docs: add tlsCaCert and tlsInsecureSkipVerify to OIDC config example

Chris Lu committed 2025-12-31 14:03:35 -08:00
1 parent b4580cf5e7
commit a52fe3c761
1 file changed
+8
+8
@@ -85,6 +85,8 @@ The IAM configuration file has these main sections:
"jwksUri": "https://idp.example.com/.well-known/jwks.json",
"userInfoUri": "https://idp.example.com/userinfo",
"scopes": ["openid", "profile", "email", "groups"],
"tlsCaCert": "/etc/seaweedfs/certs/ca.pem",
"tlsInsecureSkipVerify": false,
"roleMapping": {
"rules": [
{ "claim": "groups", "value": "admins", "role": "arn:aws:iam::role/S3AdminRole" }
@@ -97,6 +99,12 @@ The IAM configuration file has these main sections:
}
```
| Field | Description |
|-------|-------------|
| `tlsCaCert` | Optional path to a CA certificate file for verifying the provider's TLS certificate. |
| `tlsInsecureSkipVerify` | Optional boolean to skip TLS verification (default: false). Use only for testing. |
### Policies
```json