Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Ipsilon: prepare config changes for staging

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2020-09-11 15:22:15 +02:00
parent f02d19dcb9
commit 70f71744fb
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

9
roles/ipsilon/templates/configuration.conf
View file

@ -5,15 +5,16 @@ fas FAS Proxy client user Agent=Fedora Ipsilon
fas FAS Insecure Auth=False fas FAS Insecure Auth=False
[info_config] [info_config]
{% if env == "production" %}
global enabled=fas global enabled=fas
fas FAS url=https://admin{{env_suffix}}.fedoraproject.org/accounts/ fas FAS url=https://admin{{env_suffix}}.fedoraproject.org/accounts/
fas FAS Proxy client user Agent=Fedora Ipsilon fas FAS Proxy client user Agent=Fedora Ipsilon
fas FAS Insecure Auth=False fas FAS Insecure Auth=False
fas Bind Username={{ ipsilon_fasinfo_username }} fas Bind Username={{ ipsilon_fasinfo_username }}
{% if env == "production" %}
fas Bind Password={{ ipsilon_fasinfo_prod_password }} fas Bind Password={{ ipsilon_fasinfo_prod_password }}
{% else %} {% else %}
fas Bind Password={{ ipsilon_fasinfo_stg_password }} global enabled=fasjson
fasjson fasjson url=https://fasjson{{env_suffix}}.fedoraproject.org/
{% endif %} {% endif %}
[authz_config] [authz_config]
@ -42,7 +43,11 @@ openidc policy url=https://fedoraproject.org/wiki/Legal:PrivacyPolicy
openidc tos url=https://fedoraproject.org/wiki/Legal:PrivacyPolicy openidc tos url=https://fedoraproject.org/wiki/Legal:PrivacyPolicy
openidc idp sig key id=20161031-sig openidc idp sig key id=20161031-sig
openidc allow dynamic client registration=False openidc allow dynamic client registration=False
{% if env == 'staging' %}
openidc default attribute mapping=[["email", "email"], ["username", "preferred_username"], ["timezone", "zoneinfo"], ["locale", "locale"], ["human_name","name"], ["agreements","agreements"], ["groups","groups"]]
{% else %}
openidc default attribute mapping=[["*", "*"], ["timezone", "zoneinfo"], ["_groups", "groups"], [["_extras", "cla"], "cla"], ["fullname", "name"], ["_username", "preferred_username"]] openidc default attribute mapping=[["*", "*"], ["timezone", "zoneinfo"], ["_groups", "groups"], [["_extras", "cla"], "cla"], ["fullname", "name"], ["_username", "preferred_username"]]
{% endif %}
openid endpoint url=https://id{{env_suffix}}.fedoraproject.org/openid/ openid endpoint url=https://id{{env_suffix}}.fedoraproject.org/openid/
openid identity url template=http://%(username)s.id{{env_suffix}}.fedoraproject.org/ openid identity url template=http://%(username)s.id{{env_suffix}}.fedoraproject.org/