# The base path of Dex and the external name of the OpenID Connect service.
# This is the canonical URL that all clients MUST use to get authenticated with Dex. If a
# path is provided, Dex's HTTP service listens at a non-root URL.
issuer: https://oidc:5557/dex

# The storage configuration determines where Dex stores its state. Supported
# options include SQL flavors and Kubernetes third-party resources.
# See the documentation (https://dexidp.io/docs/storage/) for further information.
storage:
  type: sqlite3
  config:
    file: /tmp/dex.db

# If you bring your own certificates, update the HTTPS, tlsCert, and tlsKey values.
web:
#  http: 0.0.0.0:5556
  https: 0.0.0.0:5557
  tlsCert: /ssl/cert.pem
  tlsKey: /ssl/key.pem

staticClients:
- id: dashboard
  redirectURIs:
  - 'http://localhost:8090/oidc-callback'
  name: 'Gloo UI'
  secret: ZXhhbXBsZS1hcHAtc2VjcmV0
- id: kuberentes
  redirectURIs:
  - 'http://127.0.0.1:5555/callback'
  - http://localhost:8000
  name: 'Kubernetes'
  secret: ZXhhbXBsZS1hcHAtc2VjcmV0

# A static list of passwords to log in the end user.
# After configuring this section, Dex does not look in its underlying storage for passwords.
# If this sectin is omitted, you add users through the Dex gRPC API.
enablePasswordDB: true

staticPasswords:
- email: "admin@example.com"
  # bcrypt hash of the string "password": $(echo password | htpasswd -BinC 10 admin | cut -d: -f2)
  hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
  username: "admin"
  userID: "08a8684b-db88-4b73-90a9-3cd1661f5466"
- email: "user@example.com"
  # bcrypt hash of the string "password": $(echo password | htpasswd -BinC 10 admin | cut -d: -f2)
  hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
  username: "user"
  userID: "08a8684b-db88-4b73-90a9-3cd1661f5467"