From 170feba87b915b6d745e38e30a575338af7094c0 Mon Sep 17 00:00:00 2001 From: Sanne Raymaekers Date: Wed, 28 Jun 2023 15:42:32 +0200 Subject: [PATCH] templates/packer: use RH SSO for the default token endpoint MAS SSO (identity.api.openshift.com) was deprecated, RH SSO should be the default. --- .../files/worker-initialization-scripts/client_credentials.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/packer/ansible/roles/common/files/worker-initialization-scripts/client_credentials.sh b/templates/packer/ansible/roles/common/files/worker-initialization-scripts/client_credentials.sh index 57555c052..6737c6471 100755 --- a/templates/packer/ansible/roles/common/files/worker-initialization-scripts/client_credentials.sh +++ b/templates/packer/ansible/roles/common/files/worker-initialization-scripts/client_credentials.sh @@ -20,7 +20,7 @@ rm -f /tmp/client-credentials.json sudo tee -a /etc/osbuild-worker/osbuild-worker.toml > /dev/null << EOF [authentication] -oauth_url = "${TOKEN_URL:-https://identity.api.openshift.com/auth/realms/rhoas/protocol/openid-connect/token}" +oauth_url = "${TOKEN_URL:-https://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/token}" client_id = "${CLIENT_ID}" client_secret = "/etc/osbuild-worker/client-secret" EOF