feat: add auto group create from OIDC (#8884)

* add flag for auto create groups
* fixup! add flag for auto create groups
* sync missing groups
Also added a regex filter to filter out groups that are not
important
This commit is contained in:
Steven Masley
2023-08-08 11:37:49 -05:00
committed by GitHub
parent 4a987e9917
commit f4122fa9f5
35 changed files with 887 additions and 128 deletions
+22
View File
@@ -243,6 +243,17 @@ Disable automatic session expiry bumping due to activity. This forces all sessio
Specifies the custom docs URL.
### --oidc-group-auto-create
| | |
| ----------- | ------------------------------------------ |
| Type | <code>bool</code> |
| Environment | <code>$CODER_OIDC_GROUP_AUTO_CREATE</code> |
| YAML | <code>oidc.enableGroupAutoCreate</code> |
| Default | <code>false</code> |
Automatically creates missing groups from a user's groups claim.
### --enable-terraform-debug-mode
| | |
@@ -521,6 +532,17 @@ Ignore the userinfo endpoint and only use the ID token for user information.
Issuer URL to use for Login with OIDC.
### --oidc-group-regex-filter
| | |
| ----------- | ------------------------------------------- |
| Type | <code>regexp</code> |
| Environment | <code>$CODER_OIDC_GROUP_REGEX_FILTER</code> |
| YAML | <code>oidc.groupRegexFilter</code> |
| Default | <code>.\*</code> |
If provided any group name not matching the regex is ignored. This allows for filtering out groups that are not needed. This filter is applied after the group mapping.
### --oidc-scopes
| | |