feat: adds functionality to edit the default scopes for keycloak

defenseunicorns · Nov 12, 2024 · f46263a · f46263a
1 parent 66b5b1f
commit f46263a
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml
@@ -17,11 +17,17 @@ spec:
 
       protocol: saml
       defaultClientScopes:
+      {{- if .Values.sso.defaultClientScopes }}
+        {{- range .Values.sso.defaultClientScopes }}
+          - "{{ . }}"
+        {{- end }}
+      {{- else }}
         - "mapper-saml-email-email"
         - "mapper-saml-firstname-first_name"
         - "mapper-saml-lastname-last_name"
         - "mapper-saml-grouplist-groups"
         - "mapper-saml-username-name"
+      {{- end }}
 
       attributes:
         saml.client.signature: "false"

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -8,6 +8,7 @@ sso:
   secretName: jenkins-sso
   # protocol should be either 'saml' or 'openid_connect'
   protocol: saml
+  defaultClientScopes: {}
 
 # customNetworkPolicies:
 #    # Notice no `remoteGenerated` field here on custom internal rule