OIDC scope for mbs in staging.

roles/ipsilon/files/oidc_scopes/mbs.py

@@ -0,0 +1,14 @@
+from __future__ import absolute_import
+
+from ipsilon.providers.openidc.plugins.common import OpenidCExtensionBase
+
+
+class OpenidCExtension(OpenidCExtensionBase):
+    name = 'mbs'
+    display_name = 'Module Builds'
+    scopes = {
+        'https://mbs.fedoraproject.org/oidc/submit-build': {
+            'display_name': 'Permission to submit new module builds',
+            'claims': [],
+        },
+    }

roles/ipsilon/tasks/main.yml

@@ -36,6 +36,17 @@
   - ipsilon
   - ipsilon/oidc_scopes
 
+- name: Copy additional OpenID Connect scope registrations for staging
+  copy: src=oidc_scopes/{{item}}.py
+        dest=/usr/lib/python2.7/site-packages/ipsilon/providers/openidc/plugins/{{item}}.py
+        owner=root group=root mode=0644
+  with_items:
+  - mbs
+  when: env == 'staging'
+  tags:
+  - ipsilon
+  - ipsilon/oidc_scopes
+
 - name: Apply hotfix for taiga to get POST results
   copy: src=openid_server.py
         dest=/usr/lib/python2.7/site-packages/openid/server/server.py