openqa/server: allow OAuth2 authentication, enable on lab #2546

Merged
ryanlerch merged 1 commit from openqa-oauth2-stg into main 2025-03-28 21:04:01 +00:00
Contributor

OpenID support in FAS is going away. openQA has OAuth2 support.
I've tested this config to work with manual edits on lab, now
ansiblizing it (for lab only to start with).

Signed-off-by: Adam Williamson awilliam@redhat.com

OpenID support in FAS is going away. openQA has OAuth2 support. I've tested this config to work with manual edits on lab, now ansiblizing it (for lab only to start with). Signed-off-by: Adam Williamson <awilliam@redhat.com>
First-time contributor

Build failed. More information on how to proceed and troubleshoot errors available at https://fedoraproject.org/wiki/Zuul-based-ci
https://fedora.softwarefactory-project.io/zuul/buildset/81a5df18e94341ef862bc533afc4cae4

Build failed. More information on how to proceed and troubleshoot errors available at https://fedoraproject.org/wiki/Zuul-based-ci https://fedora.softwarefactory-project.io/zuul/buildset/81a5df18e94341ef862bc533afc4cae4 - [fi-ansible-lint-diff ](https://fedora.softwarefactory-project.io/zuul/build/2a466fe1a0a04463a18c1d9e2504954f) : FAILURE in 3m 10s - [fi-yamllint-diff ](https://fedora.softwarefactory-project.io/zuul/build/30577c64ed984f4a807fa9ac5741b818) : SUCCESS in 2m 32s
Contributor

Looks fine to me.

Only thing odd I see is that openqa_oauth2_secret is defined in prod while it's still on OpenID, but that shouldn't matter since it won't use it until you switch it.

Looks fine to me. Only thing odd I see is that openqa_oauth2_secret is defined in prod while it's still on OpenID, but that shouldn't matter since it won't use it until you switch it.
Author
Contributor

Failures aren't related to the PR.

Failures aren't related to the PR.
Author
Contributor

Pull-Request has been merged by adamwill

Pull-Request has been merged by adamwill
Author
Contributor

@kevin yeah, I intentionally did it that way so the enablement for prod is just a single change.

@kevin yeah, I intentionally did it that way so the enablement for prod is just a single change.
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Infrastructure/ansible#2546
No description provided.