This commit is contained in:
2024-05-17 12:58:30 +02:00
parent 6ffac4ac92
commit 1b2b9b8c2b
4 changed files with 49 additions and 1 deletions

View File

@@ -43,6 +43,27 @@ resource "random_password" "ADM_PASS" {
special = false
}
locals {
sso_config = {
"${var.sso.name}" = {
"ssoprotocol" ="oauth"
"apptype" = "oauth"
"send_headers" = "1"
"send_body" = "0"
"send_state" = 1
"show_on_login_page" = 1
"appId" = "vynil"
"scope" = "email openid profile"
"username_attr" = "preferred_username"
"clientid" = module.oauth2.client_id
"clientsecret" = module.oauth2.client_secret
"redirecturi" = "https://${local.dns_name}"
"authorizeurl" = module.oauth2.sso_authorize_url
"accesstokenurl" = module.oauth2.sso_token_url
"resourceownerdetailsurl" = module.oauth2.sso_userinfo_url
}
}
}
resource "kubectl_manifest" "secret" {
yaml_body = <<-EOF
apiVersion: v1
@@ -63,6 +84,7 @@ resource "kubectl_manifest" "secret" {
WORDPRESS_DB_PASSWORD: "${random_password.mysql_comp_pass.result}"
WORDPRESS_ADMIN_NAME: "${var.config.admin_name}"
WORDPRESS_ADMIN_PASSWORD: "${random_password.ADM_PASS.result}"
WORDPRESS_SSO_CONFIG: "${jsonencode(local.sso_config)}"
EOF
}