bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(cassandra): mirror sso tester groups

Browse Source
This commit is contained in:
jenkins 2026-07-25 02:02:20 -03:00
parent 5bedae374d
commit 6ef1cfba2e
1 changed files with 25 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml
View File

@ -1,11 +1,11 @@
# services/keycloak/bootstrap-jobs/cassandra-realm-ensure-job.yaml # services/keycloak/bootstrap-jobs/cassandra-realm-ensure-job.yaml
# One-off job for sso/cassandra-realm-ensure-1. # One-off job for sso/cassandra-realm-ensure-3.
# Purpose: create the Cassandra realm, groups, OIDC client, SMTP settings, and Vault client secret. # Purpose: create the Cassandra realm, groups, OIDC client, SMTP settings, and Vault client secret.
# Keep suspended until Cassandra Vault paths/policies have reconciled, then unsuspend once. # Keep suspended until Cassandra Vault paths/policies have reconciled, then unsuspend once.
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: cassandra-realm-ensure-2 name: cassandra-realm-ensure-3
namespace: sso namespace: sso
spec: spec:
suspend: false suspend: false
@ -70,7 +70,7 @@ spec:
- name: KEYCLOAK_SMTP_FROM_NAME - name: KEYCLOAK_SMTP_FROM_NAME
value: Cassandra value: Cassandra
- name: CASSANDRA_PUBLIC_REPLAY_USERS - name: CASSANDRA_PUBLIC_REPLAY_USERS
value: veles-dev,cassandra-dev,daniel-test,viktor-test value: veles-dev,daniel-test,viktor-test
command: ["/bin/sh", "-c"] command: ["/bin/sh", "-c"]
args: args:
- | - |
@ -260,15 +260,35 @@ spec:
if status not in (200, 204): if status not in (200, 204):
raise SystemExit(f"User group update failed for {username}: status={status} body={body}") raise SystemExit(f"User group update failed for {username}: status={status} body={body}")
ensure_group("alpha") alpha_group = ensure_group("alpha")
ensure_group("admin") ensure_group("admin")
ensure_group(os.environ["CASSANDRA_TESTER_GROUP"]) tester_group = ensure_group(os.environ["CASSANDRA_TESTER_GROUP"])
public_replay_group = ensure_group("public-replay") public_replay_group = ensure_group("public-replay")
pilot_groups = {
"pilot-skill-proficient": ensure_group("pilot-skill-proficient"),
"pilot-skill-adept": ensure_group("pilot-skill-adept"),
"pilot-skill-veteran": ensure_group("pilot-skill-veteran"),
"pilot-skill-expert": ensure_group("pilot-skill-expert"),
"pilot-skill-master": ensure_group("pilot-skill-master"),
"all-pilot-skill-level": ensure_group("all-pilot-skill-level"),
"codex-cli-fallback": ensure_group("codex-cli-fallback"),
}
for username in os.environ.get("CASSANDRA_PUBLIC_REPLAY_USERS", "").split(","): for username in os.environ.get("CASSANDRA_PUBLIC_REPLAY_USERS", "").split(","):
username = username.strip() username = username.strip()
if username: if username:
ensure_user_group(username, public_replay_group) ensure_user_group(username, public_replay_group)
ensure_user_group("veles-dev", tester_group)
ensure_user_group("veles-dev", pilot_groups["all-pilot-skill-level"])
ensure_user_group("veles-dev", pilot_groups["codex-cli-fallback"])
for username in ("daniel-test", "viktor-test"):
ensure_user_group(username, alpha_group)
ensure_user_group(username, tester_group)
ensure_user_group(username, pilot_groups["pilot-skill-proficient"])
ensure_user_group(username, pilot_groups["pilot-skill-adept"])
ensure_user_group(username, pilot_groups["pilot-skill-veteran"])
ensure_user_group(username, pilot_groups["codex-cli-fallback"])
status, clients = request( status, clients = request(
"GET", "GET",
f"{base_url}/admin/realms/{realm}/clients?clientId={urllib.parse.quote(client_id)}", f"{base_url}/admin/realms/{realm}/clients?clientId={urllib.parse.quote(client_id)}",