File tree Expand file tree Collapse file tree
examples/tornjak/keycloak Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -49,27 +49,28 @@ The example below demonstrates port forward for local access. In cloud deploymen
4949enable Ingress to the Keycloak service accordingly.
5050
5151``` shell
52- # Start an auth Service [Keycloak] in separate terminal
5352kubectl -n keycloak port-forward service/keycloak 8080:80
5453```
5554
56- See the helm Notes for more information about accessing Keycloak
55+ You can access Keycloak at [ http://localhost:8080 ] ( http://localhost:8080 ) .
5756
5857## Deploy SPIRE with Tornjak User Management Enabled
5958
6059Please follow the instructions for [ deploying Tornjak] ( ../README.md )
6160with addition of the User Management values ` --values examples/tornjak/values-auth.yaml ` .
6261
6362> [ !IMPORTANT]
64- > Make sure Tornjak backend User Management issuer points to the correct Keycloak issuer URL. Which is in format
63+ > Make sure Tornjak backend User Management issuer points to the correct Keycloak issuer URL, which has the format
6564> ` http://<your-keycloakServicename>.<keycloak-namespace>:<your-keycloak-portnumber>/realms/tornjak ` .
65+ >
6666> For the example above it will be: ` http://keycloak.keycloak:8080/realms/tornjak `
67- > You can set the issuer URL using ` --set spire-server.tornjak.config.userManagement.issuer=http://tornjak.tornjak:8080/realms/tornjak `
6867>
68+ > You can set the issuer URL using ` --set spire-server.tornjak.config.userManagement.issuer=http://tornjak.tornjak:8080/realms/tornjak `
69+
6970> [ !IMPORTANT]
7071> If audience is set, make sure the Tornjak backend ` audience ` is set correctly. You can set it using:
7172> ` --set spire-server.tornjak.config.userManagement.audience=your-audience `
72- >
73+
7374> [ !TIP]
7475> Keep in mind, when redeploying Tornjak, you might have to recreate port forwarding for that service.
7576
You can’t perform that action at this time.
0 commit comments