Digitalboard/reference-ansible
5
1
Fork 0
Code Pull requests Activity Actions

feat: opencloud group provisioning via oidc

Browse source 
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
This commit is contained in:
Bert-Jan Fikse 2026-03-13 16:43:02 +01:00
parent 096cda6d4a
commit 2c1c01a2d7
Signed by: bert-jan
GPG key ID: C1E0AB516AC16D1A
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
inventories/vagrant/host_vars/backend/opencloud.yml
View file

@ -36,6 +36,16 @@ opencloud_ldap_group_base_dn: "ou=groups,dc=local,dc=test"
# Draw.io integration # Draw.io integration
opencloud_drawio_url: "https://drawio.local.test" opencloud_drawio_url: "https://drawio.local.test"
# Role assignment via OIDC (maps LDAP groups from Keycloak token to OpenCloud roles)
opencloud_role_assignment_driver: "oidc"
opencloud_role_mapping:
- role_name: admin
claim_value: admins
- role_name: user
claim_value: users
- role_name: user
claim_value: developers
# CSP configuration # CSP configuration
opencloud_csp_extra_connect_src: opencloud_csp_extra_connect_src:
- "https://keycloak.local.test/" - "https://keycloak.local.test/"