What this does

With OIDC group sync, you can now have Coder automatically create the missing groups.

Closes #8214

Config options

CODER_OIDC_GROUP_AUTO_CREATE=true

This turns on the feature. By default groups are not created (previous behavior).

CODER_OIDC_GROUP_REGEX_FILTER=.*

This allow filtering out groups after the group rename mapping is applied. This is added because if groups are auto created, it is reasonable to assume users might want to omit some groups. A regex pattern does not cover all cases, but is a common filter method in OIDC providers.

Note that this filter can and should be applied in the OIDC provider. So supporting extensive group filtering options should not be done in Coder.

Group Changes

I added a source column on Groups to tell the UI/User where the group came from. Right now the options are user for user created groups, and oidc for groups created by the OIDC group sync.

I think this could be helpful for anyone managing their coder instance wondering where these groups come from. I am not adding this in the UI atm since this PR size is already quite large.