kind: ConfigMap
apiVersion: v1
metadata:
  name: tectonic-identity
  namespace: tectonic-system
data:
  issuer: https://console.tectonicsandbox.com/identity
  consoleClientID: tectonic-console
  consoleSecret: ZbSpnvO8LUphC-Gh6mJ7hQ
  kubectlClientID: tectonic-kubectl
  kubectlSecret: 750L-q4he_2YsjlKgiiTmA
  config.yaml: |
    issuer: https://console.tectonicsandbox.com/identity
    storage:
      type: kubernetes
      config:
        inCluster: true
    web:
      http: 0.0.0.0:5556
    grpc:
      addr: 0.0.0.0:5557
      tlsCert: /etc/tectonic-identity-grpc-server-secret/tls-cert
      tlsKey: /etc/tectonic-identity-grpc-server-secret/tls-key
      tlsClientCA: /etc/tectonic-identity-grpc-server-secret/ca-cert
    frontend:
      theme: 'tectonic'
      issuer: 'Tectonic Identity'
    oauth2:
      skipApprovalScreen: true
    staticClients:
    - id: tectonic-console
      redirectURIs:
      - 'https://console.tectonicsandbox.com/auth/callback'
      - 'https://console.tectonicsandbox.com/prometheus/auth/callback'
      - 'https://console.tectonicsandbox.com/alertmanager/auth/callback'
      name: 'Tectonic Console'
      secret: ZbSpnvO8LUphC-Gh6mJ7hQ
    - id: tectonic-kubectl
      public: true
      trustedPeers:
      - tectonic-console
      name: 'Kubectl'
      secret: 750L-q4he_2YsjlKgiiTmA
    enablePasswordDB: true
    staticPasswords:
    - email: "admin@example.com"
      hash: "$2a$10$rQ13TGgO3wP3QPFVzFt8ReIjb5Tb7WxVMIuc54Lwu2v446vrDjy06"
      username: "admin"
      userID: "_-8HyffrNAQAG99XyxDVSw"
