SCDF k8s config

application.yaml

server config:
spring:
  cloud:
    dataflow:
      security:
        authorization:
          provider-role-mappings:
            scdf-test:
              map-oauth-scopes: true
              role-mappings:
                ROLE_CREATE: dataflow.create
                ROLE_DEPLOY: dataflow.deploy
                ROLE_DESTROY: dataflow.destroy
                ROLE_MANAGE: dataflow.manage
                ROLE_MODIFY: dataflow.modify
                ROLE_SCHEDULE: dataflow.schedule
                ROLE_VIEW: dataflow.view
  security:
    oauth2:
      client:
        provider:
          azure:
            issuer-uri: https://login.microsoftonline.com/<sub-id>/v2.0
            user-name-attribute: name
        registration:
          digital-scdf:
            client-id: <client-id>
            client-secret: <client-secret>
            provider: azure
            redirect-uri: '{baseUrl}/login/oauth2/code/{registrationId}'
            scope:
            - openid
            - profile
            - email
            - offline_access
            - api://scdf-test/dataflow.view
            - api://scdf-test/dataflow.deploy
            - api://scdf-test/dataflow.destroy
            - api://scdf-test/dataflow.manage
            - api://scdf-test/dataflow.modify
            - api://scdf-test/dataflow.schedule
            - api://scdf-test/dataflow.create
      resourceserver:
        jwt:
          jwk-set-uri: https://login.microsoftonline.com/<sub-id>/v2.0/keys
    
skipper config:
spring:
  cloud:
    skipper:
      security:
        authorization:
          provider-role-mappings:
            scdf-test:
              map-oauth-scopes: true
              role-mappings:
                ROLE_CREATE: dataflow.create
                ROLE_DEPLOY: dataflow.deploy
                ROLE_DESTROY: dataflow.destroy
                ROLE_MANAGE: dataflow.manage
                ROLE_MODIFY: dataflow.modify
                ROLE_SCHEDULE: dataflow.schedule
                ROLE_VIEW: dataflow.view
  security:
    oauth2:
      client:
        provider:
          azure:
            issuer-uri: https://login.microsoftonline.com/<sub-id>/v2.0
            user-name-attribute: name
        registration:
          digital-scdf:
            client-id: <client-id>
            client-secret: <client-secret>
            provider: azure
            redirect-uri: '{baseUrl}/login/oauth2/code/{registrationId}'
            scope:
            - openid
            - profile
            - email
            - offline_access
            - api://scdf-test/dataflow.view
            - api://scdf-test/dataflow.deploy
            - api://scdf-test/dataflow.destroy
            - api://scdf-test/dataflow.manage
            - api://scdf-test/dataflow.modify
            - api://scdf-test/dataflow.schedule
            - api://scdf-test/dataflow.create