feat: add ability to set user groups for access (#169)

defenseunicorns · Nov 19, 2024 · 07934c8 · 07934c8
1 parent 6e31cae
commit 07934c8
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/chart/templates/uds-package.yaml b/chart/templates/uds-package.yaml
@@ -30,6 +30,13 @@ spec:
         - "email"
         {{ end }}
       {{- end }}
+      groups:
+        anyOf:
+        {{- if .Values.sso.requiredGroups }}
+          {{- range .Values.sso.requiredGroups }}
+            - "{{ . }}"
+          {{- end }}
+        {{- end }}
 
       secretName: {{ .Values.sso.secretName }}
       secretTemplate:

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -38,6 +38,7 @@ sso:
 
   # This will replace the current list of default client scopes.
   defaultClientScopes: []
+  requiredGroups: []
 
   # These should typically be disabled if SSO is enabled
   enable_sign_up_with_email: false