Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

only conditionalize the secret

Browse source 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
This commit is contained in:
Rick Elrod 2017-08-23 21:44:36 +00:00
parent b76927fad2
commit c1d5d5d612
1 changed files with 5 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

17
roles/openshift-apps/waiverdb/templates/secret.yml
View file

@ -8,27 +8,20 @@ stringData:
{% if env == 'staging' %}
flask-secret-key: "{{stg_waiverdb_secret_key}}"
database-password: "{{stg_waiverdb_db_password}}"
# This is the same non-secret config we have committed
# as conf/client_secrets.json for using in dev environments.
client_secrets.json: |-
{"web": {
"redirect_uris": ["https://waiverdb-waiverdb.app.os.stg.fedoraproject.org/"],
"token_uri": "https://iddev.fedorainfracloud.org/openidc/Token",
"auth_uri": "https://iddev.fedorainfracloud.org/openidc/Authorization",
"client_id": "D-e69a1ac7-30fa-4d18-9001-7468c4f34c3c",
"client_secret": "qgz8Bzjg6nO7JWCXoB0o8L49KfI5atLF",
"userinfo_uri": "https://iddev.fedorainfracloud.org/openidc/UserInfo",
"token_introspection_uri": "https://iddev.fedorainfracloud.org/openidc/TokenInfo"}}
{% else %}
flask-secret-key: "{{prod_waiverdb_secret_key}}"
database-password: "{{prod_waiverdb_db_password}}"
{% endif %}
client_secrets.json: |-
{"web": {
"redirect_uris": ["https://waiverdb-waiverdb.app.os.fedoraproject.org/"],
"token_uri": "https://id{{ env_suffix }}.fedoraproject.org/openidc/Token",
"auth_uri": "https://id{{ env_suffix }}.fedoraproject.org/openidc/Authorization",
"client_id": "waiverdb",
{% if env == 'staging' %}
"client_secret": "{{ stg_waiverdb_oidc_secret }}",
{% else %}
"client_secret": "{{ prod_waiverdb_oidc_secret }}",
{% endif %}
"userinfo_uri": "https://id{{ env_suffix }}.fedoraproject.org/openidc/UserInfo",
"token_introspection_uri": "https://id{{ env_suffix }}.fedoraproject.org/openidc/TokenInfo"}}
{% endif %}