Configure executor user for Flow.

hazelcast · Nov 13, 2024 · 53d2df5 · 53d2df5
1 parent 11f6873
commit 53d2df5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/docs/modules/ROOT/pages/flow.adoc b/docs/modules/ROOT/pages/flow.adoc
@@ -74,5 +74,10 @@ See xref:flow:deploy:security-recommendations.adoc[Security recommendations] to
       --flow.security.openIdp.roles.format=path
       --flow.security.openIdp.roles.path=roles
       --flow.security.openIdp.refreshTokensDisabled=true
+      --flow.security.openIdp.executorRoleClientId=application-client
+      --flow.security.openIdp.executorRoleClientSecret=${MC_APPLICATION_CLIENT_SECRET}
+      --flow.security.openIdp.executorRoleTokenUrl=http://management-center:8080/oauth2/token
+      --flow.security.openIdp.executorRoleAuthenticationType=ClientSecretBasic
+      --flow.security.openIdp.executorRoleScopes=openid email profile flow:Admin
 ...
 ----