You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
Currently we use a combination of admin UINs defined in environment variables and in Authman group descriptions to determine which members should be admins. We would like to make this system more flexible to allow these admins to be managed independently for each set of groups and updated at any point.
We would also like to have the Groups BB manage periodically synchronizing the groups with Authman internally rather than relying on an external task to call an API.
We would also like to ensure that when these admins are updated, the changes are reflected the next time the group is synchronized.
Describe the solution you'd like
A clear and concise description of what you want to happen.
We should create a new collection of Authman group stems that will be synchronized which include any admins for these groups. We should expose admin APIs to add/update/delete documents in this collection.
When group synchronization occurs, we should check for any changes to the documents in this collection and ensure that the group admins are updated appropriately to match any added or removed admins.
We should also create a timer that calls the SynchronizeAuthman function periodically so we can remove the external task calling the API to trigger synchronization.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
One alternative discussed was to create an admin API which allows the admins of each group to be set. This is somewhat less convenient as it would require this data to be manually added to each group rather than automatically set when the group is created and first synchronized. Note that we may still want a similar API in the future to allow the default admins created by this process to add other admins to specific groups.
The text was updated successfully, but these errors were encountered:
* add managed group config collection/apis
* fix docs
* add timer for managed group sync
* add admins defined in config to existing groups
* update docs
* fix timer period (minutes)
* debug
* use managed group configs for sync authman APIs
* update secrets baseline
* standardize success responses
Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
Currently we use a combination of admin UINs defined in environment variables and in Authman group descriptions to determine which members should be admins. We would like to make this system more flexible to allow these admins to be managed independently for each set of groups and updated at any point.
We would also like to have the Groups BB manage periodically synchronizing the groups with Authman internally rather than relying on an external task to call an API.
We would also like to ensure that when these admins are updated, the changes are reflected the next time the group is synchronized.
Describe the solution you'd like
A clear and concise description of what you want to happen.
SynchronizeAuthman
function periodically so we can remove the external task calling the API to trigger synchronization.Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
One alternative discussed was to create an admin API which allows the admins of each group to be set. This is somewhat less convenient as it would require this data to be manually added to each group rather than automatically set when the group is created and first synchronized. Note that we may still want a similar API in the future to allow the default admins created by this process to add other admins to specific groups.
The text was updated successfully, but these errors were encountered: