feat: add ability to set user groups for access

defenseunicorns · Nov 19, 2024 · a1e00f1 · a1e00f1
1 parent 1b6cd95
commit a1e00f1
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml
@@ -28,6 +28,13 @@ spec:
         - "mapper-saml-grouplist-groups"
         - "mapper-saml-username-name"
       {{- end }}
+      groups:
+        anyOf:
+        {{- if .Values.sso.requiredGroups }}
+          {{- range .Values.sso.requiredGroups }}
+            - "{{ . }}"
+          {{- end }}
+        {{- end }}
 
       attributes:
         saml.client.signature: "false"

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -9,7 +9,8 @@ sso:
   # protocol should be either 'saml' or 'openid_connect'
   protocol: saml
   # This will replace the current list of default client scopes.
-  defaultClientScopes: {}
+  defaultClientScopes: []
+  requiredGroups: []
 
 # customNetworkPolicies:
 #    # Notice no `remoteGenerated` field here on custom internal rule