You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
25 lines
580 B
25 lines
580 B
apiVersion: security.istio.io/v1beta1
|
|
kind: RequestAuthentication
|
|
metadata:
|
|
name: keycloak-jwt
|
|
namespace: istio-system
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: istio-ingressgateway
|
|
|
|
jwtRules:
|
|
- # The `issuer` must be replaced with a Kustomize patch.
|
|
issuer: PATCH_ME
|
|
jwksUri: PATCH_ME
|
|
forwardOriginalToken: true
|
|
outputClaimToHeaders:
|
|
- header: kubeflow-userid
|
|
claim: email
|
|
- header: kubeflow-groups
|
|
claim: groups
|
|
- header: x-auth-request-user
|
|
claim: sub
|
|
fromHeaders:
|
|
- name: Authorization
|
|
prefix: "Bearer "
|
|
|