WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-27 03:52:09 +08:00
Code Issues Packages Projects Releases Wiki Activity

caiapi: separate config files

Browse Source 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
This commit is contained in:
Michal Konečný
2019-06-11 16:19:18 +02:00
parent b37e3966b3
commit 87fb44edde
2 changed files with 14 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
roles/openshift-apps/accountsystem/templates/caiapi.cfg Normal file
View File

@@ -0,0 +1,12 @@
OIDC_CLIENT_SECRETS = '/etc/caiapi_oidc.json'
KRB5_REALM = '{{ ipa_realm }}'
KRB5_PRINCIPAL = 'CAIAPI/caiapi{{ env_suffix }}.fedoraproject.org'
KRB5_KEYTAB = '/etc'
LDAP_SERVER = 'ldaps://ipa01{{ env_suffix }}.fedoraproject.org'
LDAP_CACERT = '/etc'
{% if env == "staging" %}
LDAP_BASE = 'dc=stg,dc=fedoraproject,dc=org'
{% else %}
LDAP_BASE = 'dc=fedoraproject,dc=org'
{% endif %}
# TODO: Include file for CLIENTS

14
roles/openshift-apps/accountsystem/templates/configmap_caiapi.yml
View File

@@ -1,3 +1,4 @@
{% macro load_file(filename) %}{% include filename %}{%- endmacro -%}
---
apiVersion: v1
kind: ConfigMap
@@ -7,15 +8,4 @@ metadata:
app: accountsystem
data:
caiapi.cfg: |-
OIDC_CLIENT_SECRETS = '/etc/caiapi_oidc.json'
KRB5_REALM = '{{ ipa_realm }}'
KRB5_PRINCIPAL = 'CAIAPI/caiapi{{ env_suffix }}.fedoraproject.org'
KRB5_KEYTAB = '/etc'
LDAP_SERVER = 'ldaps://ipa01{{ env_suffix }}.fedoraproject.org'
LDAP_CACERT = '/etc'
{% if env == "staging" %}
LDAP_BASE = 'dc=stg,dc=fedoraproject,dc=org'
{% else %}
LDAP_BASE = 'dc=fedoraproject,dc=org'
{% endif %}
# TODO: Include file for CLIENTS
{{ load_file('caiapi.cfg') | indent }}