Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Dist-Git: adjust for OIDC changes

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2024-11-14 07:45:42 +01:00
parent e479cb5600
commit fcad3efdfd
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/distgit/pagure/templates/pagure.cfg
View file

@ -119,7 +119,7 @@ OIDC_SCOPES = [
'https://id.fedoraproject.org/scope/agreements', 'https://id.fedoraproject.org/scope/agreements',
] ]
OIDC_PAGURE_EMAIL = 'email' OIDC_PAGURE_EMAIL = 'email'
OIDC_PAGURE_FULLNAME = 'fullname' OIDC_PAGURE_FULLNAME = 'name'
OIDC_PAGURE_USERNAME = 'preferred_username' OIDC_PAGURE_USERNAME = 'preferred_username'
OIDC_PAGURE_SSH_KEY = 'ssh_key' OIDC_PAGURE_SSH_KEY = 'ssh_key'
OIDC_PAGURE_GROUPS = 'groups' OIDC_PAGURE_GROUPS = 'groups'

4
roles/distgit/templates/auth_openidc.conf
View file

@ -1,9 +1,9 @@
OIDCOAuthIntrospectionEndpoint https://id{{env_suffix}}.fedoraproject.org/openidc/TokenInfo OIDCOAuthIntrospectionEndpoint https://id{{env_suffix}}.fedoraproject.org/openidc/TokenInfo
OIDCOAuthClientID src-verifier OIDCOAuthClientID src-verifier
{% if env == "staging" %} {% if env == "staging" %}
OIDCOAuthClientSecret {{ distgit_oidc_client_secret_stg }} OIDCOAuthClientSecret {{ distgit_oidc_src_verifier_secret_stg }}
{% else %} {% else %}
OIDCOAuthClientSecret {{ distgit_oidc_client_secret_prod }} OIDCOAuthClientSecret {{ distgit_oidc_src_verifier_secret_prod }}
{% endif %} {% endif %}
OIDCOAuthIntrospectionEndpointAuth client_secret_basic OIDCOAuthIntrospectionEndpointAuth client_secret_basic
OIDCOAuthIntrospectionEndpointMethod POST OIDCOAuthIntrospectionEndpointMethod POST