Added support for additional preauth options added in: rundeck/rundec…

…k#1883
voxpupuli · Nov 13, 2017 · 7d8c87c · 7d8c87c
1 parent 0ef1c02
commit 7d8c87c
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 3 deletions.
diff --git a/manifests/params.pp b/manifests/params.pp
@@ -288,9 +288,13 @@
   $gui_config = {}
 
   $preauthenticated_config = {
-    'enabled'       => false,
-    'attributeName' => 'REMOTE_USER_GROUPS',
-    'delimiter'     => ':',
+    'enabled'         => false,
+    'attributeName'   => 'REMOTE_USER_GROUPS',
+    'delimiter'       => ':',
+    'userNameHeader'  => 'X-Forwarded-Uuid',
+    'userRolesHeader' => 'X-Forwarded-Roles',
+    'redirectLogout'  => false,
+    'redirectUrl'     => '/oauth2/sign_in',
   }
 
   $quartz_job_threadcount = 10

diff --git a/spec/classes/config/global/rundeck_config_spec.rb b/spec/classes/config/global/rundeck_config_spec.rb
@@ -101,6 +101,10 @@
           rundeck.security.authorization.preauthenticated.enabled = "false"
           rundeck.security.authorization.preauthenticated.attributeName = "REMOTE_USER_GROUPS"
           rundeck.security.authorization.preauthenticated.delimiter = ":"
+          rundeck.security.authorization.preauthenticated.userNameHeader = "X-Forwarded-Uuid"
+          rundeck.security.authorization.preauthenticated.userRolesHeader = "X-Forwarded-Roles"
+          rundeck.security.authorization.preauthenticated.redirectLogout = "false"
+          rundeck.security.authorization.preauthenticated.redirectUrl = "/oauth2/sign_in"
 
         CONFIG
 

diff --git a/templates/rundeck-config.erb b/templates/rundeck-config.erb
@@ -76,6 +76,10 @@ rundeck.storage.provider."1".path = "/"
 rundeck.security.authorization.preauthenticated.enabled = "<%= @preauthenticated_config['enabled']%>"
 rundeck.security.authorization.preauthenticated.attributeName = "<%= @preauthenticated_config['attributeName']%>"
 rundeck.security.authorization.preauthenticated.delimiter = "<%= @preauthenticated_config['delimiter']%>"
+rundeck.security.authorization.preauthenticated.userNameHeader = "<%= @preauthenticated_config['userNameHeader']%>"
+rundeck.security.authorization.preauthenticated.userRolesHeader = "<%= @preauthenticated_config['userRolesHeader']%>"
+rundeck.security.authorization.preauthenticated.redirectLogout = "<%= @preauthenticated_config['redirectLogout']%>"
+rundeck.security.authorization.preauthenticated.redirectUrl = "<%= @preauthenticated_config['redirectUrl']%>"
 
 <%- @gui_config.sort.each do |k,v| -%>
 <%= k %> = "<%= v %>"