Tobias Wüst
256a82df1f
Rename roles/OpnForm → roles/opnform so the role resolves as
digitalboard.core.opnform (Ansible collection convention is
lowercase). Update tests/test.yml reference accordingly.
Add automated admin user creation via POST /api/register, gated on
opnform_admin_email + opnform_admin_password. Idempotent through a
prior login probe. Without these vars the manual setup page flow is
preserved.
Add automated OIDC IdentityConnection setup via the per-workspace
/api/open/workspaces/{id}/oidc-connections endpoint, gated on
opnform_oidc_enabled. Hard-coupled to the admin bootstrap (the API
requires an authenticated admin token); validation block fails fast
if OIDC is enabled without admin credentials. Supports both an
explicit opnform_oidc_group_role_mappings list and a fallback
opnform_oidc_admin_group convenience var.
Convert opnform_oidc_scopes from space-separated string to YAML list
to match OpnForm's API expectation. Rewrite README "First login" and
"OIDC setup" sections to reflect that self-hosted OpnForm does not
ship a pre-seeded admin and to document the new bootstrap paths.
BREAKING CHANGE: opnform_oidc_scopes changed from space-separated
string to YAML list. Inventories that override it must update from
"openid profile email" to [openid, profile, email].
35 lines
No EOL
1.2 KiB
YAML
35 lines
No EOL
1.2 KiB
YAML
#SPDX-License-Identifier: MIT-0
|
|
galaxy_info:
|
|
author: your name
|
|
description: your role description
|
|
company: your company (optional)
|
|
|
|
# If the issue tracker for your role is not on github, uncomment the
|
|
# next line and provide a value
|
|
# issue_tracker_url: http://example.com/issue/tracker
|
|
|
|
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
|
# - BSD-3-Clause (default)
|
|
# - MIT
|
|
# - GPL-2.0-or-later
|
|
# - GPL-3.0-only
|
|
# - Apache-2.0
|
|
# - CC-BY-4.0
|
|
license: license (GPL-2.0-or-later, MIT, etc)
|
|
|
|
min_ansible_version: 2.2
|
|
|
|
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
|
# min_ansible_container_version:
|
|
|
|
galaxy_tags: []
|
|
# List tags for your role here, one per line. A tag is a keyword that describes
|
|
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
|
# remove the '[]' above, if you add tags to this list.
|
|
#
|
|
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
|
# Maximum 20 tags per role.
|
|
|
|
dependencies: []
|
|
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
|
# if you add dependencies to this list. |