1Password / scim-examples

1Password SCIM Bridge deployment examples
https://support.1password.com/scim/
MIT License
147 stars 137 forks source link

Move Azure Container Apps to mounted secrets for all deployments #299

Closed black-bryan closed 5 months ago

black-bryan commented 5 months ago

Two main aspects of this PR:

  1. Alignment of using mounted secrets for all deployment paths within Azure Container Apps.
  2. Advanced and customization details to simplify the Azure Container Apps deployment for different use cases.

The use of mounted secrets, needs to align with internal changes to our support guide for deploying on Azure Container Apps. This PR will need to be merged at the same time as the internal changes. Certain aspects of the default azure-container-apps/aca-op-scim-bridge.yaml align to the secret not being passed in base64, thus simplifying deployment.

This change to the mounted secrets involves having a separate .yaml file, azure-container-apps/google-workspace/aca-gw-op-scim-bridge.yaml to apply overtop of the existing deployment to support the Google Workspace secrets.

Pulling the advanced configuration options out of the default README.md into a separate file allows for better external linking to sections, previously held in collapsed sections.

Testing: any commands that reference curl/Invoke-RestMethod to pass the yaml file to use the --yaml at /dev/stdin will need to be updated to reference either the branch path of the updated yaml's or the file directly instead of /dev/stdin