NIFI-14206 Add OIDC Groups Claim Env Variable to NiFi Registry Docker…

… Image (#9671) Signed-off-by: David Handermann <[email protected]>
apache · Jan 28, 2025 · cc270ff · cc270ff
1 parent 237fdab
commit cc270ff
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/nifi-registry/nifi-registry-core/nifi-registry-docker/dockerhub/README.md b/nifi-registry/nifi-registry-core/nifi-registry-docker/dockerhub/README.md
@@ -149,6 +149,7 @@ user with administrative privileges.
       -e NIFI_REGISTRY_SECURITY_USER_OIDC_PREFERRED_JWSALGORITHM=RS256 \
       -e NIFI_REGISTRY_SECURITY_USER_OIDC_ADDITIONAL_SCOPES=profile \
       -e NIFI_REGISTRY_SECURITY_USER_OIDC_CLAIM_IDENTIFYING_USER=preferred_username \
+      -e NIFI_REGISTRY_SECURITY_USER_OIDC_CLAIM_GROUPS=groups \
       -d \
       apache/nifi-registry:latest
 

diff --git a/nifi-registry/nifi-registry-core/nifi-registry-docker/dockerhub/sh/update_oidc_properties.sh b/nifi-registry/nifi-registry-core/nifi-registry-docker/dockerhub/sh/update_oidc_properties.sh
@@ -23,3 +23,4 @@ prop_replace 'nifi.registry.security.user.oidc.client.secret'
 prop_replace 'nifi.registry.security.user.oidc.preferred.jwsalgorithm'           "${NIFI_REGISTRY_SECURITY_USER_OIDC_PREFERRED_JWSALGORITHM}"
 prop_replace 'nifi.registry.security.user.oidc.additional.scopes'                "${NIFI_REGISTRY_SECURITY_USER_OIDC_ADDITIONAL_SCOPES}"
 prop_replace 'nifi.registry.security.user.oidc.claim.identifying.user'           "${NIFI_REGISTRY_SECURITY_USER_OIDC_CLAIM_IDENTIFYING_USER}"
+prop_replace 'nifi.registry.security.user.oidc.claim.groups'                     "${NIFI_REGISTRY_SECURITY_USER_OIDC_CLAIM_GROUPS}"