53 lines
1.9 KiB
YAML
Executable File
53 lines
1.9 KiB
YAML
Executable File
---
|
|
- name: Render Dex values without a cluster or real secrets
|
|
hosts: localhost
|
|
connection: local
|
|
gather_facts: false
|
|
vars:
|
|
role_path: /roles/ansible-role-dex
|
|
tasks:
|
|
- name: Load defaults
|
|
ansible.builtin.include_vars: ../defaults/main.yml
|
|
- name: Set fake isolated credentials
|
|
ansible.builtin.set_fact:
|
|
dex_postgres_password: fixture-not-a-real-password
|
|
dex_ldap_bind_password: fixture-not-a-real-password
|
|
dex_matrix_client_enabled: true
|
|
matrix_dex_oidc_client_id: matrix-fixture
|
|
matrix_dex_oidc_client_secret: fixture-not-a-real-client-secret
|
|
dex_theme_enabled: true
|
|
- name: Render default values
|
|
ansible.builtin.template:
|
|
src: ../templates/values.yml.j2
|
|
dest: /tmp/dex-values.yml
|
|
mode: "0600"
|
|
- name: Set optional settings
|
|
ansible.builtin.set_fact:
|
|
dex_theme_enabled: false
|
|
dex_matrix_client_enabled: false
|
|
dex_ldap_insecure_no_ssl: false
|
|
dex_ldap_start_tls: true
|
|
dex_ldap_root_ca: /etc/dex-ca/ldap.pem
|
|
dex_ca_secret_name: ldap-ca
|
|
dex_env_secret_name: dex-client-secrets
|
|
dex_static_clients:
|
|
- id: www-membership
|
|
name: Example Membership
|
|
secretEnv: WWW_DEX_CLIENT_SECRET
|
|
redirectURIs: [https://www.example.com/members/oidc/callback/]
|
|
- name: Render optional values
|
|
ansible.builtin.template:
|
|
src: ../templates/values.yml.j2
|
|
dest: /tmp/dex-values-optional.yml
|
|
mode: "0600"
|
|
- name: Set empty optional lists
|
|
ansible.builtin.set_fact:
|
|
dex_ca_secret_name: ""
|
|
dex_env_secret_name: ""
|
|
dex_static_clients: []
|
|
- name: Render minimal values
|
|
ansible.builtin.template:
|
|
src: ../templates/values.yml.j2
|
|
dest: /tmp/dex-values-minimal.yml
|
|
mode: "0600"
|