Set up synchronized groups as a code (GKE & Google Workspace)

[petrmvala]

[Enhancement proposal]

We are running SCIM Bridge in GKE with Google Workspace as Identity Provider.

Currently, when I sign into the SCIM Bridge I can see the Workspace group selector that allows me to select which Google Groups are going to be synchronized.

I would love to have this selection defined as code. For example I could have a yaml like this:

google_groups:
  - foo@bar.com
  - baz@bar.com
  - ...

This yaml file could be mounted into the SCIM bridge as a volume and an environment variable OP_WORKSPACE_GROUPS would point to it's path. In the SCIM bridge UI I would just grey out the Workspace groups and show a notice that it is managed as code (or not, that is my subjective preference).

This file could even enable for other groups than just google in case this concept holds for other IdPs too.