Allow to configure OIDC providers from environment variables

[subuk]

Hello!

Small change to allow to specify OIDC providers configuration from environment variables

Docs pr: https://github.com/semaphoreui/semaphore-docs/pull/51/

[fiftin]

Hi, I think OIDC name more suitable than num.

[subuk]

Okay, let me rename it

[CFenner]

I really would like to have this feature, that would simplify my docker compose configuration! 👍

What about implementing it like Paperless did it with a single variable that takes the oidc config in json format. That way it could be more flexible and reduces the number of variables.

[philenz]

Can someone please merge this pull request? Then I can easily add an azure oidc provider to my kubernetes deployment, rather than trying to hack /etc/semaphore/config.yaml at startup time!!! :-)

[balpoint]

Hi all, any ETA for merging this PR, would really like to not have to use the config.json haxx for my docker deployment.

[e36Alex]

Any news on this topic?

[fiftin]

@e36Alex Will me in 2.13.

[gaspode]

If I stare at this page, will it make the feature appear more quickly? :D

[e36Alex]

Any news on this topic?

[Skyfay]

Any news?

[fiftin]

@mgukov Could you rewrite this feature in Go? We need so support the environment variables like SEMAPHORE_OIDC_github_DISPLAY_NAME.

[mgukov]

Added the ability to configure OIDC providers from environment variable SEMAPHORE_OIDC_PROVIDERS in JSON format.

SEMAPHORE_OIDC_PROVIDERS={"google": {...}, "github":{...}}

[e36Alex]

Thanks for adding this feature!

Is there any more documentation how to use it in detail?

[agiehoff]

Found it here: https://docs.semaphoreui.com/administration-guide/openid/authentik/

[Skyfay]

Found it here: https://docs.semaphoreui.com/administration-guide/openid/authentik/

But thats not for environment variables...

[agiehoff]

I could use it with litte adjustment in my docker-compose.yml and it works fine:

SEMAPHORE_OIDC_PROVIDERS: '{ "authentik": { "display_name": "Sign in with Authentik", "provider_url": "https://authentik.example.com/application/o//", "client_id": "", "client_secret": "", "redirect_url": "https://semaphore.example.com/api/auth/oidc/authentik/redirect/", "scopes": ["openid", "profile", "email"], "username_claim": "preferred_username", "name_claim": "preferred_username" }' }

[Skyfay]

Ah, I see the implementation is a bit strange.