Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
36692 commits 9 branches 0 tags 111 MiB
Commit graph

294 commits

Author SHA1 Message Date
Kevin Fenzi
9bb24871c3 ipsilon: add saml2 for gitlab.com 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-11-30 15:37:33 +00:00
Kevin Fenzi
cc0f507a2c ipsilon: run the saml2 script as ipsilon user 
Right now it runs as root which means ipsilon can't read it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-11-30 07:34:16 -08:00
Aurélien Bompard
286bde8098
Ipsilon: use the pam auth module on staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-10-27 10:12:59 +02:00
Clement Verna
ea2354658f Remove fpdc playbooks and config. 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2021-08-10 20:37:12 +00:00
Kevin Fenzi
79afbb7406 bugzilla: try and update saml2 data for new bugzilla 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-07-31 12:10:38 -07:00
Mattia Verga
15f3dea6a1 Use bugzilla.stage instance after partner-bugzilla shutdown 
Signed-off-by: Mattia Verga <mattia.verga@protonmail.com>
 2021-07-31 17:08:49 +00:00
Ryan Lerch
ff1395d99c ipsilon: clean up ipsilon role 
This cleans up the ipsilon role, removing a bunch of old, commented out
lines, and removes files and templates that are no longer used.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2021-07-08 10:13:41 +00:00
Kevin Fenzi
f732a95cb3 ipsilon / sssd: try and set ldap_dref_threshold to 0 to improve things with sssd 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-27 11:05:40 -07:00
Aurélien Bompard
06605d7d35
Ipsilon: allow dots in usernames 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-05-27 13:05:33 +02:00
Patrick Uiterwijk
cd8859d7a6 Update RHBZ SAML data 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2021-05-27 07:32:03 +02:00
Aurélien Bompard
0c845843c4
Update ipsilon-fedora on the Ipsilon servers 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-04-30 10:37:31 +02:00
Patrick Uiterwijk
8979bb9a05 Import pre-prod bugzilla SAML data 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2021-04-01 07:35:24 +02:00
Kevin Fenzi
0a53920236 ipsilon: up number of processes to handle more load 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-31 13:52:20 -07:00
Aurélien Bompard
196d20086c
Some Ipsilon fixes for the new openid api extension 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-26 12:11:07 +01:00
Aurélien Bompard
94b32cee08
Use our custom info plugin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-25 18:56:08 +01:00
Aurélien Bompard
fc759fd447
Add the ipsilon script to generate the metadata 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-25 11:15:29 +01:00
Aurélien Bompard
2c04966b51
Adjust the location of the service keytab in ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 17:58:12 +01:00
Aurélien Bompard
4c5e2d605b
Fix the sssd config file 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 17:31:55 +01:00
Aurélien Bompard
be8535cf05
Fix ipsilon config 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 17:03:58 +01:00
Aurélien Bompard
7b2c578983
Ipsilon in prod is now on a VM like in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 13:49:33 +01:00
Aurélien Bompard
b8e6754f97 Use a VM for Ipsilon in prod too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-23 16:55:38 +00:00
Aurélien Bompard
2269f0ece1 Prepare Noggin & FASJSON for prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 17:53:42 +00:00
Aurélien Bompard
9e7b8efc2e
Get fasPronoun in sssd 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-05 16:47:01 +01:00
Aurélien Bompard
95ca01284a
Use a template for ipsilon's sssd.conf instead of replacing lines 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-01-20 10:32:33 +01:00
Patrick Uiterwijk
a07e65afdc Fix saml2 file locations in Ipsilon 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2020-12-01 10:16:08 +01:00
Aurélien Bompard
fadcf80cfd
Get the website in ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-21 17:41:51 +02:00
Aurélien Bompard
a2f74a447e
Ipsilon: fix attribute mapping for GPG & SSH 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-21 11:59:43 +02:00
Aurélien Bompard
dadb90e633
Missing part of bd1cc1d 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-16 09:36:03 +02:00
Aurélien Bompard
e0918f5c96
Ipsilon: set the attribute mapping for openid too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 19:05:08 +02:00
Aurélien Bompard
157f1d2d52
Ipsilon: improve the HBAC rule 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 18:46:51 +02:00
Aurélien Bompard
35f2aeb15d
Actually those tasks must be run on the IPA server 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 18:04:21 +02:00
Aurélien Bompard
2cc20bb1af
Ipsilon: create a HBAC rule 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 17:51:21 +02:00
Aurélien Bompard
bd1cc1d5f7
Allow redirect on usernames that have an underscore 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 17:25:23 +02:00
Aurélien Bompard
b75b580a49
Ipsilon: re-enable the alias for the well-known dir 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 15:07:49 +02:00
Aurélien Bompard
78ad8c102a
Ipsilon: fix access to the well-known dir 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 14:55:10 +02:00
Aurélien Bompard
1ca3aff8f1
Ipsilon: configure SSSd 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 12:29:37 +02:00
Aurélien Bompard
f4684a1f07
Ipsilon: fix config files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 10:11:36 +02:00
Aurélien Bompard
3a1885bcc9
Ipsilon in staging: deploy config files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 09:48:31 +02:00
Aurélien Bompard
1a1f7d79e4
Ipsilon: fix files location 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 14:53:45 +02:00
Aurélien Bompard
62823f5fee
Ipsilon: the custom admin db path must exist, let's set it later 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 13:47:39 +02:00
Aurélien Bompard
e73a1bd501
Fix ipsilon config and install script in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 12:19:00 +02:00
Aurélien Bompard
7e7399fb50
Syntax. 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 10:07:49 +02:00
Aurélien Bompard
ba82363e78
Add a role for ipa clients and use it in Ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 10:05:19 +02:00
Aurélien Bompard
3ae9b4bd65
We need this plugin obviously 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 09:08:52 +02:00
Aurélien Bompard
47d4923de9
Undefined variable 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 17:06:44 +02:00
Aurélien Bompard
373d9385e1
Missing dep 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 16:50:13 +02:00
Aurélien Bompard
ae35433095
Missing dep 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 10:54:25 +02:00
Aurélien Bompard
d1edc6db3d
Prepare ipsilon for a VM deployment in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-05 17:24:56 +02:00
Kevin Fenzi
56489ef2c3 ipsilon: comment out for now all the old rhel7 python2 tasks 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 15:08:54 -07:00
Kevin Fenzi
7d9c26fe51 ipsilon: no libsemanage-python in f32 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:57:14 -07:00