From b14079533a9e56f9f22da702704fb86f4d62188b Mon Sep 17 00:00:00 2001 From: abir-oumghar Date: Wed, 5 Aug 2026 21:19:09 +0200 Subject: [PATCH] fix(keycloak): allow the polaris-console redirect URI on any project --- 99-examples-context.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/99-examples-context.yaml b/99-examples-context.yaml index 6cc6ac0..1ae1c4a 100644 --- a/99-examples-context.yaml +++ b/99-examples-context.yaml @@ -879,10 +879,14 @@ spec: - clientId: polaris-console name: polaris-console publicClient: true + # The console is deployed per project, so its host carries the project + # namespace. Keycloak only supports a trailing wildcard, which keeps the + # match scoped to the console hosts instead of the "https://*" used by + # the other clients. redirectUris: - - "https://polaris-console-default.{{ .Context.ingress.suffix }}/auth/callback" + - "https://polaris-console-*" webOrigins: - - "https://polaris-console-default.{{ .Context.ingress.suffix }}" + - "https://polaris-console-*" - clientId: seaweedfs-s3 name: seaweedfs-s3 publicClient: true