_teams: '{{ alertmanager_oauth_gh_teams }}'
oauth_keycloak_realm: '{{ alertmanager_oauth_keycloak_realm }}'
oauth_keycloak_groups: '{{ alertmanager_oauth_keycloak_groups }}'
oauth_keycloak_roles: '{{ alertmanager_oauth_keycloak_roles }}'
oauth_id: '{{ alertmanager_oauth_id | mandatory }}'
oauth_secret: '{{ alertmanager_oauth_secret | mandatory }}'
oauth_cookie_secret: '{{ alertmanager_oauth_cookie_secret | mandatory }}'
oauth_local_port: '{{ alertmanager_oauth_cont_port | mandatory }}'
oauth_local_addr: '0.0.0.0'
oauth_upstream_url: 'http://app:{{ alertmanager_webui_port }}/'
- name: Create containers
docker_compose: