WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-28 20:42:20 +08:00
Code Issues Packages Projects Releases Wiki Activity
33,719 Commits 9 Branches 0 Tags
0f79ff17ec6eb537eb03ffd4123f2ea4effcfd07
Commit Graph

270 Commits

Author SHA1 Message Date
Patrick Uiterwijk
a07e65afdc Fix saml2 file locations in Ipsilon 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2020-12-01 10:16:08 +01:00
Aurélien Bompard
fadcf80cfd Get the website in ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-21 17:41:51 +02:00
Aurélien Bompard
a2f74a447e Ipsilon: fix attribute mapping for GPG & SSH 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-21 11:59:43 +02:00
Aurélien Bompard
dadb90e633 Missing part of bd1cc1d 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-16 09:36:03 +02:00
Aurélien Bompard
e0918f5c96 Ipsilon: set the attribute mapping for openid too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 19:05:08 +02:00
Aurélien Bompard
157f1d2d52 Ipsilon: improve the HBAC rule 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 18:46:51 +02:00
Aurélien Bompard
35f2aeb15d Actually those tasks must be run on the IPA server 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 18:04:21 +02:00
Aurélien Bompard
2cc20bb1af Ipsilon: create a HBAC rule 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 17:51:21 +02:00
Aurélien Bompard
bd1cc1d5f7 Allow redirect on usernames that have an underscore 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 17:25:23 +02:00
Aurélien Bompard
b75b580a49 Ipsilon: re-enable the alias for the well-known dir 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 15:07:49 +02:00
Aurélien Bompard
78ad8c102a Ipsilon: fix access to the well-known dir 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 14:55:10 +02:00
Aurélien Bompard
1ca3aff8f1 Ipsilon: configure SSSd 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 12:29:37 +02:00
Aurélien Bompard
f4684a1f07 Ipsilon: fix config files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 10:11:36 +02:00
Aurélien Bompard
3a1885bcc9 Ipsilon in staging: deploy config files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 09:48:31 +02:00
Aurélien Bompard
1a1f7d79e4 Ipsilon: fix files location 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 14:53:45 +02:00
Aurélien Bompard
62823f5fee Ipsilon: the custom admin db path must exist, let's set it later 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 13:47:39 +02:00
Aurélien Bompard
e73a1bd501 Fix ipsilon config and install script in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 12:19:00 +02:00
Aurélien Bompard
7e7399fb50 Syntax. 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 10:07:49 +02:00
Aurélien Bompard
ba82363e78 Add a role for ipa clients and use it in Ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 10:05:19 +02:00
Aurélien Bompard
3ae9b4bd65 We need this plugin obviously 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 09:08:52 +02:00
Aurélien Bompard
47d4923de9 Undefined variable 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 17:06:44 +02:00
Aurélien Bompard
373d9385e1 Missing dep 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 16:50:13 +02:00
Aurélien Bompard
ae35433095 Missing dep 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 10:54:25 +02:00
Aurélien Bompard
d1edc6db3d Prepare ipsilon for a VM deployment in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-05 17:24:56 +02:00
Kevin Fenzi
56489ef2c3 ipsilon: comment out for now all the old rhel7 python2 tasks 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 15:08:54 -07:00
Kevin Fenzi
7d9c26fe51 ipsilon: no libsemanage-python in f32 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:57:14 -07:00
Aurélien Bompard
9b4832feee Ipsilon: Fix the attribute mapping 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-17 17:03:55 +02:00
Aurélien Bompard
2baa486616 Fix case in configuration 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-17 11:44:32 +02:00
Aurélien Bompard
482c0f799c Don't get user info from LDAP, use FASJSON 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 15:44:15 +02:00
Aurélien Bompard
b2df514b95 Ipsilon: rename the service keytab file for coherence 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 15:28:21 +02:00
Aurélien Bompard
ea064cbdc6 Ipsilon: don't use ldaps 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:57:16 +02:00
Aurélien Bompard
3ba34383b3 Ipsilon: configure the LDAP auth plugin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:41:33 +02:00
Aurélien Bompard
07f4977aac Ipsilon: remove FAS auth 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 13:20:45 +02:00
Aurélien Bompard
70f71744fb Ipsilon: prepare config changes for staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-11 15:22:15 +02:00
Aurélien Bompard
31b058a884 Ipsilon: set the keytab paths in krb5.conf 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-11 12:17:00 +02:00
Aurélien Bompard
5a01ac3566 Ipsilon: deploy the Fedora-specific files from a git repo 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-11 12:17:00 +02:00
Pierre-Yves Chibon
6dc4c7533c ipsilon: Set the /ui alias to the Fedora theme folder 
Turns out commenting out this alias did not help, so instead I'm
pointing it to the Fedora theme folder which should thus make
/ui/res valid.

Fingers crossed!

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-08-12 11:29:30 +02:00
Pierre-Yves Chibon
7f3379d854 ipsilon: Comment out the alias for /ui 
If I'm reading ipsilon's code correctly this should now be
handled by ipsilon itself.
If I'm mistaken, I'll revert and keep looking for the proper
fix

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-08-12 11:25:40 +02:00
Pierre-Yves Chibon
1eb1b731db ipsilon: set the full path to the theme directory 
Currently we let ipsilon's magic load the tempate and asset from
that variable and it looks like it's somehow not doing what we want
with the asset since we can't access the fedora-authn-logo and the
login.css of the Fedora theme.
So let's see if using the full path to the directory helps or not.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-08-12 09:44:55 +02:00
Neal Gompa
aa6718c124 {roles,roles/openshift-apps}/ipsilon: Use Fedora theme maintained in Ipsilon package 
Signed-off-by: Neal Gompa <ngompa13@gmail.com>
 2020-08-11 07:37:14 -04:00
Kevin Fenzi
1527cab0bb add aws-fedora-ci role. ticket 8403 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Rick Elrod
ea96618bd4 Get rid of modernpaste everywhere, redirect it to paste.centos.org everywhere 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:18 +02:00
Kevin Fenzi
4f19c75723 ipsilon: add group for minimization folks (ticket #8373) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:17 +02:00
Rick Elrod
ccf17cc64b ipsilon/api: a python 3 here, a python 3 there, a python 3 everywhere 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Kevin Fenzi
3b7dd30ae0 ipsilon: fix typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
7111ea84c6 try ONLY having the old logic here 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
5cee4a5b42 try hax? 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
af078436aa openid/server.py 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
e2b22ecc20 ipsilon: I guess I decided that my blood pressure wasn't high enough today and I needed to fiddle with py2->py3 code 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
e802c6f39b ipsilon: try referencing the right mod_wsgi here 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00