opendev/system-config
Code Issues Proposed changes

Added Valid OAuth client configuration to storyboard manifest.

Browse Source 
StoryBoard now only permits a finite list of authorized oauth clients,
which are based on the domain host. This adds the necessary configuration
elements to the OpenStack StoryBoard manifest.

Change-Id: Ia7d34e9b80399ffa9e4229d6cc7035061c41dffc
Depends-on: I29495a0b640c3ca097cca8c17349df5cc42388de
This commit is contained in:
Michael Krotscheck
2015-02-23 12:27:02 -08:00
parent 340efe0d91
commit 1bd2b2bca9
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
manifests/site.pp
View File

@@ -420,7 +420,11 @@ node 'storyboard.openstack.org' {
rabbitmq_password => hiera('storyboard_rabbit_password', 'XXX'), rabbitmq_password => hiera('storyboard_rabbit_password', 'XXX'),
ssl_cert_file_contents => hiera('storyboard_ssl_cert_file_contents', 'XXX'), ssl_cert_file_contents => hiera('storyboard_ssl_cert_file_contents', 'XXX'),
ssl_key_file_contents => hiera('storyboard_ssl_key_file_contents', 'XXX'), ssl_key_file_contents => hiera('storyboard_ssl_key_file_contents', 'XXX'),
ssl_chain_file_contents => hiera('storyboard_ssl_chain_file_contents', 'XXX') ssl_chain_file_contents => hiera('storyboard_ssl_chain_file_contents', 'XXX'),
valid_oauth_clients => [
$::fqdn,
'docs-draft.openstack.org',
],
} }
} }

2
modules/openstack_project/manifests/storyboard.pp
View File

@@ -12,6 +12,7 @@ class openstack_project::storyboard(
$ssl_chain_file_contents = undef, $ssl_chain_file_contents = undef,
$openid_url = 'https://login.launchpad.net/+openid', $openid_url = 'https://login.launchpad.net/+openid',
$project_config_repo = '', $project_config_repo = '',
$valid_oauth_clients = [],
) { ) {
class { 'project_config': class { 'project_config':
@@ -44,6 +45,7 @@ class openstack_project::storyboard(
'https://storyboard.openstack.org', 'https://storyboard.openstack.org',
'http://docs-draft.openstack.org', 'http://docs-draft.openstack.org',
], ],
valid_oauth_clients => $valid_oauth_clients,
cors_max_age => 3600, cors_max_age => 3600,
openid_url => $openid_url, openid_url => $openid_url,
mysql_host => $mysql_host, mysql_host => $mysql_host,