feat: configurable defaultClientScopes

defenseunicorns · Nov 13, 2024 · 24b05e3 · 24b05e3
1 parent 3280cdb
commit 24b05e3
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml
@@ -13,6 +13,12 @@ spec:
       clientId: uds-package-artifactory
       redirectUris:
         - "https://artifactory.{{ .Values.domain }}/artifactory/"
+      defaultClientScopes:
+      {{- if .Values.sso.defaultClientScopes }}
+        {{- range .Values.sso.defaultClientScopes }}
+          - "{{ . }}"
+        {{- end }}
+      {{- end }}
   {{- end }}
   network:
     expose:

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -5,6 +5,8 @@ domain: "###ZARF_VAR_DOMAIN###"
 
 sso:
   enabled: true
+  # This will replace the current list of default client scopes.
+  defaultClientScopes: {}
 
 serviceMonitor:
   secretName: artifactory-admin-credentials