infrastructure/ansible
2
0
Fork 0
Code Pull requests 7 Activity Actions

Add config for OIDC for bodhi staging

Browse source 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
This commit is contained in:
Ryan Lercho 2022-03-09 09:03:36 +10:00
parent b443962b18
commit 1a79d5b76e
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/bodhi2/base/templates/production.ini.j2
View file

@ -666,6 +666,14 @@ openid.url = https://id{{env_suffix}}.fedoraproject.org/
openid_template = {username}.id{{env_suffix}}.fedoraproject.org
openid.sreg_required = email nickname
{% if env == 'staging' %}
# OIDC (OpenID Connect)
oidc.fedora.client_id = bodhi
oidc.fedora.client_secret = {{ bodhi2_oidc_client_secret }}
oidc.fedora.server_metadata_url = http://id.stg.fedoraproject.org/openidc/.well-known/openid-configuration
{% endif %}
# CORS allowed origins for cornice services
# This can be wide-open. read-only, we don't care as much about.
cors_origins_ro = *