wip: adding configurable client scopes for OIDC

defenseunicorns · Nov 12, 2024 · 053fe6e · 053fe6e
1 parent f46263a
commit 053fe6e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml
@@ -50,6 +50,12 @@ spec:
       clientId: uds-package-jenkins-openid-connect
 
       protocol: openid-connect
+      defaultClientScopes:
+      {{- if .Values.sso.defaultClientScopes }}
+        {{- range .Values.sso.defaultClientScopes }}
+          - "{{ . }}"
+        {{- end }}
+      {{- end }}
 
       secretName: {{ .Values.sso.secretName }}
       secretTemplate:

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -8,6 +8,7 @@ sso:
   secretName: jenkins-sso
   # protocol should be either 'saml' or 'openid_connect'
   protocol: saml
+  # This will replace the current list of default scopes. Add all mappers that are necessary here
   defaultClientScopes: {}
 
 # customNetworkPolicies: