Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

[ipsilon] Remove PDC entries from SAML2 data files

Browse source 
Forgot to remove it from configuration. This should do the trick.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
This commit is contained in:
Michal Konecny 2024-08-01 13:22:21 +02:00
parent 3415ff33ff
commit 705a839a57
2 changed files with 0 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/ipsilon/templates/saml2_data
View file

@ -14,12 +14,6 @@ aws attribute mappings = [[["_extras", "awsroles"], "https://aws.amazon.com/SAML
aws metadata = <?xml version="1.0"?><EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="urn:amazon:webservices" validUntil="2018-06-06T00:00:00Z"> <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" WantAssertionsSigned="true"> <KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </KeyDescriptor> <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat> <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat> <AssertionConsumerService index="1" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://signin.aws.amazon.com/saml"/> <AttributeConsumingService index="1"> <ServiceName xml:lang="en">AWS Management Console Single Sign-On</ServiceName> <RequestedAttribute isRequired="true" Name="https://aws.amazon.com/SAML/Attributes/Role" FriendlyName="RoleEntitlement"/> <RequestedAttribute isRequired="true" Name="https://aws.amazon.com/SAML/Attributes/RoleSessionName" FriendlyName="RoleSessionName"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" FriendlyName="eduPersonAffiliation"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.2" FriendlyName="eduPersonNickname"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.3" FriendlyName="eduPersonOrgDN"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.4" FriendlyName="eduPersonOrgUnitDN"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" FriendlyName="eduPersonPrimaryAffiliation"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" FriendlyName="eduPersonPrincipalName"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" FriendlyName="eduPersonEntitlement"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.8" FriendlyName="eduPersonPrimaryOrgUnitDN"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" FriendlyName="eduPersonScopedAffiliation"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" FriendlyName="eduPersonTargetedID"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" FriendlyName="eduPersonAssurance"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.2.1.2" FriendlyName="eduOrgHomePageURI"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.2.1.3" FriendlyName="eduOrgIdentityAuthNPolicyURI"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.2.1.4" FriendlyName="eduOrgLegalName"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.2.1.5" FriendlyName="eduOrgSuperiorURI"/> <RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.2.1.6" FriendlyName="eduOrgWhitePagesURI"/> <RequestedAttribute isRequired="false" Name="urn:oid:2.5.4.3" FriendlyName="cn"/> </AttributeConsumingService> </SPSSODescriptor> <Organization> <OrganizationName xml:lang="en">Amazon Web Services, Inc.</OrganizationName> <OrganizationDisplayName xml:lang="en">AWS</OrganizationDisplayName> <OrganizationURL xml:lang="en">https://aws.amazon.com</OrganizationURL> </Organization></EntityDescriptor>
pdcprod id = https://pdc.fedoraproject.org/saml2
pdcprod type = SP
pdcprod name = PDC
pdcprod metadata = {{ pdc_metadata.content | replace("\n", " ") }}
beaker id = https://beaker.qa.fedoraproject.org/saml2
beaker type = SP
beaker name = Beaker

5
roles/ipsilon/templates/saml2_data_stg
View file

@ -3,11 +3,6 @@ beakerstg type = SP
beakerstg name = Beaker STG
beakerstg metadata=<?xml version='1.0' encoding='UTF-8'?><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" cacheDuration="P7D" entityID="https://beaker.stg.fedoraproject.org/saml2"><md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><md:KeyDescriptor use="signing"><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://beaker.stg.fedoraproject.org/saml2/logout"/><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://beaker.stg.fedoraproject.org/saml2/logout"/><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://beaker.stg.fedoraproject.org/saml2/postResponse" index="0" isDefault="true"/><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://beaker.stg.fedoraproject.org/saml2/paosResponse" index="1"/><md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat></md:SPSSODescriptor></md:EntityDescriptor>
pdcstg id = https://pdc.stg.fedoraproject.org/saml2
pdcstg type = SP
pdcstg name = Product Definition Center STAGING
pdcstg metadata = {{ pdc_metadata.content | replace("\n", " ") }}
rhdev id = https://bzweb01-devel.app.eng.bne.redhat.com/saml2_metadata.cgi
rhdev type = SP
rhdev name = RH Development SP