Added OIDC workflow and Helm Chart

2026-10-07 14:22:37 +01:00
1 parent 984c7083a1
commit 7afdc4be97
@@ -0,0 +1,88 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "type": "object",
+  "required": ["publicUrl", "secretName", "instanceConfig"],
+  "properties": {
+    "image": {
+      "type": "object",
+      "required": ["repository"],
+      "properties": {
+        "repository": {"type": "string", "minLength": 1},
+        "tag": {"type": "string"},
+        "pullPolicy": {"enum": ["Always", "IfNotPresent", "Never"]}
+      }
+    },
+    "publicUrl": {"type": "string", "pattern": "^https?://[^/\\s]+/?$"},
+    "secretName": {"type": "string", "minLength": 1},
+    "extraSecretNames": {"type": "array", "items": {"type": "string", "minLength": 1}},
+    "replicaCount": {"type": "integer", "minimum": 1},
+    "role": {"enum": ["all", "web", "worker"]},
+    "logLevel": {"type": "string"},
+    "allowDisableAll": {"type": "boolean"},
+    "cloudSqlProxy": {
+      "type": "object",
+      "properties": {
+        "enabled": {"type": "boolean"},
+        "instanceConnectionName": {"type": "string"},
+        "port": {"type": "integer", "minimum": 1, "maximum": 65535}
+      }
+    },
+    "instanceConfig": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "auth": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "password_login": {"type": "boolean"},
+            "bootstrap_admin": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["usernames"],
+              "properties": {
+                "usernames": {
+                  "type": "array",
+                  "minItems": 1,
+                  "uniqueItems": true,
+                  "items": {"type": "string", "pattern": "^[a-z0-9._-]{3,64}$"}
+                }
+              }
+            }
+          }
+        },
+        "oidc": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["issuer", "client_id"],
+          "properties": {
+            "issuer": {"type": "string", "pattern": "^https://[^\\s]+$"},
+            "client_id": {"type": "string", "minLength": 1},
+            "scopes": {"type": "array", "items": {"type": "string"}, "contains": {"const": "openid"}},
+            "groups_claim": {"type": "string", "minLength": 1},
+            "groups_sources": {
+              "type": "array",
+              "minItems": 1,
+              "items": {"enum": ["id_token", "userinfo"]}
+            }
+          }
+        },
+        "instance_admin_groups": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+        "workspaces": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["key", "name", "admin_groups"],
+            "properties": {
+              "key": {"type": "string", "pattern": "^[a-z0-9]([a-z0-9-]{1,62})[a-z0-9]$"},
+              "name": {"type": "string", "minLength": 1, "maxLength": 120},
+              "admin_groups": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+              "member_groups": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+            }
+          }
+        }
+      }
+    }
+  }
+}