mirror of
https://github.com/gravitational/teleport.git
synced 2026-09-01 16:03:55 +08:00
Bartosz Leper
1481cb407b
* Update the SSO button designs - Use correct IDP icons - Add Okta to the list of guessed providers - Fix broken autofocus for SSO and passwordless methods - Update the docs that contained previously incorrect information about the display attribute of the connector resource definition * Fix the Connect cluster login dialog layout * Use data-testid instead of class in ResourceIcon * Remove unnecessary React.Fragment
34 lines
1.1 KiB
YAML
34 lines
1.1 KiB
YAML
kind: github
|
|
version: v3
|
|
metadata:
|
|
name: github
|
|
spec:
|
|
# GitHub OAuth app client ID
|
|
client_id: <client-id>
|
|
# GitHub OAuth app client secret
|
|
client_secret: <client-secret>
|
|
# GitHub will make a callback to this URL after successful authentication
|
|
# cluster-url is the address the cluster UI is reachable at
|
|
redirect_url: "https://<cluster-url>/v1/webapi/github/callback"
|
|
# Connector display name that will become the title of an SSO login button on
|
|
# the cluster login screen.
|
|
display: GitHub
|
|
# mapping of GitHub team memberships to Teleport cluster roles
|
|
teams_to_logins:
|
|
- logins:
|
|
- access
|
|
- editor
|
|
organization: <github-org>
|
|
team: <github-team>
|
|
client_redirect_settings:
|
|
# a list of hostnames allowed for HTTPS client redirect URLs
|
|
# can be a regex pattern
|
|
allowed_https_hostnames:
|
|
- remote.machine
|
|
- '*.app.github.dev'
|
|
- '^\d+-[a-zA-Z0-9]+\.foo.internal$'
|
|
# a list of CIDRs allowed for HTTP or HTTPS client redirect URLs
|
|
insecure_allowed_cidr_ranges:
|
|
- '192.168.1.0/24'
|
|
- '2001:db8::/96'
|