You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@datalab.apache.org by lf...@apache.org on 2021/09/17 13:29:59 UTC

[incubator-datalab] branch DATALAB-1342 updated: [DATALAB-1342]: enabled service accounts only for ssn keycloak clients

This is an automated email from the ASF dual-hosted git repository.

lfrolov pushed a commit to branch DATALAB-1342
in repository https://gitbox.apache.org/repos/asf/incubator-datalab.git


The following commit(s) were added to refs/heads/DATALAB-1342 by this push:
     new dcfa176  [DATALAB-1342]: enabled service accounts only for ssn keycloak clients
dcfa176 is described below

commit dcfa176359722b2b5cb59f74bd4b3ccce7db4e1c
Author: leonidfrolov <fr...@gmail.com>
AuthorDate: Fri Sep 17 16:29:46 2021 +0300

    [DATALAB-1342]: enabled service accounts only for ssn keycloak clients
---
 infrastructure-provisioning/src/base/scripts/configure_keycloak.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/infrastructure-provisioning/src/base/scripts/configure_keycloak.py b/infrastructure-provisioning/src/base/scripts/configure_keycloak.py
index a5d283b..614b812 100644
--- a/infrastructure-provisioning/src/base/scripts/configure_keycloak.py
+++ b/infrastructure-provisioning/src/base/scripts/configure_keycloak.py
@@ -82,9 +82,11 @@ if __name__ == "__main__":
             "publicClient": "false",
             "secret": args.keycloak_client_secret,
             "protocol": "openid-connect",
-            "serviceAccountsEnabled": "true",
         }
 
+        if not args.project_name:
+            keycloak_client_data["serviceAccountsEnabled"] = "true"
+
         try:
             keycloak_token = requests.post(keycloak_auth_server_url, data=keycloak_auth_data, verify=False).json()
 

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datalab.apache.org
For additional commands, e-mail: commits-help@datalab.apache.org