herve4m.quay.quay_team_oidc (1.2.0) — module

Install collection

Install with ansible-galaxy collection install herve4m.quay:==1.2.0

Add to requirements.yml

  collections:
    - name: herve4m.quay
      version: 1.2.0

Description

Synchronize and unsynchronize teams in organizations with OIDC groups.

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Ensure team operators exists before activating OIDC synchronization
  herve4m.quay.quay_team:
    name: operators
    organization: production
    role: creator
    # Only robot accounts can be added to a team you prepare for OIDC
    # synchronization. User accounts that you might add are removed when the
    # synchronization is activated
    members:
      - production+automationrobot
    append: false
    state: present
    quay_host: https://quay.example.com
    quay_token: vgfH9zH5q6eV16Con7SvDQYSr0KPYQimMHVehZv7

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Ensure team operators is synchronized with the op1 OIDC group
  herve4m.quay.quay_team_oidc:
    name: operators
    organization: production
    sync: true
    group_name: op1
    quay_host: https://quay.example.com
    quay_token: vgfH9zH5q6eV16Con7SvDQYSr0KPYQimMHVehZv7

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Ensure team operators is not synchronized anymore with an OIDC group
  herve4m.quay.quay_team_oidc:
    name: operators
    organization: production
    sync: false
    quay_host: https://quay.example.com
    quay_token: vgfH9zH5q6eV16Con7SvDQYSr0KPYQimMHVehZv7

Inputs

    
name:
    description:
    - Name of the team to synchronize or unsynchronize with an OIDC group. That team must
      exist (see the M(herve4m.quay.quay_team) module to create it).
    required: true
    type: str

sync:
    default: true
    description:
    - If C(yes), then the team members are retrieved from the OIDC group that you define
      in I(group_name). The pre-existing members are removed from the team before the
      synchronization process starts. Existing robot account members are not removed.
    - If C(no), then the synchronization from OIDC is disabled.
    type: bool

quay_host:
    default: http://127.0.0.1
    description:
    - URL for accessing the API. U(https://quay.example.com:8443) for example.
    - If you do not set the parameter, then the module uses the C(QUAY_HOST) environment
      variable.
    - If you do no set the environment variable either, then the module uses the U(http://127.0.0.1)
      URL.
    type: str

group_name:
    description:
    - OIDC group name.
    - I(group_name) is required when I(sync) is C(yes).
    type: str

quay_token:
    description:
    - OAuth access token for authenticating against the API.
    - If you do not set the parameter, then the module tries the C(QUAY_TOKEN) environment
      variable.
    - Mutually exclusive with I(quay_username) and I(quay_password).
    type: str

organization:
    description:
    - Name of the organization for the team. That organization must exist.
    required: true
    type: str

quay_password:
    description:
    - The password to use for authenticating against the API.
    - If you do not set the parameter, then the module tries the C(QUAY_PASSWORD) environment
      variable.
    - If you set I(quay_password), then you also need to set I(quay_username).
    - Mutually exclusive with I(quay_token).
    type: str

quay_username:
    description:
    - The username to use for authenticating against the API.
    - If you do not set the parameter, then the module tries the C(QUAY_USERNAME) environment
      variable.
    - If you set I(quay_username), then you also need to set I(quay_password).
    - Mutually exclusive with I(quay_token).
    type: str

validate_certs:
    aliases:
    - verify_ssl
    default: true
    description:
    - Whether to allow insecure connections to the API.
    - If C(no), then the module does not validate SSL certificates.
    - If you do not set the parameter, then the module tries the C(QUAY_VERIFY_SSL) environment
      variable (C(yes), C(1), and C(True) mean yes, and C(no), C(0), C(False), and no
      value mean no).
    type: bool