Compare commits
1 commit
production
...
dev
Author | SHA1 | Date | |
---|---|---|---|
|
01505dde5e |
1 changed files with 0 additions and 47 deletions
|
@ -1,47 +0,0 @@
|
|||
from ipsilon.util import config as pconfig
|
||||
from ipsilon.info.infosssd import InfoProvider as SSSDInfoProvider
|
||||
|
||||
|
||||
AWS_IDP_ARN = "arn:aws:iam::125523088429:saml-provider/id.fedoraproject.org"
|
||||
AWS_GROUPS = {
|
||||
"aws-master": "arn:aws:iam::125523088429:role/aws-master",
|
||||
"aws-iam": "arn:aws:iam::125523088429:role/aws-iam",
|
||||
"aws-billing": "arn:aws:iam::125523088429:role/aws-billing",
|
||||
"aws-atomic": "arn:aws:iam::125523088429:role/aws-atomic",
|
||||
"aws-s3-readonly": "arn:aws:iam::125523088429:role/aws-s3-readonly",
|
||||
"aws-fedoramirror": "arn:aws:iam::125523088429:role/aws-fedoramirror",
|
||||
"aws-s3": "arn:aws:iam::125523088429:role/aws-s3",
|
||||
"aws-cloud-poc": "arn:aws:iam::125523088429:role/aws-cloud-poc",
|
||||
"aws-infra": "arn:aws:iam::125523088429:role/aws-infra",
|
||||
"aws-docs": "arn:aws:iam::125523088429:role/aws-docs",
|
||||
"aws-copr": "arn:aws:iam::125523088429:role/aws-copr",
|
||||
"aws-centos": "arn:aws:iam::125523088429:role/aws-centos",
|
||||
"aws-min": "arn:aws:iam::125523088429:role/aws-min",
|
||||
"aws-fedora-ci": "arn:aws:iam::125523088429:role/aws-fedora-ci",
|
||||
"aws-fcos-mgmt": "arn:aws:iam::125523088429:role/aws-fcos-mgmt",
|
||||
}
|
||||
|
||||
|
||||
class InfoProvider(SSSDInfoProvider):
|
||||
def __init__(self, *kwargs):
|
||||
super().__init__(*kwargs)
|
||||
self.name = "fas"
|
||||
self.description = """
|
||||
A Fedora-specific version of the SSSd info plugin.
|
||||
"""
|
||||
self.new_config(
|
||||
self.name,
|
||||
pconfig.Condition(
|
||||
"preconfigured", "SSSD can only be used when pre-configured", False
|
||||
),
|
||||
)
|
||||
|
||||
def get_user_attrs(self, user):
|
||||
reply = super().get_user_attrs(user)
|
||||
reply["_extras"]["awsroles"] = []
|
||||
for group in reply["_groups"]:
|
||||
if group in AWS_GROUPS:
|
||||
reply["_extras"]["awsroles"].append(
|
||||
"%s,%s" % (AWS_IDP_ARN, AWS_GROUPS[group])
|
||||
)
|
||||
return reply
|
Loading…
Add table
Add a link
Reference in a new issue