fix
This commit is contained in:
@@ -1,36 +1,36 @@
|
||||
locals {
|
||||
app-name = var.component == var.instance ? var.instance : format("%s-%s", var.component, var.instance)
|
||||
main-group = format("app-%s", local.app-name)
|
||||
app_name = var.component == var.instance ? var.instance : format("%s-%s", var.component, var.instance)
|
||||
main-group = format("app-%s", local.app_name)
|
||||
}
|
||||
data "authentik_group" "akadmin" {
|
||||
name = "authentik Admins"
|
||||
}
|
||||
resource "authentik_group" "groups" {
|
||||
name = local.main-group
|
||||
attributes = jsonencode({"${local.app-name}" = true})
|
||||
attributes = jsonencode({"${local.app_name}" = true})
|
||||
}
|
||||
|
||||
resource "authentik_group" "subgroup" {
|
||||
count = length(var.sub-groups)
|
||||
name = format("%s-%s", local.app-name, var.sub-groups[count.index])
|
||||
name = format("%s-%s", local.app_name, var.sub-groups[count.index])
|
||||
parent = authentik_group.groups.id
|
||||
}
|
||||
|
||||
resource "authentik_application" "prj_app" {
|
||||
name = "${var.instance}"
|
||||
slug = "${var.component}-${var.instance}"
|
||||
group = var.app-group
|
||||
group = var.app_group
|
||||
protocol_provider = var.protocol_provider
|
||||
backchannel_providers = var.backchannel_providers
|
||||
meta_launch_url = format("https://%s", var.dns-name)
|
||||
meta_icon = format("https://%s/%s", var.dns-name, var.icon)
|
||||
meta_launch_url = format("https://%s", var.dns_name)
|
||||
meta_icon = format("https://%s/%s", var.dns_name, var.icon)
|
||||
}
|
||||
|
||||
resource "authentik_policy_expression" "policy" {
|
||||
name = local.main-group
|
||||
expression = <<-EOF
|
||||
attr = request.user.group_attributes()
|
||||
return attr['${local.app-name}'] if '${local.app-name}' in attr else False
|
||||
return attr['${local.app_name}'] if '${local.app_name}' in attr else False
|
||||
EOF
|
||||
}
|
||||
|
||||
|
||||
@@ -7,14 +7,14 @@ variable "instance" {
|
||||
variable "icon" {
|
||||
type = string
|
||||
}
|
||||
variable "app-group" {
|
||||
variable "app_group" {
|
||||
type = string
|
||||
}
|
||||
variable "protocol_provider" {
|
||||
type = number
|
||||
default = null
|
||||
}
|
||||
variable "dns-name" {
|
||||
variable "dns_name" {
|
||||
type = string
|
||||
}
|
||||
variable "sub-groups" {
|
||||
|
||||
Reference in New Issue
Block a user