WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-25 19:11:24 +08:00
Code Issues Packages Projects Releases Wiki Activity
29,743 Commits 9 Branches 0 Tags
e4e9866e044ce7a81e63145e24257002b2272002
Commit Graph

230 Commits

Author SHA1 Message Date
Kevin Fenzi
1527cab0bb add aws-fedora-ci role. ticket 8403 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Rick Elrod
ea96618bd4 Get rid of modernpaste everywhere, redirect it to paste.centos.org everywhere 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:18 +02:00
Kevin Fenzi
4f19c75723 ipsilon: add group for minimization folks (ticket #8373) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:17 +02:00
Rick Elrod
ccf17cc64b ipsilon/api: a python 3 here, a python 3 there, a python 3 everywhere 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Kevin Fenzi
3b7dd30ae0 ipsilon: fix typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
7111ea84c6 try ONLY having the old logic here 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
5cee4a5b42 try hax? 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
af078436aa openid/server.py 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
e2b22ecc20 ipsilon: I guess I decided that my blood pressure wasn't high enough today and I needed to fiddle with py2->py3 code 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
e802c6f39b ipsilon: try referencing the right mod_wsgi here 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Kevin Fenzi
13cf92b760 ipsilon: no python2, use python3 here. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:15 +02:00
Kevin Fenzi
f6c6852d5c ipsilon: add aws-centos group for SAML2. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:14 +02:00
Kevin Fenzi
e50fa5f3f2 freshmaker: remove everything 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:14 +02:00
Mikolaj Izdebski
91bcaf4b43 ipsilon: Update Koschei URL in openid trusted roots 2020-04-24 21:34:11 +02:00
Kevin Fenzi
e2de2bb15d ipsilon: add aws-copr group to ipsilon for aws access. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:09 +02:00
Patrick Uiterwijk
7b02e3c689 Add kerneltest oidc in prod 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-20 19:41:23 +02:00
Patrick Uiterwijk
9766327633 Add kerneltest oidc extension 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-20 19:35:30 +02:00
Patrick Uiterwijk
6bc09673fc Add new kerneltest OIDC scope 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-20 19:19:22 +02:00
Patrick Uiterwijk
df159fcd0e Generate env-specific saml2 metadata 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-15 11:14:58 +02:00
Patrick Uiterwijk
b4ff9a9460 Ipsilon: prepare saml2 metadata before start 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-10 19:55:58 +02:00
Patrick Uiterwijk
5c33c6d6ea ipsilon: update keytab path for openshift 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 17:10:34 +02:00
Patrick Uiterwijk
433270afac ipsilon: move over definitely to openshift 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 16:02:46 +02:00
Patrick Uiterwijk
c2731b0ca0 ipsilon: move saml2 metadata to tempdir 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 15:58:28 +02:00
Patrick Uiterwijk
c62cf8bf1d ipsilon: move username.id mapping to ipsilon pods 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 14:38:10 +02:00
Patrick Uiterwijk
fa7c9891fa In openshift, always use oidc.key 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 14:07:52 +02:00
Patrick Uiterwijk
2e9907e663 MAke openid-config available at canonical location 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 14:06:49 +02:00
Patrick Uiterwijk
6fd848dbeb Persona is dead. Nuke it 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 13:45:28 +02:00
Patrick Uiterwijk
eefdf5fd9d ipsilon: set up wsgi config 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2019-05-09 11:07:09 +00:00
Patrick Uiterwijk
f1d09db3a9 ipsilon: add mod_auth_gssapi 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2019-05-09 10:56:58 +00:00
Patrick Uiterwijk
420c1eaf00 ipsilon: do not use py3 yet 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2019-05-09 10:55:07 +00:00
Patrick Uiterwijk
db27331a16 ipsilon: Inject other secrets 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 12:49:02 +02:00
Patrick Uiterwijk
cadfe7c98a ipsilon: attempt ansible lookup 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 12:45:42 +02:00
Patrick Uiterwijk
c9b4cba417 ipsilon: see if absolute paths work 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 12:43:18 +02:00
Patrick Uiterwijk
725d4eec01 Fipsilon: Fix indentation and stuff and top-define 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 12:40:30 +02:00
Patrick Uiterwijk
b6c34ca9ab Ipsilon: add initial configmap 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 12:30:28 +02:00
Patrick Uiterwijk
1bb89a3799 Add aws-docs 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-05 22:21:15 +02:00
Patrick Uiterwijk
7e77debb8f Register aws-infra with Ipsilon 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-04 23:25:35 +02:00
Patrick Uiterwijk
000cad6a8d Add allowed attributes to prod bugzilla 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2019-02-27 18:44:29 +00:00
Clement Verna
8f8daf1847 IPSILON: enable fpdc oidc plugin in production and staging 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-11-26 09:37:29 +01:00
Kevin Fenzi
c7d3ba82f4 Enable fpdc scopes in ipsilon. Ticket 7299. 
This simply installs the ipsilon plugin for fpdc scopes and
restarts it. If there's an issue we can easily remove it to
roll back to where we were.

+1s?
 2018-10-16 17:20:52 +00:00
Clement Verna
d18fb1841a ipsolon: remove release-type oidc scope for fpdc 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-10-05 09:16:14 +02:00
David Shier
c0f45892ff Removed all traces i could fild of the tagger and statscache (and stats_cache for databases) in ansible, proxy configs, and the nagios config. Pursuant to request in pagzre issue https://pagure.io/fedora-infrastructure/issue/7267 . - Odin2016 2018-10-03 17:50:38 +00:00
Kevin Fenzi
af959b12b0 add oidc scopes for fpdc. They are only manually installed on iddev currently, can be added to roles/ipsilon/tasks when ready for stg or prod 2018-09-18 18:33:00 +00:00
Mikolaj Izdebski
259ac6a466 Cleanup some Jenkins leftovers 2018-08-06 19:02:47 +00:00
Patrick Uiterwijk
bae47f7a64 Add prod bz5 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-07-26 10:20:52 +00:00
Rick Elrod
4a60ddc875 Nuke pkgdb some more... and probably break everything. 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2018-07-19 20:40:14 +00:00
Patrick Uiterwijk
d324a17f37 Add partner-bz5 both with and without 5 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-07-19 10:31:12 +00:00
Paul W. Frields
c0eabcaae5 Create FAS mapping for new aws-cloud-poc role 2018-07-13 16:02:00 +00:00
Patrick Uiterwijk
560ce51f21 Move full privacy policy text to login form 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-17 12:42:14 +02:00
Patrick Uiterwijk
78448e24fc Add info on external services to consent 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-17 12:39:24 +02:00