From 6d3a53901d29e1d7d6d736618f276a76c4137584 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Mon, 2 Dec 2024 11:42:52 -0800
Subject: [PATCH] ipsilon: just copy the awx metadata in for now since get uri
 doesnt work for this

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/ipsilon/tasks/main.yml       | 10 ----------
 roles/ipsilon/templates/saml2_data |  3 +--
 2 files changed, 1 insertion(+), 12 deletions(-)

diff --git a/roles/ipsilon/tasks/main.yml b/roles/ipsilon/tasks/main.yml
index 336e44a433..2df6ace7a6 100644
--- a/roles/ipsilon/tasks/main.yml
+++ b/roles/ipsilon/tasks/main.yml
@@ -118,16 +118,6 @@
   notify:
   - restart apache
 
-- name: load the AWX SAML2 metadata that will be included in the configuration.conf file
-  uri:
-    url: https://awx.fedoraproject.org/sso/metadata/saml/
-    return_content: yes
-  register: awx_metadata
-  when: env == "production"
-  tags:
-  - ipsilon
-  - config
-
 - name: copy ipsilon admin configuration
   template:
     src: "configuration.conf"
diff --git a/roles/ipsilon/templates/saml2_data b/roles/ipsilon/templates/saml2_data
index 60b482609a..7a45f88a13 100644
--- a/roles/ipsilon/templates/saml2_data
+++ b/roles/ipsilon/templates/saml2_data
@@ -41,8 +41,7 @@ awx id = https://awx.fedoraproject.org/
 awx type = SP
 awx name = AWX
 awx Allowed Attributes = ["email", "_groups", "givenname", "surname"]
-awx metadata = {{ awx_metadata.content | replace("\n", " ") }}
-
+awx metadata = <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" cacheDuration="P10D" entityID="https://awx.fedoraproject.org/"> <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://awx.fedoraproject.org/sso/complete/saml/" index="1"/> </md:SPSSODescriptor> <md:Organization> <md:OrganizationName xml:lang="en-US">AWX</md:OrganizationName> <md:OrganizationDisplayName xml:lang="en-US">Ansible AWX</md:OrganizationDisplayName> <md:OrganizationURL xml:lang="en-US">https://awx.fedoraproject.org/</md:OrganizationURL> </md:Organization> <md:ContactPerson contactType="technical"> <md:GivenName>Fedora Infrastructure</md:GivenName> <md:EmailAddress>infrastructure@lists.fedoraproject.org</md:EmailAddress> </md:ContactPerson> <md:ContactPerson contactType="support"> <md:GivenName>Fedora Infrastructure</md:GivenName> <md:EmailAddress>infrastructure@lists.fedoraproject.org</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
 
 rhbzdev id = https://bugzilla.dev.redhat.com/saml2_metadata.cgi
 rhbzdev type = SP