Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide inline method for google workspace (formerly gsuite) service account JSON contents #5523

Closed
stevenGravy opened this issue Feb 9, 2021 · 0 comments
Labels
cloud Cloud sso Used for single sign on related tasks.

Comments

@stevenGravy
Copy link
Contributor

Feature Request

Provide the ability to specify the google_service_account_uri contents inline. Currently a file must be available to the auth service.

Ex:

kind: oidc
metadata:
  name: googleworkspace
spec:
  google_service_account_uri: |
     {
      ....
  claims_to_roles:
  - claim: groups
    roles:
    - admin
    value: <gsuite-group-email>
  client_id: <GSUITE_CLIENT_ID>.apps.googleusercontent.com
  client_secret: <OAUTH_CLIENT_SECRET>
  display: Google
  google_admin_email: <GSUITE_EMAIL>

  issuer_url: https://accounts.google.com
  redirect_url: https://<cluster-url>:3080/v1/webapi/oidc/callback

Motivation

Within cloud users cannot load and map to a JSON file. This will allow them to specify it inline.

Who's it for?

Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cloud Cloud sso Used for single sign on related tasks.
Projects
None yet
Development

No branches or pull requests

1 participant