fix: 🐛 enable admin group on harbor oidc

cloud-pi-native · Oct 17, 2023 · 8a4dc61 · 8a4dc61
1 parent cdadcb1
commit 8a4dc61
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/roles/harbor/tasks/main.yaml b/roles/harbor/tasks/main.yaml
@@ -87,15 +87,15 @@
     harbor_config:
       "auth_mode": "oidc_auth"
       "notification_enable": true
-      "oidc_admin_group": "admin"
+      "oidc_admin_group": "/admin"
       "oidc_auto_onboard": true
       "oidc_client_id": "{{ harbor_secret.resources[0].data.CLIENT_ID | b64decode }}"
       "oidc_endpoint": "https://{{ keycloak_domain }}/realms/dso"
       "oidc_extra_redirect_parms": "{}"
       "oidc_group_filter": ""
       "oidc_groups_claim": "groups"
       "oidc_name": "keycloak"
-      "oidc_scope": "openid"
+      "oidc_scope": "openid,generic"
       "oidc_user_claim": "email"
       "oidc_verify_cert": "{{ dsc.exposedCA.type == 'none' }}"
       "project_creation_restriction": "adminonly"