add OIDC issuer config field, checks for it being set, and placeholde…

…r config map entries

helm/values.yaml

@@ -1,6 +1,6 @@
 ---
 image:
-  repo: "localhost:5001/component-inventory"
+  repo: "localhost:5001"
   tag: latest
   pullPolicy: Always
 
@@ -15,3 +15,8 @@ fleetdb:
   env:
     endpoint: http://fleetdb:8000
     disable_oauth: true
+    audience_endpoint: "placeholder"
+    issuer_endpoint: "placeholder"
+    client_id: "placeholder"
+    client_scopes:
+      - "placeholder"

internal/app/app.go

@@ -142,31 +142,39 @@ func envVarOverrides(v *viper.Viper, cfg *Configuration) error {
 	}
 
 	if cfg.FleetDBOpts.AudienceEndpoint == "" {
-		return errors.New("fleetdb client secret not defined")
+		return errors.New("fleetdb OIDC audience endpoint not defined")
+	}
+
+	if v.GetString("fleetdb.issuer.endpoint") != "" {
+		cfg.FleetDBOpts.IssuerEndpoint = v.GetString("fleetdb.issuer.endpoint")
+	}
+
+	if cfg.FleetDBOpts.IssuerEndpoint == "" {
+		return errors.New("fleetdb OIDC issuer endpoint not defined")
 	}
 
 	if v.GetString("fleetdb.client.id") != "" {
 		cfg.FleetDBOpts.ClientID = v.GetString("fleetdb.client.id")
 	}
 
 	if cfg.FleetDBOpts.ClientID == "" {
-		return errors.New("fleetdb client id not defined")
+		return errors.New("fleetdb OIDC client id not defined")
 	}
 
 	if v.GetString("fleetdb.client.secret") != "" {
 		cfg.FleetDBOpts.ClientSecret = v.GetString("fleetdb.client.secret")
 	}
 
 	if cfg.FleetDBOpts.ClientSecret == "" {
-		return errors.New("fleetdb client secret not defined")
+		return errors.New("fleetdb OIDC client secret not defined")
 	}
 
 	if v.GetString("fleetdb.client.scopes") != "" {
 		cfg.FleetDBOpts.ClientScopes = v.GetStringSlice("fleetdb.client.scopes")
 	}
 
 	if len(cfg.FleetDBOpts.ClientScopes) == 0 {
-		return errors.New("fleetdb client scopes not defined")
+		return errors.New("fleetdb OIDC client scopes not defined")
 	}
 
 	return nil

internal/app/config.go

@@ -16,6 +16,7 @@ type FleetDBAPIOptions struct {
 	Endpoint         string   `mapstructure:"endpoint"`
 	DisableOAuth     bool     `mapstructure:"disable_oauth"`
 	AudienceEndpoint string   `mapstructure:"audience_endpoint"`
+	IssuerEndpoint   string   `mapstructure:"issuer_endpoint"`
 	ClientID         string   `mapstructure:"client_id"`
 	ClientSecret     string   `mapstructure:"client_secret"`
 	ClientScopes     []string `mapstructure:"client_scopes"`