Spiked_Grape Comments - Answer Overflow

Topics

Spiked_Grape

•Created by Spiked_Grape on 12/10/2024 in #help

questions on coder module jfrog-oauth

I never got a reply back from Jfrog. We are using security groups for RBAC assigned to the roles versus managing individual user permissions is the limitation or not have the group scopes. The access token given by the oauth integration doesn't account for the role assignment made by the groups. So if the user isn't individually added to the role/permission in the artifactory project they don't have permissions within the cli in the coder workspace but they do have the permissions in the artifactory UI.

15 replies

•Created by Spiked_Grape on 12/10/2024 in #help

questions on coder module jfrog-oauth

with both of those values in the config file the jf cli worked as expected

15 replies

•Created by Spiked_Grape on 12/10/2024 in #help

questions on coder module jfrog-oauth

I was thinking maybe as part of the module there might be a way to generate a new token using the access token given by the app integration then add that to the jfrog config in the workspace. I was able to manually add a token generate via the artifactory UI under user profile new identity token and place it in the password of the jfrog config while leaving the oauth app accesstoken as access token in the config file in ~/.jfrog/<file name with conf v6 can't remember exact name>

15 replies

•Created by Spiked_Grape on 12/10/2024 in #help

questions on coder module jfrog-oauth

if the user creates a token under user profile it gives them the group scopes as well. I am only a project admin on the artifactory instance and not a instance admin so I am limiting on what I can do. So I don't think I will be allowed to use the other artifactory coder module that requires a admin token

15 replies

•Created by Spiked_Grape on 12/10/2024 in #help

questions on coder module jfrog-oauth

I think it only supports "applied-permissions/user"

15 replies

•Created by Spiked_Grape on 12/10/2024 in #help

questions on coder module jfrog-oauth

integrations-enabled: false # Default: false
integration-templates: # list of possible integrations to create
  - id: "1" # The id of the integration template, to save a reference back from the integration.
    name: "my integration" # The name of the integration as will appear in the UI when creating a new integration.
    redirect-uri: "https://my-jfrog-integrations.com/callback" # The redirect-uri that will direct users back to the integration client with the authorization code.
    scope: "applied-permissions/user" # Only this scope is currently supported.
    internal: false # Optional. Default false. Inidicates whether it's an internal template, meaning will not be returned to UI unless specifically asked to include internal templates.

https://jfrog.com/help/r/jfrog-installation-setup-documentation/supported-access-configurations

15 replies

•Created by Spiked_Grape on 12/10/2024 in #help

questions on coder module jfrog-oauth

Hi @Atif

15 replies

•Created by e1k on 11/13/2024 in #help

Code market place setup

@Phorcys recently after updating code-server all my extensions in the ide side panel show a yellow triangle saying this extension is not signed by the extension marketplace with the install button grayed out. Do you know if this is known issue or is fixed in a newer version of code marketplace? I think I am still on v2.1.0

36 replies

•Created by Spiked_Grape on 11/4/2024 in #help

Kasm template / module

We are following the enterprise desktop image and the kasm module etc. I say following because we just ripped out portions of the module due to airgapped environment. However, I am thinking that maybe for values need to added to this than are in the module https://www.kasmweb.com/kasmvnc/docs/latest/configuration.html

30 replies

•Created by Spiked_Grape on 11/4/2024 in #help

Kasm template / module

I can get to the kasmvnc ui on the path based like /apps/kasm or whatever but kasm isn't connected to the xfce desktop part

30 replies

•Created by Spiked_Grape on 11/4/2024 in #help

Kasm template / module

We have coder enterprise licenses but our environment's cybersecurity team won't let us use wildcards.

30 replies

•Created by Spiked_Grape on 11/4/2024 in #help

Kasm template / module

* I set

30 replies

•Created by Spiked_Grape on 11/4/2024 in #help

Kasm template / module

I said TUN and FUSE to true on envbox. Could that be a problem?

30 replies

•Created by Spiked_Grape on 11/4/2024 in #help

Kasm template / module

What should the settings in kasm be under websocket drop down?

30 replies

•Created by Spiked_Grape on 11/4/2024 in #help

Kasm template / module

There is just a red banner at the top of kasm that says failed to connect to server.

30 replies

•Created by Spiked_Grape on 11/4/2024 in #help

Kasm template / module

Also I am running in azure aks

30 replies

•Created by Spiked_Grape on 8/13/2024 in #help

template ci/cd pipeline enforcement

Ok thanks for the help

28 replies

•Created by Spiked_Grape on 9/15/2024 in #help

"workspace_owner_oidc_access_token"

I was just wondering in the description, for example of a dotfiles parameter, could you somehow say as example gitlab.mycorp.com/<current_user>/dotfiles.git https://coder.com/_next/image?url=https%3A%2F%2Fraw.githubusercontent.com%2Fcoder%2Fcoder%2Fmain%2Fdocs%2Fimages%2Fparameters.png&w=3840&q=100 as in where is enter a URL for a dotfile repo (optional) is shown here in this picture but you can see the owners username above. I tired to do it with coder_workspace_owner.me.name but it just displayed "default"

23 replies

•Created by Spiked_Grape on 9/15/2024 in #help

"workspace_owner_oidc_access_token"

how does the owner parameter get populated? By default it has the user creating the template selected. Could I get that somehow?

23 replies

•Created by Spiked_Grape on 9/15/2024 in #help

"workspace_owner_oidc_access_token"

ok thanks I will try some of these workarounds. Is there a way to get the users name in the coder parameters? I tried coder_workspace_owner.me.name but it just said default. I assuming because the template hasn't actually run yet. I am trying to fill out a default option or description of parameter that is a url of gitlab repo that includes the users name. Like a dotfiles repo in their own namespace.

23 replies