rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(minio): use in-cluster URL for OIDC config fetch

Browse Source 
MinIO pod was getting 503 from public URL at startup. Use in-cluster
authentik-server.iam.svc for metadata fetch; browser redirects still
use public URLs from OIDC metadata response.
This commit is contained in:
rock
2026-09-03 23:15:19 -07:00
parent 8f7004c946
commit f9654986ad
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/infra/minio/minio-tenant.yaml
+3 -1
View File
@@ -96,9 +96,11 @@ spec:
console: https://minio.riotpiao.com console: https://minio.riotpiao.com
# ── OIDC via Authentik (server-side env, valid in v2 schema) ──────────────── # ── OIDC via Authentik (server-side env, valid in v2 schema) ────────────────
# Use in-cluster URL for config fetch (pod→authentik); browser redirects use
# public URLs embedded in the OIDC metadata response (issuer stays public).
env: env:
- name: MINIO_IDENTITY_OPENID_CONFIG_URL - name: MINIO_IDENTITY_OPENID_CONFIG_URL
value: "https://authentik.riotpiao.com/application/o/minio/.well-known/openid-configuration" value: "http://authentik-server.iam.svc.cluster.local/application/o/minio/.well-known/openid-configuration"
- name: MINIO_IDENTITY_OPENID_CLIENT_ID - name: MINIO_IDENTITY_OPENID_CLIENT_ID
value: "minio" value: "minio"
- name: MINIO_IDENTITY_OPENID_CLIENT_SECRET - name: MINIO_IDENTITY_OPENID_CLIENT_SECRET