openstack/kolla-ansible
Code Issues Proposed changes

keystone: handle OIDC metadata & attribute mappings as template

Browse Source 
Change-Id: Id5305aae4e92fbb9a12aa0f569fb7600b5f2d069
This commit is contained in:
Christian Berendt 2024-12-05 09:02:35 +01:00 committed by Michal Nasiadka
parent 7f85beac3f
commit 7223bb75c9
2 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ansible/roles/keystone/tasks/config-federation-oidc.yml
View File

@ -28,11 +28,11 @@
when:
- inventory_hostname in groups[keystone.group]
- name: Copying OpenID Identity Providers metadata
- name: Templating OpenID Identity Providers metadata
vars:
keystone: "{{ keystone_services['keystone'] }}"
become: true
copy:
template:
src: "{{ item.metadata_folder }}/"
dest: "{{ keystone_host_federation_oidc_metadata_folder }}"
mode: "0660"
@ -55,11 +55,11 @@
- item.certificate_file is defined
- inventory_hostname in groups[keystone.group]
- name: Copying OpenStack Identity Providers attribute mappings
- name: Templating OpenStack Identity Providers attribute mappings
vars:
keystone: "{{ keystone_services['keystone'] }}"
become: true
copy:
template:
src: "{{ item.file }}"
dest: "{{ keystone_host_federation_oidc_attribute_mappings_folder }}/{{ item.file | basename }}"
mode: "0660"

9
releasenotes/notes/template-config-federation-oidc-8e62742de5fcb376.yaml Normal file
View File

@ -0,0 +1,9 @@
---
features:
- |
In the Keystone role files for the
``keystone_host_federation_oidc_metadata_folder`` and
``keystone_host_federation_oidc_attribute_mappings_folder`` directories
are now handled as templates. This relates to the OpenID Identity Providers
metadata and the OpenStack Identity Providers attribute mappings as part of
the identity federation with OIDC.