diff options
| author | Zuul <zuul@review.opendev.org> | 2022-10-04 14:21:17 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2022-10-04 14:21:17 +0000 |
| commit | 1cddf8050dd7a87e317a74d17e0680e9fdfd438b (patch) | |
| tree | dba99a93996b7db19c8158c2570fad930c5a2baf /doc | |
| parent | 0052deac23c8e31c1dcbf47cc0c4664643303c13 (diff) | |
| parent | 98929761191e265474459a0b73fdbeb07afd2bb4 (diff) | |
| download | kolla-ansible-1cddf8050dd7a87e317a74d17e0680e9fdfd438b.tar.gz kolla-ansible-1cddf8050dd7a87e317a74d17e0680e9fdfd438b.zip | |
Merge "Keystone OIDC JWKS fix"
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/source/reference/shared-services/keystone-guide.rst | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/source/reference/shared-services/keystone-guide.rst b/doc/source/reference/shared-services/keystone-guide.rst index 9a51c9331..dc3d766c5 100644 --- a/doc/source/reference/shared-services/keystone-guide.rst +++ b/doc/source/reference/shared-services/keystone-guide.rst @@ -88,6 +88,14 @@ below: - name: "mappingId1" file: "/full/qualified/path/to/mapping/json/file/to/mappingId1" +In some cases it's necessary to add JWKS (JSON Web Key Set) uri. +It is required for auth-openidc endpoint - which is +used by OpenStack command line client. Example config shown below: + +.. code-block:: yaml + + keystone_federation_oidc_jwks_uri: "https://<AUTH PROVIDER>/<ID>/discovery/v2.0/keys" + Identity providers configurations ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |