Skip to content

fix(deploy): correct stage OIDC URL configuration for Dev UI#434

Merged
jsell-rh merged 2 commits intomainfrom
austin/oidc-url-stage-bug
Apr 23, 2026
Merged

fix(deploy): correct stage OIDC URL configuration for Dev UI#434
jsell-rh merged 2 commits intomainfrom
austin/oidc-url-stage-bug

Conversation

@aredenba-rh
Copy link
Copy Markdown
Collaborator

@aredenba-rh aredenba-rh commented Apr 23, 2026 •
edited by coderabbitai Bot
Loading

Summary

  • Fixed misconfigured stage OIDC settings that produced a malformed authority URL
  • The Dev UI was building https://auth.stage.redhat.com/auth/realms/EmployeeIDP/realms/kartograph (double /realms/)
  • Made correction in config,ap-patch.yaml so the code correctly builds https://auth.stage.redhat.com/auth/realms/EmployeeIDP

Root Cause

The stage configmap had the full issuer URL in DEV_UI_KEYCLOAK_URL while useAuth.ts appends /realms/${realm} to that value. Local dev worked because it uses just the base URL (http://keycloak:8080).

Summary by CodeRabbit

  • Chores
    • Updated stage authentication configuration to use the base authentication endpoint and set the realm to EmployeeIDP, while keeping the client identifier unchanged. This aligns stage sign-in endpoints and may affect authentication behavior in the stage environment.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Apr 23, 2026 •
edited
Loading

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 7603da50-ff15-4987-8db1-f17c48e160cb

📥 Commits

Reviewing files that changed from the base of the PR and between e82e4a2 and 89d4c38.

📒 Files selected for processing (1)
  • deploy/apps/kartograph/overlays/stage/configmap-patch.yaml
🚧 Files skipped from review as they are similar to previous changes (1)
  • deploy/apps/kartograph/overlays/stage/configmap-patch.yaml

Walkthrough

A ConfigMap patch for the Kartograph staging overlay updates Keycloak settings: DEV_UI_KEYCLOAK_URL is changed from a realm-specific endpoint to the base auth endpoint (https://auth.stage.redhat.com/auth), and DEV_UI_KEYCLOAK_REALM is changed from kartograph to EmployeeIDP. DEV_UI_KEYCLOAK_CLIENT_ID remains unchanged. These edits adjust which Keycloak realm and URL the Dev UI uses in the staging environment.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately and specifically describes the main change: correcting stage OIDC URL configuration, which is the core bug fix in this pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch austin/oidc-url-stage-bug

Comment @coderabbitai help to get the list of available commands and usage tips.

@aredenba-rh aredenba-rh force-pushed the austin/oidc-url-stage-bug branch from 27b713a to e82e4a2 Compare April 23, 2026 17:37
@aredenba-rh aredenba-rh enabled auto-merge (squash) April 23, 2026 17:41
@aredenba-rh aredenba-rh force-pushed the austin/oidc-url-stage-bug branch from e82e4a2 to 89d4c38 Compare April 23, 2026 17:42
@aredenba-rh aredenba-rh disabled auto-merge April 23, 2026 17:44
@aredenba-rh aredenba-rh enabled auto-merge (squash) April 23, 2026 17:44
@jsell-rh jsell-rh disabled auto-merge April 23, 2026 17:44
@jsell-rh jsell-rh merged commit 6353566 into main Apr 23, 2026
8 checks passed
@jsell-rh jsell-rh deleted the austin/oidc-url-stage-bug branch April 23, 2026 17:44
jsell-rh added a commit that referenced this pull request May 2, 2026
@aredenba-rh @jsell-rh
configmap-patch.yaml values fixed to create proper oidc url in stage (#…
c0a9ada 
…434)

Co-authored-by: jsell-rh <jsell@redhat.com>
jsell-rh added a commit that referenced this pull request May 2, 2026
@aredenba-rh @jsell-rh
configmap-patch.yaml values fixed to create proper oidc url in stage (#…
97b75cb 
…434)

Co-authored-by: jsell-rh <jsell@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@aredenba-rh @jsell-rh