roles/openqa/server: drop OpenID auth support

We've been using OAuth2 for prod and stg for some time now, so
let's clean this up.

Signed-off-by: Adam Williamson <awilliam@redhat.com>

inventory/group_vars/openqa

@@ -11,7 +11,6 @@ openqa_amqp_this_username: "{{ openqa_amqp_prod_username }}"
 openqa_amqp_scheduler_queue: "{{ openqa_amqp_prod_username }}_scheduler"
 
 # auth stuff
-openqa_auth_method: OAuth2
 openqa_oauth2_secret: "{{ openqa_prod_oidc_secret }}"
 
 openqa_compose_arches: x86_64,aarch64

inventory/group_vars/openqa_lab

@@ -25,7 +25,6 @@ openqa_amqp_this_username: "{{ openqa_amqp_stg_username }}"
 openqa_amqp_scheduler_queue: "{{ openqa_amqp_prod_username }}_scheduler_stg"
 
 # auth stuff
-openqa_auth_method: OAuth2
 openqa_oauth2_secret: "{{ openqa_stg_oidc_secret }}"
 
 openqa_assetsize_ppc: 1

inventory/group_vars/openqa_servers_common

@@ -84,6 +84,7 @@ openqa_fullname: Adam Williamson
 openqa_hostname: localhost
 openqa_nickname: adamwill
 openqa_userid: http://adamwill.id.fedoraproject.org/
+openqa_auth_method: OAuth2
 primary_auth_source: ipa
 # http and NFS
 tcp_ports: [80, 2049]

roles/openqa/server/templates/openqa.ini.j2

@@ -42,12 +42,6 @@ level = info
 [misc_limits]
 asset_cleanup_max_free_percentage = 20
 
-{% if openqa_auth_method == 'OpenID' %}
-[openid]
-provider = https://id.fedoraproject.org/
-httpsonly = 1
-{% endif %}
-
 {% if openqa_auth_method == 'OAuth2' %}
 [oauth2]
 provider = custom