feat(whitby): Configure initial Keycloak setup

Trialing this as an alternative to CAS that is a little easier to
configure and can help us delegate authentication to other OIDC
services.

Change-Id: Iad63724d349334910af8fed0b148e4ba428f796b
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4608
Tested-by: BuildkiteCI
Autosubmit: tazjin <mail@tazj.in>
Reviewed-by: lukegb <lukegb@tvl.fyi>
This commit is contained in:
Vincent Ambo 2021-12-25 17:06:15 +03:00 committed by clbot
parent 1ee31d67fc
commit d8a1802b3e
4 changed files with 59 additions and 1 deletions

BIN
ops/secrets/keycloak-db.age Normal file

Binary file not shown.

View file

@ -24,6 +24,7 @@ in {
"gerrit-queue.age" = default;
"grafana.age" = default;
"irccat.age" = default;
"keycloak-db.age" = default;
"nix-cache-priv.age" = default;
"nix-cache-pub.age" = default;
"owothia.age" = default;