From f693be40bc0f84974241680bdef7454c4ff38bba Mon Sep 17 00:00:00 2001 From: Mariusz Sabath Date: Thu, 5 Mar 2026 22:40:44 -0500 Subject: [PATCH] fix: update github-tool .env.authbridge from demo to kagenti realm The Kagenti platform migrated from the Keycloak "demo" realm to "kagenti" (kagenti/kagenti#764). Update the ISSUER and JWKS_URL in .env.authbridge to match, so UI-based tool imports use the correct realm for token validation. Part of: kagenti/kagenti#767 Signed-off-by: Mariusz Sabath Assisted-By: Claude (Anthropic AI) --- mcp/github_tool/.env.authbridge | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mcp/github_tool/.env.authbridge b/mcp/github_tool/.env.authbridge index 850d0285..c4591b02 100644 --- a/mcp/github_tool/.env.authbridge +++ b/mcp/github_tool/.env.authbridge @@ -13,6 +13,6 @@ UPSTREAM_HEADER_TO_USE_IF_IN_AUDIENCE='{"valueFrom": {"secretKeyRef": {"name": " UPSTREAM_HEADER_TO_USE_IF_NOT_IN_AUDIENCE='{"valueFrom": {"secretKeyRef": {"name": "github-tool-secrets", "key": "UPSTREAM_HEADER_TO_USE_IF_NOT_IN_AUDIENCE"}}}' # Keycloak validation settings for incoming tokens -ISSUER=http://keycloak.localtest.me:8080/realms/demo -JWKS_URL=http://keycloak-service.keycloak.svc.cluster.local:8080/realms/demo/protocol/openid-connect/certs +ISSUER=http://keycloak.localtest.me:8080/realms/kagenti +JWKS_URL=http://keycloak-service.keycloak.svc.cluster.local:8080/realms/kagenti/protocol/openid-connect/certs AUDIENCE=github-tool