@@ -1187,6 +1187,11 @@ func (r *KeystoneAPIReconciler) generateServiceConfigMaps(
11871187 databaseAccount := db .GetAccount ()
11881188 dbSecret := db .GetSecret ()
11891189
1190+ enableFederation := false
1191+ if & instance .Spec .OIDCFederation != nil {
1192+ enableFederation = true
1193+ }
1194+
11901195 templateParameters := map [string ]interface {}{
11911196 "memcachedServers" : mc .GetMemcachedServerListString (),
11921197 "memcachedTLS" : mc .GetMemcachedTLSSupport (),
@@ -1199,10 +1204,10 @@ func (r *KeystoneAPIReconciler) generateServiceConfigMaps(
11991204 ),
12001205 "enableSecureRBAC" : instance .Spec .EnableSecureRBAC ,
12011206 "ProcessNumber" : instance .Spec .HttpdCustomization .ProcessNumber ,
1202- "enableFederation" : instance . Spec . EnableFederation ,
1207+ "enableFederation" : enableFederation ,
12031208 }
12041209
1205- if instance . Spec . EnableFederation {
1210+ if enableFederation {
12061211 federationParameters := map [string ]interface {}{
12071212 "federationTrustedDashboard" : fmt .Sprintf ("https://%s-%s.%s.svc/dashboard/auth/websso/" ,
12081213 instance .Name , service .EndpointPublic , instance .Namespace ),
@@ -1223,8 +1228,7 @@ func (r *KeystoneAPIReconciler) generateServiceConfigMaps(
12231228 endptConfig ["SSLCertificateKeyFile" ] = fmt .Sprintf ("/etc/pki/tls/private/%s.key" , endpt .String ())
12241229 }
12251230
1226- endptConfig ["EnableFederation" ] = false // default OIDCFederation to false, and set it below to true if enabled
1227- if instance .Spec .EnableFederation {
1231+ if enableFederation {
12281232 ospSecret , _ , err := oko_secret .GetSecret (
12291233 ctx ,
12301234 h ,
@@ -1244,7 +1248,6 @@ func (r *KeystoneAPIReconciler) generateServiceConfigMaps(
12441248 return errors .New ("OIDCCryptoPassphrase cannot be empty" )
12451249 }
12461250
1247- endptConfig ["EnableFederation" ] = true
12481251 endptConfig ["OIDCClaimPrefix" ] = instance .Spec .OIDCFederation .OIDCClaimPrefix
12491252 endptConfig ["OIDCResponseType" ] = instance .Spec .OIDCFederation .OIDCResponseType
12501253 endptConfig ["OIDCScope" ] = instance .Spec .OIDCFederation .OIDCScope
0 commit comments