Skip to content

Commit 7cbd76c

Browse files
committed
changes from feedback
1 parent ddea680 commit 7cbd76c

File tree

3 files changed

+11
-5
lines changed

3 files changed

+11
-5
lines changed

docs/admin/auth.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -315,6 +315,12 @@ OIDC provider will be added to the `myCoderGroupName` group in Coder.
315315
[azure-gids]:
316316
https://github.com/MicrosoftDocs/azure-docs/issues/59766#issuecomment-664387195
317317

318+
### Group allowlist
319+
320+
You can limit which groups from your identity provider can log in to Coder with [CODER_OIDC_ALLOWED_GROUPS](https://coder.com/docs/v2/latest/cli/server#--oidc-allowed-groups). Users who are not in a matching group will see the following error:
321+
322+
![Unauthorized group error](../images/admin/group-allowlist.png)
323+
318324
### Troubleshooting
319325

320326
Some common issues when enabling group sync.

docs/changelogs/v2.5.0.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,23 @@
99
![External auth settings](https://gist.github.com/assets/22407953/99252719-7255-426e-ba88-55d08dd04586)
1010
- Allow auditors to read template insights (#10860) (@johnstcn)
1111
- Add support for custom permissions in Helm chart `rbac.yaml` file (#10590) (@lbi22)
12-
- Add `workspace_id`, `owner_name`` to agent manifest (#10199) (@szab100)
12+
- Add `workspace_id`, `owner_name` to agent manifest (#10199) (@szab100)
1313
- Allow identity provider to return single string for roles/groups claim (#10993) (@Emyrk)
1414
- Add endpoints to list all auth-ed external apps (#10944) (@Emyrk)
1515
- Support v2 Tailnet API in AGPL coordinator (#11010) (@spikecurtis)
1616
- Dormant workspaces now appear in the default workspaces list (#11053) (@sreya)
1717
- Include server agent API version in buildinfo (#11057) (@spikecurtis)
1818
- Restart stopped workspaces on `coder ssh` command (#11050) (@Emyrk)
19-
- Add group allowlist for oidc (#11070) (@Emyrk)
19+
- You can now specify an [allowlist for OIDC Groups](https://coder.com/docs/v2/latest/admin/auth#group-allowlist) (#11070) (@Emyrk)
2020
- Display 'Deprecated' warning for agents using old API version (#11058) (@spikecurtis)
21-
- Add support for `coder_env` resource to set environment variables within modules (#11102) (@mafredri)
21+
- Add support for `coder_env` resource to set environment variables within a workspace (#11102) (@mafredri)
2222
- Handle session signals (#10842) (@mafredri)
2323
- Allow specifying names of provisioner daemons (#11077) (@johnstcn)
2424
- Preserve old agent logs (#10776) (@ammario)
2525
- Store workspace proxy version in the database (#10790) (@johnstcn)
2626
- Add `last_seen_at` and version to provisioner_daemons table (#11033) (@johnstcn)
2727
- New layout for web-based template editor (#10912) (@BrunoQuaresma)
28+
![Template editor layout](https://gist.github.com/assets/22407953/0351f0bd-6872-4186-a704-a403048e5758)
2829
- Add `arm64` and `amd64` portable binaries to `winget` (#11030) (@matifali)
2930
- Add claims to oauth link in db for debug (#10827) (@Emyrk)
3031
- Change login screen layout (#10768) (@BrunoQuaresma)
@@ -70,15 +71,14 @@
7071
- Display app templates correctly in build preview (#10994) (@Kira-Pilot)
7172
- Redirect unauthorized git users to login screen (#10995) (@Kira-Pilot)
7273
- Use unique workspace owners over unique users (#11044) (@f0ssel)
73-
- Stop updating agent stats from deleted workspaces (#11026) (@f0ssel)
74+
- Avoid updating agent stats from deleted workspaces (#11026) (@f0ssel)
7475
- Track JetBrains connections (#10968) (@code-asher)
7576
- Handle no memory limit in `coder stat mem` (#11107) (@f0ssel)
7677
- Provide helpful error when no login url specified (#11110) (@f0ssel)
7778
- Return 403 when rebuilding workspace with require_active_version (#11114) (@sreya)
7879
- Use provisionerd context when failing job on canceled acquire (#11118) (@spikecurtis)
7980
- Ensure we are talking to coder on first user check (#11130) (@f0ssel)
8081
- Prevent logging error for query cancellation in `watchWorkspaceAgentMetadata` (#10843) (@mafredri)
81-
- Keep workspace agent connection open after dial context (#10863) (@mafredri)
8282
- Fix a broken link (#10783) (@matifali)
8383
- Disable CODER_DERP_SERVER_STUN_ADDRESSES correctly (#10840) (@strike)
8484
- Remove anchor links from headings in admin/healthcheck.md (#10975) (@johnstcn)

docs/images/admin/group-allowlist.png

25.6 KB
Loading

0 commit comments

Comments
 (0)