diff --git a/roles/ipsilon/files/oidc_scopes/src.py b/roles/ipsilon/files/oidc_scopes/src.py new file mode 100644 index 0000000000..eed4eaca4f --- /dev/null +++ b/roles/ipsilon/files/oidc_scopes/src.py @@ -0,0 +1,14 @@ +from __future__ import absolute_import + +from ipsilon.providers.openidc.plugins.common import OpenidCExtensionBase + + +class OpenidCExtension(OpenidCExtensionBase): + name = 'src' + display_name = 'Dist-Git' + scopes = { + 'https://src.fedoraproject.org/push': { + 'display_name': 'Push to Fedora Dist-Git', + 'claims': [], + }, + } diff --git a/roles/ipsilon/tasks/main.yml b/roles/ipsilon/tasks/main.yml index 2d24aebda8..0aeb5d8805 100644 --- a/roles/ipsilon/tasks/main.yml +++ b/roles/ipsilon/tasks/main.yml @@ -49,6 +49,7 @@ - odcs - wiki - freshmaker + - src notify: - reload apache tags: diff --git a/roles/ipsilon/templates/configuration.conf b/roles/ipsilon/templates/configuration.conf index a8cf050236..fd41a8d732 100644 --- a/roles/ipsilon/templates/configuration.conf +++ b/roles/ipsilon/templates/configuration.conf @@ -23,9 +23,9 @@ global enabled=allow global enabled=persona,openid,saml2,openidc {% if env == "production" %} -openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki,freshmaker +openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki,freshmaker,src {% else %} -openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki,freshmaker +openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki,freshmaker,src {% endif %} {% if env == 'staging' %}