welcome: init group memberships for first create (#115)
* rename createAdminAccount to createAccount
* welcome: call memberships init on first user
* auth: add http endpoints to allowed return addresses
* memberships: make init user member of groups as well
---------
Co-authored-by: Giorgi Lekveishvili <lekva@gl-mbp-m1-max.local>
diff --git a/core/installer/values-tmpl/welcome.cue b/core/installer/values-tmpl/welcome.cue
index 9ec17bc..f94a77f 100644
--- a/core/installer/values-tmpl/welcome.cue
+++ b/core/installer/values-tmpl/welcome.cue
@@ -5,8 +5,6 @@
input: {
repoAddr: string
sshPrivateKey: string
- createAccountAddr: string
- loginAddr: string
}
name: "welcome"
@@ -40,6 +38,7 @@
sshPrivateKey: base64.Encode(null, input.sshPrivateKey)
createAccountAddr: "http://api.\(global.namespacePrefix)core-auth.svc.cluster.local/identities"
loginAddr: "https://accounts-ui.\(global.domain)"
+ membershipsInitAddr: "http://memberships.\(global.namespacePrefix)core-auth-memberships.svc.cluster.local/api/init"
ingress: {
className: _ingressPublic
domain: "welcome.\(global.domain)"