feat: opencloud group provisioning via oidc

Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 16:43:02 +01:00 · 2026-03-13 16:43:02 +01:00 · aa8baad630
commit aa8baad630
parent 6f4cc2bdb3
5 changed files with 37 additions and 0 deletions
--- a/roles/opencloud/templates/proxy.yaml.j2
+++ b/roles/opencloud/templates/proxy.yaml.j2
@ -0,0 +1,9 @@
+role_assignment:
+  driver: oidc
+  oidc_role_mapper:
+    role_claim: {{ opencloud_role_assignment_oidc_claim }}
+    role_mapping:
+{% for mapping in opencloud_role_mapping %}
+      - role_name: {{ mapping.role_name }}
+        claim_value: "{{ mapping.claim_value }}"
+{% endfor %}