this should work as well?

appuio · Jan 29, 2024 · 187521d · 187521d
1 parent 0f9f748
commit 187521d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/docker-compose-dev.yml b/docker-compose-dev.yml
@@ -13,12 +13,12 @@ services:
       - GF_AUTH_GENERIC_OAUTH_LOGIN_ATTRIBUTE_PATH=preferred_username
       - GF_AUTH_GENERIC_OAUTH_NAME=VSHN Test Keycloak
       - GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH=roles[?contains(@, 'admin')] && 'Admin' || roles[?contains(@, 'editor')] && 'Editor' || roles[?contains(@, 'viewer')] && 'Viewer' || 'Deny'
-      - GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_STRICT=true
+      - GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_STRICT=false
+      - GF_AUTH_GENERIC_OAUTH_SKIP_ORG_ROLE_SYNC=true
       - GF_AUTH_GENERIC_OAUTH_SCOPES=openid profile email
       - GF_AUTH_GENERIC_OAUTH_TOKEN_URL=https://id.test.vshn.net/auth/realms/VSHN-main-dev-realm/protocol/openid-connect/token
       - GF_SERVER_DOMAIN=operator-dev-grafana.apps.cloudscale-lpg-2.appuio.cloud
       - GF_SERVER_ROOT_URL=https://operator-dev-grafana.apps.cloudscale-lpg-2.appuio.cloud
-      - GF_AUTH_GENERIC_OAUTH_SKIP_ORG_ROLE_SYNC=true
     ports:
       - "3000:3000"
     labels: