infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Ipsilon: automatically load the SAML2 metadata for PDC in prod as well

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2023-04-20 14:42:45 +02:00
parent 2aa3bc6343
commit 32938ffc64
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/ipsilon/templates/saml2_data
View file

@ -17,7 +17,7 @@ aws metadata = <?xml version="1.0"?><EntityDescriptor xmlns="urn:oasis:names:tc:
pdcprod id = https://pdc.fedoraproject.org/saml2
pdcprod type = SP
pdcprod name = PDC
pdcprod metadata=<?xml version='1.0' encoding='UTF-8'?><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" cacheDuration="P7D" entityID="https://pdc.fedoraproject.org/saml2"> <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate></ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://pdc.fedoraproject.org/saml2/logout"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://pdc.fedoraproject.org/saml2/postResponse" index="0"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> </md:SPSSODescriptor></md:EntityDescriptor>
pdcprod metadata = {{ pdc_metadata.content | replace("\n", " ") }}
beaker id = https://beaker.qa.fedoraproject.org/saml2