Tiered LDAP groups

2026-10-29 14:24:47 -04:00
parent 4c1174df19
commit a56eec0b1c
9 changed files with 142 additions and 2 deletions
@@ -11,6 +11,9 @@
    - name: Supply nonsecret fixture settings
      ansible.builtin.set_fact:
        www_membership_image: registry.example.org/www-membership:release-test
+        www_membership_service_groups:
+          "0": ["cn=free-service,ou=groups,dc=example,dc=org"]
+          "2": ["cn=paid-service,ou=groups,dc=example,dc=org", "cn=second-service,ou=groups,dc=example,dc=org"]
        _www_membership_revision: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
        www_membership_environment: "{{ www_membership_environment | combine({'MEMBERSHIP_PUBLIC_URL': 'https://' ~ www_hostname, 'LDAP_BIND_DN': 'cn=membership,dc=example,dc=org', 'LDAP_PASSWORD_SCHEME': '{ARGON2}', 'EMAIL_HOST': 'smtp.example.org', 'STRIPE_PORTAL_CONFIGURATION': 'bpc_test'}) }}"
    - name: Render Apache proxy fixture