templates/composer: Parametrize tenants in acl

This will allow us to specify tenants in the acl per namespace.
This commit is contained in:
Sanne Raymaekers 2022-03-31 13:21:56 +02:00
parent ef87c917d5
commit 02debc0cda

View file

@ -200,9 +200,9 @@ objects:
data:
acl.yml: |
- claim: rh-org-id
pattern: ^(15842261|15877963|15885990)$
pattern: ^(${ACL_ORG_ID_TENANTS})$
- claim: account_id
pattern: ^(15842261)$
pattern: ^(${ACL_ACCOUNT_ID_TENANTS})$
osbuild-composer.toml: |
log_level = "info"
[koji]
@ -347,6 +347,12 @@ parameters:
name: COMPOSER_CONFIG_BUCKET_NAME
required: true
value: "imagebuilder.service.staging"
- description: Allowed tenants based on org id
name: ACL_ORG_ID_TENANTS
value: "15842261|15877963|15885990"
- description: Allowed tenants based on account id
name: ACL_ACCOUNT_ID_TENANTS
value: "15842261"
- description: composer-api port
name: COMPOSER_API_PORT
required: true