From 4638c72a111a8a7c842d33dca2315f624b9e5fc7 Mon Sep 17 00:00:00 2001
From: Thomas Stocker <thomas.stocker.pro@gmail.com>
Date: Tue, 4 Nov 2025 11:18:56 +0100
Subject: [PATCH] feat: add saml config only if one env var is set

Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
---
 entrypoint.sh | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/entrypoint.sh b/entrypoint.sh
index a08ddc029..56457d57f 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -24,12 +24,6 @@ unit:
     export-timeout: ${TRACING_EXPORT_TIMEOUT:-30}
     max-queue-size: ${TRACING_MAX_QUEUE_SIZE:-2048}
 
-saml:
-  session-duration: ${SAML_SESSION_DURATION:-604800}
-  cleanup-interval-seconds: ${SAML_CLEANUP_INTERVAL_SECONDS:-0}
-  certificate: "${SAML_CERTIFICATE:-}"
-  private-key: "${SAML_PRIVATE_KEY:-}"
-
 probod:
   base-url: "${PROBOD_BASE_URL:-http://localhost:8080}"
   encryption-key: "${PROBOD_ENCRYPTION_KEY:?PROBOD_ENCRYPTION_KEY is required}"
@@ -126,6 +120,18 @@ EOF
 EOF
   fi
 
+  # Add SAML config if any SAML variable is configured
+  if [ -n "$SAML_SESSION_DURATION" ] || [ -n "$SAML_CLEANUP_INTERVAL_SECONDS" ] || [ -n "$SAML_CERTIFICATE" ] || [ -n "$SAML_PRIVATE_KEY" ]; then
+    cat >> "$CONFIG_FILE" <<EOF
+
+saml:
+  session-duration: ${SAML_SESSION_DURATION:-604800}
+  cleanup-interval-seconds: ${SAML_CLEANUP_INTERVAL_SECONDS:-0}
+  certificate: "${SAML_CERTIFICATE:-}"
+  private-key: "${SAML_PRIVATE_KEY:-}"
+EOF
+  fi
+
   echo "Configuration file generated at: $CONFIG_FILE"
 fi