feat: add ability to set user groups for access (#241)

defenseunicorns · Nov 19, 2024 · a33379b · a33379b
1 parent e9e7305
commit a33379b
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/charts/config/templates/uds-package.yaml b/charts/config/templates/uds-package.yaml
@@ -19,6 +19,13 @@ spec:
           - "{{ . }}"
         {{- end }}
       {{- end }}
+      groups:
+        anyOf:
+        {{- if .Values.sso.requiredGroups }}
+          {{- range .Values.sso.requiredGroups }}
+            - "{{ . }}"
+          {{- end }}
+        {{- end }}
       secretName: {{ .Values.sso.secretName }}
       secretTemplate:
         # GitLab expects a providers JSON file that is documented more here: https://gitlab-org.gitlab.io/technical-writing-group/gitlab-docs-hugo/administration/auth/oidc/
@@ -70,6 +77,13 @@ spec:
         - "mapper-saml-lastname-last_name"
         - "mapper-saml-grouplist-groups"
       {{- end }}
+      groups:
+        anyOf:
+        {{- if .Values.sso.requiredGroups }}
+          {{- range .Values.sso.requiredGroups }}
+            - "{{ . }}"
+          {{- end }}
+        {{- end }}
       attributes:
         saml.client.signature: "false"