Move executor user scope setting to env variable. (#45)

hazelcast · Nov 29, 2024 · c50d33d · c50d33d
1 parent 27a8d17
commit c50d33d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/stock-ticker/docker-compose.yml b/stock-ticker/docker-compose.yml
@@ -7,6 +7,7 @@ services:
             -XX:MaxRAMPercentage=50
             -XX:InitialRAMPercentage=50
          FLOW_SECURITY_OPENIDP_SCOPE: "openid email profile"
+         FLOW_SECURITY_OPENIDP_EXECUTORROLESCOPES: "openid email profile flow:Admin"
          OPTIONS: >-
             --flow.analytics.persistRemoteCallResponses=true
             --flow.analytics.persistResults=true
@@ -28,7 +29,6 @@ services:
             --flow.security.openIdp.executorRoleClientSecret=${MC_APPLICATION_CLIENT_SECRET}
             --flow.security.openIdp.executorRoleTokenUrl=http://management-center:8080/oauth2/token
             --flow.security.openIdp.executorRoleAuthenticationType=ClientSecretBasic
-            --flow.security.openIdp.executorRoleScopes=openid email profile flow:Admin
             --flow.hazelcast.configYamlPath=/opt/hazelcast/config_ext/hazelcast.yml
             --flow.config.custom.managementCenterUrl=http://localhost:8080
       expose: