From 3d2ab9cec7bf4b7fc527fa386860d780e446f641 Mon Sep 17 00:00:00 2001 From: Thomas Riccardi Date: Wed, 8 Apr 2026 20:05:10 +0200 Subject: [PATCH] fix typo extraneous $ template in doc (#47861) Closes #47867 `${project_name}` is rendered `$Keycloak`, cf https://www.keycloak.org/docs/26.6.0/server_admin/#_identity_broker_kubernetes Signed-off-by: Thomas Riccardi --- .../server_admin/topics/identity-broker/kubernetes.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/documentation/server_admin/topics/identity-broker/kubernetes.adoc b/docs/documentation/server_admin/topics/identity-broker/kubernetes.adoc index 55e2b0e4317..1e393830e33 100644 --- a/docs/documentation/server_admin/topics/identity-broker/kubernetes.adoc +++ b/docs/documentation/server_admin/topics/identity-broker/kubernetes.adoc @@ -19,7 +19,7 @@ this value by decoding a service account token to retrieve the value of the `iss Keycloak must be able to invoke the endpoint `/.well-known/openid-configuration` and additionally the JWKS endpoint returned in the well-known configuration. By default, these endpoints require authentication with a -service account token. ${project_name} will automatically use the token from `/var/run/secrets/kubernetes.io/serviceaccount/token` +service account token. {project_name} will automatically use the token from `/var/run/secrets/kubernetes.io/serviceaccount/token` if available and the token issuer matches the configured issuer. Each identity provider must have a unique issuer. Each client must also have a unique subject identifier for each