catalin/fukuops
1
0
Fork 1
Code Issues Pull requests 2 Releases Packages 1 Activity

feat: add netbird docker
Some checks failed
checks / pre-commit (push) Successful in 1m14s
Details
checks / k8s (push) Successful in 48s
Details
checks / tflint (push) Successful in 31s
Details
OpenTofu deployments / adguard (push) Successful in 48s
Details
OpenTofu deployments / authentik (push) Failing after 3h2m54s
Details

Browse source
This commit is contained in:
cătălin 2024-09-16 16:15:01 +02:00
commit 50049547b6
No known key found for this signature in database
7 changed files with 194 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

25
tofu/modules/authentik-oidc/main.tf
View file

@ -18,25 +18,28 @@ data "authentik_flow" "default-authentication-flow" {
data "authentik_property_mapping_provider_scope" "default-scopes" {
managed_list = [
managed_list = concat([
"goauthentik.io/providers/oauth2/scope-email",
"goauthentik.io/providers/oauth2/scope-openid",
"goauthentik.io/providers/oauth2/scope-profile",
"goauthentik.io/providers/oauth2/scope-offline_access",
]
], var.extra_property_mappings)
}
resource "authentik_provider_oauth2" "provider_oidc" {
name = var.app_name
client_id = var.client_id
client_secret = var.client_secret
authorization_flow = data.authentik_flow.default-authorization-flow.id
authentication_flow = data.authentik_flow.default-authentication-flow.id
redirect_uris = var.redirect_uris
property_mappings = data.authentik_property_mapping_provider_scope.default-scopes.ids
sub_mode = var.sub_mode
signing_key = var.oidc_signing_key
name = var.app_name
client_id = var.client_id
client_secret = var.client_secret
client_type = var.client_type
authorization_flow = data.authentik_flow.default-authorization-flow.id
authentication_flow = data.authentik_flow.default-authentication-flow.id
redirect_uris = var.redirect_uris
property_mappings = data.authentik_property_mapping_provider_scope.default-scopes.ids
sub_mode = var.sub_mode
signing_key = var.oidc_signing_key
access_code_validity = var.access_code_validity
access_token_validity = var.access_token_validity
}