Add experimental ops file for shadow user creation

cloudfoundry · Jan 9, 2025 · 189d743 · 189d743
1 parent 0d9548c
commit 189d743
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/operations/experimental/enable-shadow-user-creation-by-org-managers.yml b/operations/experimental/enable-shadow-user-creation-by-org-managers.yml
@@ -0,0 +1,24 @@
+---
+- type: replace
+  path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/allow_user_creation_by_org_manager?
+  value: true
+
+- type: replace
+  path: /instance_groups/name=uaa/jobs/name=uaa/properties/uaa/clients/cloud_controller_shadow_user_creation?
+  value:
+    authorities: scim.create
+    authorized-grant-types: client_credentials
+    override: true
+    scope: uaa.none
+    secret: "((uaa_clients_cloud_controller_shadow_user_creation_secret))"
+
+- type: replace
+  path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/uaa/clients/cloud_controller_shadow_user_creation?
+  value:
+    secret: "((uaa_clients_cloud_controller_shadow_user_creation_secret))"
+
+- type: replace
+  path: /variables/-
+  value:
+    name: uaa_clients_cloud_controller_shadow_user_creation_secret
+    type: password