Help with Semaphore + Azure AD

[chwiee]

Question

Hello everyone,

I am running semaphore on my Kubernetes Cluster with this Helm Chart - https://artifacthub.io/packages/helm/semaphoreui/semaphore in semaphore-16.0.2 chart version

With this values:
`replicasCount: 1

image:
repository:
tag: latest
pullPolicy: IfNotPresent

serviceAccount:
create: true
name: "semaphore-sa"

ingress:
enabled: true
hosts:

• host: semaphore.mydomain.com
  paths:
  • path: /
    pathType: Prefix

admin:
create: true
email: admin@mydomain.com
username: local-admin
password: password123

database:
type: mysql
usernameFromSecret: false
host: rds-url
port: 3306
name: "semaphore"
username: "dbuser"
password: "dbpass"

persistence:
enabled: false

general:
useRemoteRunner: false

oidc:
enable: true
providers:
azuread:
display_name: Login with Azure AD
icon: microsoft-azure
color: blue
provider_url: https://login.microsoftonline.com/<tenant_id>/v2.0
redirect_url: http://semaphore.mydomain.com/api/auth/oidc/azuread/redirect
client_id: <>
client_secret: <>
username_claim: preferred_username
name_clain: name
`
I couldn’t find any information in Semaphore’s official documentation about how to restrict access to specific Active Directory groups or how to control group-based permissions (such as user and admin roles) through Helm values. I’d like to understand how to properly configure these limitations during installation or updates.

Related to

No response