fix oidc resource

kyma-project · Sep 27, 2024 · e182927 · e182927
1 parent a28aee6
commit e182927
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -243,3 +243,9 @@ rules:
   - dockerregistries
   verbs:
   - "*"
+- apiGroups:
+  - authentication.gardener.cloud
+  resources:
+  - "*"
+  verbs:
+  - "*"
diff --git a/controllers/cfapi_controller_rendered_resources.go b/controllers/cfapi_controller_rendered_resources.go
@@ -478,10 +478,14 @@ func (r *CFAPIReconciler) createOIDCConfig(ctx context.Context, cfAPI *v1alpha1.
 	if r.crdExists(ctx, "OpenIDConnect") {
 		logger.Info("OIDC CR exists, create CR")
 
+		var uaaUrl = cfAPI.Spec.UAA
+		if uaaUrl == "" {
+			uaaUrl = defaultUaaUrl
+		}
 		vals := struct {
 			UAA string
 		}{
-			UAA: cfAPI.Spec.UAA,
+			UAA: uaaUrl,
 		}
 
 		t1 := template.New("oidcUAA")