Consolidate selfhosted auth config: globals, scopes, Entra ID support (FAB-178)#313

Open

mhotan wants to merge 23 commits intomainfrom

mike/userclouds-defaults

Commits on Apr 17, 2026

Add defaultIdentityToSubject config for selfhosted IdPs (FAB-189)

mhotan
and
claude
committed
Provide UserClouds client defaults in controlplane values

mhotan
and
claude
committed
Fix dashboard metric name mismatches and query bug

mhotan
and
claude
committed
Fix Authorizer Mode panel value mappings for case sensitivity

mhotan
and
claude
committed
Add OIDC_METADATA_URL global for configurable metadata discovery

mhotan
and
claude
committed
Add OAuth2 globals for non-Okta IdP support (Entra ID, Keycloak)

mhotan
and
claude
committed
Add custom OIDC test fixture for non-Okta IdP configuration

mhotan
and
claude
committed
Wire OIDC_APP_SCOPE and OIDC_APP_AUDIENCE globals into chart templates

mhotan
and
claude
committed
Document OIDC auth config with OAuth app numbers and flow references

mhotan
and
claude
committed
Remove Terraform references from OIDC auth config comments

mhotan
and
claude
committed
Add OIDC_S2S_SCOPE global for service-to-service client_credentials

mhotan
and
claude
committed
Regenerate snapshots after rebase onto main

mhotan
and
claude
committed
Add OIDC_S2S_SCOPE to dataplane auth config

mhotan
and
claude
committed
Add server-alias for intra-cluster auth on selfhosted ingress

mhotan
and
claude
committed
Add gRPC identity header forwarding via configuration-snippet

mhotan
and
claude
committed
Add organizations service to controlplane chart

mhotan
and
claude
committed
Fix organizations service connectPort in configmap

mhotan
and
claude
committed
Use OIDC_S2S_SCOPE global for CP service-to-service auth scopes

mhotan
and
claude
committed
Move executions adminClient.connection to base values.yaml

mhotan
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Consolidate selfhosted auth config: globals, scopes, Entra ID support (FAB-178)#313

Consolidate selfhosted auth config: globals, scopes, Entra ID support (FAB-178)#313
mhotan wants to merge 23 commits intomainfrom
mike/userclouds-defaults

Commits on Apr 17, 2026

Add defaultIdentityToSubject config for selfhosted IdPs (FAB-189)

Provide UserClouds client defaults in controlplane values

Fix dashboard metric name mismatches and query bug

Fix Authorizer Mode panel value mappings for case sensitivity

Add OIDC_METADATA_URL global for configurable metadata discovery

Add OAuth2 globals for non-Okta IdP support (Entra ID, Keycloak)

Add custom OIDC test fixture for non-Okta IdP configuration

Wire OIDC_APP_SCOPE and OIDC_APP_AUDIENCE globals into chart templates

Document OIDC auth config with OAuth app numbers and flow references

Remove Terraform references from OIDC auth config comments

Add OIDC_S2S_SCOPE global for service-to-service client_credentials

Regenerate snapshots after rebase onto main

Add OIDC_S2S_SCOPE to dataplane auth config

Add server-alias for intra-cluster auth on selfhosted ingress

Add gRPC identity header forwarding via configuration-snippet

Add organizations service to controlplane chart

Fix organizations service connectPort in configmap

Use OIDC_S2S_SCOPE global for CP service-to-service auth scopes

Move executions adminClient.connection to base values.yaml

Commits on Apr 18, 2026

Add OIDC_BROWSER_SCOPE global for Entra browser auth

Consolidate auth config into base values.yaml with globals

Commits on Apr 19, 2026

Update authorizer dashboard: standardized backend metrics, identity_type

Consolidate auth config into adminServer.auth block