Differential D2896 Diff 10526 site-modules/profile/manifests/keycloak/primary.pp

Changeset View

Standalone View

site-modules/profile/manifests/keycloak/primary.pp

Show All 27 Lines	class {'::keycloak':
datasource_host => $postgres_host,		datasource_host => $postgres_host,
datasource_port => $postgres_port,		datasource_port => $postgres_port,
datasource_dbname => $postgres_dbname,		datasource_dbname => $postgres_dbname,
datasource_username => $postgres_user,		datasource_username => $postgres_user,
datasource_password => $postgres_password,		datasource_password => $postgres_password,
# Don't manage the PostgreSQL database		# Don't manage the PostgreSQL database
manage_datasource => false,		manage_datasource => false,
}		}

		include ::profile::keycloak::resources
}		}
		ardumontUnsubmitted Not Done Inline Actions Make that configurable so this can also be testable on other "archive" (webapp.internal.staging.swh.network, webapp0.softwareheritage.org)... ardumont: Make that configurable so this can also be testable on other "archive" (webapp.internal.staging.
		anlambertUnsubmitted Done Inline Actions Oh right, I forgot those. anlambert: Oh right, I forgot those.
		ardumontUnsubmitted Not Done Inline Actions I meant to make that as a list value in a defaults.yaml entry key. So we can configure it per location. defaulting to the production one as we do other services deployment. keycloak::client::swh_web::redirect_uris: - http://localhost:5004/* # no idea if it's relevant here - https://archive.softwareheritage.org/* as default for the production and on other file (`sesi_rocquencourt_staging.yml`, staging for example): keycloak::client::swh_web::redirect_uris: - ... - https://webapp.internal.staging.swh.network/* for staging etc... And then in that file do a lookup of the variable and you are golden ;) ardumont: I meant to make that as a list value in a defaults.yaml entry key. So we can configure it per…
		olasdAuthorUnsubmitted Not Done Inline Actions That can't work. There's a single keycloak server shared across the different environments. olasd: That can't work. There's a single keycloak server shared across the different environments.