configure scopes

small-hack · Feb 18, 2024 · c279a94 · c279a94
1 parent 28fab25
commit c279a94
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 3 deletions.
diff --git a/charts/headscale/Chart.yaml b/charts/headscale/Chart.yaml
@@ -3,7 +3,7 @@ name: headscale
 description: Install headscale with helm
 
 type: application
-version: "0.0.10"
+version: "0.0.11"
 appVersion: "0.22.3"
 
 maintainers:

diff --git a/charts/headscale/README.md b/charts/headscale/README.md
@@ -1,6 +1,6 @@
 # headscale
 
-![Version: 0.0.10](https://img.shields.io/badge/Version-0.0.10-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.22.3](https://img.shields.io/badge/AppVersion-0.22.3-informational?style=flat-square)
+![Version: 0.0.11](https://img.shields.io/badge/Version-0.0.11-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.22.3](https://img.shields.io/badge/AppVersion-0.22.3-informational?style=flat-square)
 
 Install headscale with helm
 
@@ -49,6 +49,9 @@ Install headscale with helm
 | oidc.client_id | string | `"your-oidc-client-id"` |  |
 | oidc.client_secret | string | `"your-oidc-client-secret"` |  |
 | oidc.issuer | string | `"https://your-oidc.issuer.com/path"` |  |
+| oidc.scope[0] | string | `"openid"` |  |
+| oidc.scope[1] | string | `"profile"` |  |
+| oidc.scope[2] | string | `"email"` |  |
 | persistence.accessMode | string | `"ReadWriteOnce"` |  |
 | persistence.existingClaim | string | `""` |  |
 | persistence.resources.requests.storage | string | `"1Gi"` |  |

diff --git a/charts/headscale/templates/configmap.yaml b/charts/headscale/templates/configmap.yaml
@@ -36,7 +36,7 @@ data:
       issuer: {{ .Values.oidc.issuer }}
       client_id: {{ .Values.oidc.client_id }}
       client_secret: {{ .Values.oidc.client_secret }} 
-      scope: ["openid", "profile", "email", "custom"]
+      scope: {{ .Values.oidc.scope }}
 
       # Alternatively, set `client_secret_path` to read the secret from the file.
       # It resolves environment variables, making integration to systemd's

diff --git a/charts/headscale/values.yaml b/charts/headscale/values.yaml
@@ -17,6 +17,7 @@ oidc:
   issuer: "https://your-oidc.issuer.com/path"
   client_id: "your-oidc-client-id"
   client_secret: "your-oidc-client-secret"
+  scope: ["openid", "profile", "email"]
 
 # Address to listen to / bind to on the server
 listen_addr: 0.0.0.0:8080