kind: github
version: v3
metadata:
  name: github
spec:
  # GitHub OAuth app client ID
  client_id: <client-id>
  # GitHub OAuth app client secret
  client_secret: <client-secret>
  # GitHub will make a callback to this URL after successful authentication
  # cluster-url is the address the cluster UI is reachable at
  redirect_url: "https://<cluster-url>/v1/webapi/github/callback"
  # Connector display name that will become the title of an SSO login button on
  # the cluster login screen.
  display: GitHub
  # mapping of GitHub team memberships to Teleport cluster roles
  teams_to_logins:
  - logins:
    - access
    - editor
    organization: <github-org>
    team: <github-team>
  client_redirect_settings:
    # a list of hostnames allowed for HTTPS client redirect URLs
    # can be a regex pattern
    allowed_https_hostnames:
      - remote.machine
      - '*.app.github.dev'
      - '^\d+-[a-zA-Z0-9]+\.foo.internal$'
    # a list of CIDRs allowed for HTTP or HTTPS client redirect URLs
    insecure_allowed_cidr_ranges:
      - '192.168.1.0/24'
      - '2001:db8::/96'