Infrastructure/infra-docs-fpo
1
0
Fork 0
Code Issues 100 Pull requests 6 Projects Releases Packages Wiki Activity Actions

ocp4 sops moved into sysadmin_guide

Browse source 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
This commit is contained in:
David Kirwan 2024-07-22 10:37:01 +01:00
parent 1d17fd8610
commit c0d6947dba
No known key found for this signature in database
GPG key ID: A5893AB6474AC37D
35 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

48
modules/sysadmin_guide/pages/sop_fas2discourse_operator_interacting.adoc Normal file
View file

@ -0,0 +1,48 @@
= Interacting with the fas2discourse Operator
== Resources
- [1] Code: https://pagure.io/cpe/fas2discourse/
- [2] Playbook: https://pagure.io/fedora-infra/ansible/blob/main/f/playbooks/manual/fas2discourse.yml
- [3] Role: https://pagure.io/fedora-infra/ansible/blob/main/f/roles/fas2discourse
== Overview of the fas2discourse Operator
The role of this operator is to synchronise group membership between IPA and Discourse. It does not synchronise all groups and all members, but only groups which exist in Discourse.
To start the synchronisation of a group, you must first request that a Discourse admin create it in Discourse. The fas2discourse operator will then begin to synchronise users to that group based on their membership in this group in IPA.
== Configuration of the fas2discourse operator
All configuration for the fas2idscourse operator is contained in the Fedora Infra private ansible repo.
Default vars contains the list which are used in the playbook which deploys the operator:
----
fas2discourse_hostname: "fas2discourse.hostna.me"
fas2discourse_namespace: "fas2discourse-operator"
fas2discourse_project_description: "The fas2discourse-operator is responsible for synchronising group membership for users between Discourse and IPA."
fas2discourse_keytab_file: "OVERRIDEME WITH A FILE LOOKUP"
fas2discourse_discourse_apikey: "OVERRIDEME WITH A DISCOURSE APIKEY"
----
The Operator has the following vars which it uses internally. These vars are populated by querying secrets in Openshift:
----
# defaults file for Fas2discourseConfig
fas2discourse_keytab_path: "/etc/fas2discourse"
fas2discourse_principal: "fas2discourse/fas2discourse.hostna.me@FEDORAPROJECT.ORG"
f2d_namespace: "fas2discourse-operator"
f2d_secret: "fas2discourse-operator-k8s-secret"
f2d_discourse_secret: "fas2discourse-operator-discourse-apikey-secret"
fasjson_host: "OVERRIDEME"
discourse_host: "OVERRIDEME"
discourse_api: "OVERRIDEME"
discourse_ignored_groups:
- "admins"
- "staff"
- "moderators"
- "trust_level_0"
- "trust_level_1"
- "trust_level_2"
- "trust_level_3"
- "trust_level_4"
----