Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

Switch dogfood SSO to Okta and add metadata URL (#41900)

Browse Source 
Add DOGFOOD_OKTA_METADATA_URL to the dogfood GitOps workflow environment
and update SSO configuration to use Okta. it-and-security/default.yml:
change end_user_authentication.entity_id to fleet-end-users and org SSO
entity_id to fleet-admins, set idp_name to Okta for both, remove inline
metadata values, and point metadata_url to $DOGFOOD_OKTA_METADATA_URL.
This centralizes IdP metadata retrieval via a secret URL.
This commit is contained in:
Allen Houchins
2026-03-17 21:27:33 -05:00
committed by GitHub
parent bd4db05e79
commit 0dc53ec2c3
2 changed files with 7 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/dogfood-gitops.yml
+1
View File
@@ -84,6 +84,7 @@ jobs:
DOGFOOD_OKTA_CA_CERTIFICATE: ${{ secrets.DOGFOOD_OKTA_CA_CERTIFICATE }}
DOGFOOD_OKTA_VERIFY_WINDOWS_URL: ${{ secrets.DOGFOOD_OKTA_VERIFY_WINDOWS_URL }}
DOGFOOD_ENTRA_TENANT_ID: ${{ secrets.DOGFOOD_ENTRA_TENANT_ID }}
DOGFOOD_OKTA_METADATA_URL: ${{ secrets.DOGFOOD_OKTA_METADATA_URL }}
- name: Notify on Gitops failure
if: failure() && github.ref_name == 'main'