feat: oidc gitea team groups mapping (#1275)

Co-authored-by: jeho <[email protected]>
linode · Sep 14, 2023 · c1aed40 · c1aed40
1 parent b160f5f
commit c1aed40
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/values/gitea/gitea.gotmpl b/values/gitea/gitea.gotmpl
@@ -4,7 +4,20 @@
 {{- $k := $v.apps.keycloak }}
 {{- $giteaDomain := printf "gitea.%s" $v.cluster.domainSuffix }}
 {{- $cm := $v.apps | get "cert-manager" }}
+{{- $teamData := dict }}
+{{- $teams := keys $v.teamConfig }}
+# string builder that creates the map claimed groups to organization teams 
+# example: {"/team-demo1":{"otomi":["otomi-viewer", "team-demo1"]}, "/team-demo2":{"otomi":["otomi-viewer", "team-demo2"]}}
+{{- $teamData = merge $teamData (dict "admin" (dict "otomi" (list "otomi-viewer" "team-admin"))) }}
+{{- if gt (len $teams) 0 }}
+  {{- range $team := $teams }}
+  {{- if ne $team "admin" }}
+    {{- $teamName := printf "team-%s" $team }}
 
+    {{- $teamData = merge $teamData (dict $teamName (dict "otomi" (list "otomi-viewer" $teamName))) }}
+  {{- end }}
+  {{- end }}
+{{ end }}
 nameOverride: gitea
 fullnameOverride: gitea
 
@@ -111,6 +124,7 @@ gitea:
       autoDiscoverUrlBackchannel: {{ $v._derived.oidcWellKnownUrl }}
       adminGroup: team-admin
       groupClaimName: groups
+      groupTeamMap: {{ toJson $teamData | quote }}
 
 init:
   resources: