This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_keycloak [2026/03/20 21:01] val [Аутентификация пользователей WEB приложения] |
сервис_keycloak [2026/03/21 06:19] (current) val [Аутентификация пользователей WEB приложения] |
||
|---|---|---|---|
| Line 278: | Line 278: | ||
| Configure a new mapper: Groups Membership | Configure a new mapper: Groups Membership | ||
| Name: groups | Name: groups | ||
| - | Configure a new mapper: Audience !!! Для "подставки" токена в .kube/config | + | Configure a new mapper: Audience !!! Требуется kube-apiserver, проверяется "подстановкой" токена в .kube/config |
| - | Name (и везде): any-client | + | Name: any-client |
| + | Included Client Audience: any-client | ||
| + | Included Custom Audience: any-client | ||
| Clients -> any-client | Clients -> any-client | ||
| Line 422: | Line 424: | ||
| Mapper type: group-ldap-mapper | Mapper type: group-ldap-mapper | ||
| LDAP Groups DN: cn=groups,cn=accounts,dc=corpX,dc=un | LDAP Groups DN: cn=groups,cn=accounts,dc=corpX,dc=un | ||
| - | Relative creation DN: cn | + | Relative creation DN: cn ? |
| Group Name LDAP Attribute: cn | Group Name LDAP Attribute: cn | ||