unkin/terraform-rancher
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'Fix global role binding name to be RFC 1123 compliant' (#3) from benvin/rancher-grb-name into main
ci/woodpecker/push/apply Pipeline was successful
Details

Browse Source 
Reviewed-on: #3
This commit was merged in pull request #3.
This commit is contained in:
BenVincent
2026-07-18 22:59:02 +10:00
parent 1dc43580f6 f2f41fc1c0
commit 08fbc9b8ab
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/rancher/main.tf
+4 -1
View File
@@ -29,7 +29,10 @@ resource "rancher2_auth_config_keycloak_oidc" "this" {
resource "rancher2_global_role_binding" "group" { resource "rancher2_global_role_binding" "group" {
for_each = var.global_role_bindings for_each = var.global_role_bindings
name = "akgroup-${each.key}" # Binding name must be an RFC 1123 label (lowercase); the group name may be
# mixed-case (akP-*), so lowercase it here. The principal id keeps the original
# case to match the group.
name = "akgroup-${lower(each.key)}"
global_role_id = each.value.global_role_id global_role_id = each.value.global_role_id
group_principal_id = "keycloakoidc_group://${each.key}" group_principal_id = "keycloakoidc_group://${each.key}"