fix: add a note for ssl change for master realm (#2666)

1ad27fe9 · Keshav Prasad · GitHub · d7ed9a3e · 1ad27fe9
Unverified Commit 1ad27fe9 authored 3 years ago by Keshav Prasad Committed by GitHub 3 years ago
Hide whitespace changes
Inline Side-by-side

Showing

with 4 additions and 0 deletions
+4 -0
--- a/private_repo/ansible/inventory/dev/Core/secrets.yml
+++ b/private_repo/ansible/inventory/dev/Core/secrets.yml
@@ -25,9 +25,13 @@ core_vault_sunbird_api_auth_token: # Take the jwt token of api-admin consumer fr
 core_vault_sunbird_sso_publickey: # Public key of keycloak sunbird realm, update this post keycloak deployment.  See below for steps
 # SSH tunnel to the keycloak VM by running ssh -L 8080:localhost:8080 deployer@Keycloak-VM-IP
 # If you cannot tunnel directly to Keycloak VM, then tunnel to Jenkins first and then tunnel to Keycloak VM from jenkins
+# 
 # Go to http://localhost:8080/auth/admin/master/console/#/realms/sunbird/clients -> lms -> service account roles -> Click on client roles drop down -> Select realm-management -> Select manage-users in Available Roles -> Click on Add selected
+# 
 # Go to http://localhost:8080/auth/admin/master/console/#/realms/sunbird/keys
 # Click on Public Key and update the variable
+#
+# Go to http://localhost:8080/auth/admin/master/console/#/realms/master/login-settings and set the Require SSL to external requests

 adminutil_refresh_token_public_key_kid: ""   # get after keycloak deployment, go to http://localhost:8080/auth/admin/master/console/#/realms/sunbird/keys and use the Kid of the RS256 token