Add oidc_cm.yml

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>

files/communishift/objects/README.md

@@ -0,0 +1,7 @@
+Instructions
+------------
+
+The files in this directory are the configuration files for communishift to be applied.
+
+For OIDC auth, get the client secret for "communishift" from ansible-private/files/ipsilon/openidc.production.static, and run:
+oc create secret generic fedoraidp-clientsecret --from-literal=clientSecret=<client-secret> -n openshift-config

files/communishift/objects/oidc_cm.yml

@@ -0,0 +1,26 @@
+apiVersion: config.openshift.io/v1
+kind: OAuth
+metadata:
+  name: cluster
+spec:
+  identityProviders:
+  - name: fedoraidp
+    login: true
+    challenge: false
+    mappingMethod: claim
+    type: OpenID
+    openID:
+      clientID: communishift
+      clientSecret:
+        name: fedoraidp-clientsecret
+      extraScopes:
+      - email
+      - profile
+      claims:
+        preferredUsername:
+        - nickname
+        name:
+        - name
+        email:
+        - email
+      issuer: https://id.fedoraproject.org