infra/communishift
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
CommunishiftAuthorization Operator
19 commits 1 branch 0 tags 11 MiB
  • Makefile 52.8%
  • Python 37.2%
  • Dockerfile 10%
Find a file
Exact
David Kirwan a5f62917bf
 updated README 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-05-06 17:49:54 +01:00
CommunishiftAuthorization Add basic Zuul configuration 2022-10-05 12:49:24 +02:00
.flake8 Add basic Zuul configuration 2022-10-05 12:49:24 +02:00
.pre-commit-config.yaml Add basic Zuul configuration 2022-10-05 12:49:24 +02:00
.zuul.yaml Add basic Zuul configuration 2022-10-05 12:49:24 +02:00
LICENSE communishift: Added MIT Licence 2022-08-25 11:48:14 +01:00
pyproject.toml Add basic Zuul configuration 2022-10-05 12:49:24 +02:00
README.md updated README 2026-05-06 17:49:54 +01:00

README.md

Communishift Authorization Operator

Ansible Operator SDK that syncs FASJSON group membership into OpenShift user.openshift.io/v1 Group objects (names {groupname}-admins). Reconcile runs on CR changes and every 20m; see CommunishiftAuthorization/watches.yaml.

Operator sources, Makefile, and Molecule live under CommunishiftAuthorization/. Configure via Ansible defaults in roles/communishiftauthorization/defaults/main.yml; the cluster needs a Kerberos keytab at {{ communishift_keytab_path }}/communishift-authorization-keytab and a Secret (see defaults for namespace/name) with communishift-ocp-api-token and communishift-ocp-api-host.

cd CommunishiftAuthorization
ansible-galaxy collection install -r requirements.yml
make install && make deploy && make run   # logged in via oc/kubectl

Tests: molecule test (needs KUBECONFIG and cluster; see molecule/default/).

Licensed under MIT.