riotpiao-poimen/homelab
2
0
Fork 0
Code Issues 23 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

feat(iam): wire all 9 consumer manifests to Zitadel OIDC

Browse Source 
Co-authored-by: rock <[email protected]>
This commit was merged in pull request #71.
This commit is contained in:
rock
2026-10-26 04:34:51 +00:00
committed by rock
parent f9af686c36
commit a02bee50e2
15 changed files with 108 additions and 134 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/apps/paperless/paperless-ai-new.yaml
+2 -2
View File
@@ -49,9 +49,9 @@ spec:
echo "[init] Fetching JWT token from Authentik for paperless-ai-agent..."
# Get JWT token via client_credentials grant
TOKEN_RESPONSE=$(curl -s -X POST https://authentik.riotpiao.com/application/o/token/ \
TOKEN_RESPONSE=$(curl -s -X POST https://zitadel.riotpiao.com/oauth/v2/token \
-d "grant_type=client_credentials" \
-d "client_id=paperless-ai-agent" \
-d "client_id=396757803559027071" \
-d "client_secret=29skAhE0tBzWn0qrPvmPTQMva0joFjcCr7msDQr_VXQ" \
-d "scope=openid llm:inference" 2>/dev/null)
k8s/apps/paperless/paperless-ai.yaml
+2 -2
View File
@@ -43,9 +43,9 @@ spec:
# Get JWT token via client_credentials grant
# Client secret sourced from environment (injected from paperless-ai-config Secret)
TOKEN_RESPONSE=$(curl -s -X POST https://authentik.riotpiao.com/application/o/token/ \
TOKEN_RESPONSE=$(curl -s -X POST https://zitadel.riotpiao.com/oauth/v2/token \
-d "grant_type=client_credentials" \
-d "client_id=paperless-ai-agent" \
-d "client_id=396757803559027071" \
-d "client_secret=${LLM_AUTH_CLIENT_SECRET}" \
-d "scope=openid llm:inference" 2>/dev/null)