From 3b21215d4d939db8251262ddc0389f575ffed45e Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Fri, 2 Feb 2018 17:04:05 +0000
Subject: [PATCH] Add OIDC scope for freshmaker (staging).

---
 roles/ipsilon/files/oidc_scopes/freshmaker.py | 14 ++++++++++++++
 roles/ipsilon/tasks/main.yml                  |  3 ++-
 roles/ipsilon/templates/configuration.conf    |  2 +-
 3 files changed, 17 insertions(+), 2 deletions(-)
 create mode 100644 roles/ipsilon/files/oidc_scopes/freshmaker.py

diff --git a/roles/ipsilon/files/oidc_scopes/freshmaker.py b/roles/ipsilon/files/oidc_scopes/freshmaker.py
new file mode 100644
index 0000000000..beb5d1108a
--- /dev/null
+++ b/roles/ipsilon/files/oidc_scopes/freshmaker.py
@@ -0,0 +1,14 @@
+from __future__ import absolute_import
+
+from ipsilon.providers.openidc.plugins.common import OpenidCExtensionBase
+
+
+class OpenidCExtension(OpenidCExtensionBase):
+    name = 'freshmaker'
+    display_name = 'Freshmaker Rebuilds'
+    scopes = {
+        'https://pagure.io/freshmaker/manual-trigger': {
+            'display_name': 'Permission to submit manual triggers of rebuilds',
+            'claims': [],
+        },
+    }
diff --git a/roles/ipsilon/tasks/main.yml b/roles/ipsilon/tasks/main.yml
index eefec73036..ede0c4205d 100644
--- a/roles/ipsilon/tasks/main.yml
+++ b/roles/ipsilon/tasks/main.yml
@@ -59,7 +59,8 @@
         dest=/usr/lib/python2.7/site-packages/ipsilon/providers/openidc/plugins/{{item}}.py
         owner=root group=root mode=0644
   when: env == "staging"
-  with_items: []
+  with_items:
+  - freshmaker
   notify:
   - reload apache
   tags:
diff --git a/roles/ipsilon/templates/configuration.conf b/roles/ipsilon/templates/configuration.conf
index 3cc50dbc29..0ad1bb7bbd 100644
--- a/roles/ipsilon/templates/configuration.conf
+++ b/roles/ipsilon/templates/configuration.conf
@@ -25,7 +25,7 @@ global enabled=persona,openid,saml2,openidc
 {% if env == "production" %}
 openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki
 {% else %}
-openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki
+openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki,freshmaker
 {% endif %}
 
 {% if env == 'staging' %}