ePAS-ISTI
/
ansible-role-epas
5
0
Fork 1
Code Issues Pull Requests Releases Wiki Activity

Added Keycloak for support Attestati

This commit is contained in:
Giancarlo Panichi 2023-11-23 14:19:07 +01:00
parent 58630df737
commit 40dd6d2ca4
3 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@ -42,7 +42,6 @@ psql_db_data: '{{ epas_psql_pg_data }}'
epas_server_hostname: 'epas.example.com' epas_server_hostname: 'epas.example.com'
# Teleworker # Teleworker
epas_teleworker_server_active: 'true' epas_teleworker_server_active: 'true'
epas_teleworker_server_baseurl: 'http://epasteleworker.isti.cnr.it:8080'
epas_teleworker_server_user: 'app.epas' epas_teleworker_server_user: 'app.epas'
#epas_teleworker_server_password: 'set in a vault file' #epas_teleworker_server_password: 'set in a vault file'
## SMTP ## SMTP
@ -61,6 +60,9 @@ epas_ldap_timeout: 1000
epas_ldap_base_dn: 'ou=People,dc=example,dc=org' epas_ldap_base_dn: 'ou=People,dc=example,dc=org'
epas_ldap_login_return_uri: '/.' epas_ldap_login_return_uri: '/.'
epas_ldap_eppn_attribute_name: 'eduPersonPrincipalName' epas_ldap_eppn_attribute_name: 'eduPersonPrincipalName'
## Keycloak
epas_keyclock_enabled: True
``` ```
Dependencies Dependencies

6
defaults/main.yml
View File

@ -62,5 +62,11 @@ epas_ldap_authenticated_bind: False
epas_ldap_bind_dn: 'cn=readuser,ou=People,o=example,c=org' epas_ldap_bind_dn: 'cn=readuser,ou=People,o=example,c=org'
#epas_ldap_bind_credentials: 'use a vault file' #epas_ldap_bind_credentials: 'use a vault file'
epas_ldap_authenticate_user_search_dn: 'o=example,c=org' epas_ldap_authenticate_user_search_dn: 'o=example,c=org'
## Keycloak
epas_keyclock_enabled: True
epas_keycloak_config_uri: 'https://sso.cnr.it/auth/realms/CNR/.well-known/openid-configuration'
#epas_keycloak_client_id: 'client id'
#epas_keycloak_client_secret: 'use a vault file'
## Logs
epas_log_level: 'INFO' epas_log_level: 'INFO'
epas_log_appenders: 'stderr' epas_log_appenders: 'stderr'

5
templates/epas-docker-compose.yml.j2
View File

@ -77,6 +77,11 @@ services:
- LDAP_BIND_CREDENTIALS={{ epas_ldap_bind_credentials }} - LDAP_BIND_CREDENTIALS={{ epas_ldap_bind_credentials }}
- LDAP_AUTHENTICATE_USER_SEARCH_DN={{ epas_ldap_authenticate_user_search_dn }} - LDAP_AUTHENTICATE_USER_SEARCH_DN={{ epas_ldap_authenticate_user_search_dn }}
{% endif %} {% endif %}
{% if epas_keyclock_enabled %}
- KEYCLOAK_CONFIG_URI={{ epas_keycloak_config_uri}}
- KEYCLOAK_CLIENT_ID={{ epas_keycloak_client_id}}
- KEYCLOAK_CLIENT_SECRET={{ epas_keycloak_client_secret}}
{% endif %}
{% if epas_flows_enabled %} {% if epas_flows_enabled %}
- FLOWS_ACTIVE=true # defalut: false --(true,false) -- se impostato a true abilita l'utilizzo dei flussi interni a ePAS - FLOWS_ACTIVE=true # defalut: false --(true,false) -- se impostato a true abilita l'utilizzo dei flussi interni a ePAS
- URL_ATTESTATI={{ epas_attestati_url }} # default: https://attestativ2.rm.cnr.it - URL_ATTESTATI={{ epas_attestati_url }} # default: https://attestativ2.rm.cnr.it