From 0d84143be3c7e0265147829e8dfd80f10c4c9cb8 Mon Sep 17 00:00:00 2001 From: Thomas Riccardi Date: Wed, 8 Apr 2026 18:09:00 +0200 Subject: [PATCH] fix typo extraneous $ template in doc `${project_name}` is rendered `$Keycloak`, cf https://www.keycloak.org/docs/26.6.0/server_admin/#_identity_broker_kubernetes Signed-off-by: Thomas Riccardi --- .../server_admin/topics/identity-broker/kubernetes.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/documentation/server_admin/topics/identity-broker/kubernetes.adoc b/docs/documentation/server_admin/topics/identity-broker/kubernetes.adoc index 55e2b0e43176..1e393830e33b 100644 --- a/docs/documentation/server_admin/topics/identity-broker/kubernetes.adoc +++ b/docs/documentation/server_admin/topics/identity-broker/kubernetes.adoc @@ -19,7 +19,7 @@ this value by decoding a service account token to retrieve the value of the `iss Keycloak must be able to invoke the endpoint `/.well-known/openid-configuration` and additionally the JWKS endpoint returned in the well-known configuration. By default, these endpoints require authentication with a -service account token. ${project_name} will automatically use the token from `/var/run/secrets/kubernetes.io/serviceaccount/token` +service account token. {project_name} will automatically use the token from `/var/run/secrets/kubernetes.io/serviceaccount/token` if available and the token issuer matches the configured issuer. Each identity provider must have a unique issuer. Each client must also have a unique subject identifier for each