Added access as invite API user

oharsta · oharsta · commit 78642aac5719 · 2025-05-12T14:54:23.000+02:00
diff --git a/environments/template/secrets/skeleton.yml b/environments/template/secrets/skeleton.yml
@@ -144,6 +144,7 @@ invite_manage_secret: secret
 invite_lifecycle_secret: "secret"
 invite_profile_secret: "secret"
 invite_sp_dashboard_secret: "secret"
+invite_access_secret: "secret"
 invite_private_key_pkcs8: |
   -----BEGIN PRIVATE KEY-----
   MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCfpYYMgKYDICkp
diff --git a/environments/vm/secrets/vm.yml b/environments/vm/secrets/vm.yml
@@ -290,6 +290,7 @@ invite_manage_secret: secret
 invite_lifecycle_secret: "secret"
 invite_profile_secret: "secret"
 invite_sp_dashboard_secret: "secret"
+invite_access_secret: "secret"
 invite_private_key_pkcs8: |
   -----BEGIN PRIVATE KEY-----
   MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCfpYYMgKYDICkp
diff --git a/roles/invite/templates/serverapplication.yml.j2 b/roles/invite/templates/serverapplication.yml.j2
@@ -158,6 +158,14 @@ external-api-configuration:
       applications:
         - manageId: {{ invite.sp_dashboard_manage_id }}
           manageType: SAML20_SP
+    -
+      username: {{ invite.access_user }}
+      password: "{{ invite.access_secret }}"
+      scopes:
+        - access
+      applications:
+        - manageId: {{ invite.access_manage_id }}
+          manageType: OIDC10_RP
 
 
 voot:
