Configure executor user for Flow. (#264)

hazelcast · Nov 13, 2024 · 0179b3a · 0179b3a
1 parent 7fca512
commit 0179b3a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/docs/modules/ROOT/pages/flow.adoc b/docs/modules/ROOT/pages/flow.adoc
@@ -74,5 +74,10 @@ See xref:flow:deploy:security-recommendations.adoc[Security recommendations] to
       --flow.security.openIdp.roles.format=path
       --flow.security.openIdp.roles.path=roles
       --flow.security.openIdp.refreshTokensDisabled=true
+      --flow.security.openIdp.executorRoleClientId=application-client
+      --flow.security.openIdp.executorRoleClientSecret=${MC_APPLICATION_CLIENT_SECRET}
+      --flow.security.openIdp.executorRoleTokenUrl=http://233.252.0.158/mc/oauth2/token
+      --flow.security.openIdp.executorRoleAuthenticationType=ClientSecretBasic
+      --flow.security.openIdp.executorRoleScopes=openid email profile flow:Admin
 ...
 ----