infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

zabbix: Zabbix production configuration

Browse source
This commit is contained in:
David Kirwan 2023-11-09 12:54:58 +00:00
parent 94478cc88b
commit 9c3a24e79a
No known key found for this signature in database
GPG key ID: A5893AB6474AC37D
10 changed files with 70 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/ipsilon/templates/saml2_data
View file

@ -73,3 +73,8 @@ gitlab type = SP
gitlab name = gitlab.com
gitlab Allowed Attributes = ["email"]
gitlab metadata = <?xml version='1.0' encoding='UTF-8'?><md:EntityDescriptor ID='_1b989820-b3a1-4fda-bed3-39c77422a44e' entityID='https://gitlab.com/groups/fedora' xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' xmlns:saml='urn:oasis:names:tc:SAML:2.0:assertion'><md:SPSSODescriptor AuthnRequestsSigned='false' WantAssertionsSigned='false' protocolSupportEnumeration='urn:oasis:names:tc:SAML:2.0:protocol'><md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat><md:AssertionConsumerService Binding='urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' Location='https://gitlab.com/groups/fedora/-/saml/callback' index='0' isDefault='true'/><md:AttributeConsumingService index='1' isDefault='true'><md:ServiceName xml:lang='en'>Required attributes</md:ServiceName><md:RequestedAttribute FriendlyName='Email address' Name='email' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:basic' isRequired='false'/><md:RequestedAttribute FriendlyName='Full name' Name='name' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:basic' isRequired='false'/><md:RequestedAttribute FriendlyName='Given name' Name='first_name' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:basic' isRequired='false'/><md:RequestedAttribute FriendlyName='Family name' Name='last_name' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:basic' isRequired='false'/></md:AttributeConsumingService></md:SPSSODescriptor></md:EntityDescriptor>
zabbix id = https://zabbix.fedoraproject.org
zabbix type = SP
zabbix name = Zabbix Production
zabbix metadata = <?xml version="1.0"?><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" cacheDuration="PT604800S" entityID="https://zabbix.fedoraproject.org"><md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://zabbix.fedoraproject.org/index_sso.php?sls" /><md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://zabbix.fedoraproject.org/index_sso.php?acs" index="0" /><md:AttributeConsumingService index="1"><md:ServiceName xml:lang="en">Zabbix Dashboard</md:ServiceName><md:ServiceDescription xml:lang="en">Zabbix Monitoring Service</md:ServiceDescription><md:RequestedAttribute Name="uid" isRequired="true" /></md:AttributeConsumingService></md:SPSSODescriptor></md:EntityDescriptor>