#9280 Create and OIDC token for Testing Farm
Closed: Fixed 3 years ago by pingou. Opened 3 years ago by mvadkert.

We want to be able to connect to ODCS for our CI workers, for that we need an automation account and correct permissions to create ODCS repos for modules and builds (which we need to be able to test).

Name of the account: testing-farm
My GPG key: http://keys.gnupg.net/pks/lookup?search=0x7B5B2E95


I will cover the ODCS configuration part once the token is generated, but I don't know how the token is generated :).

I will cover the ODCS configuration part once the token is generated, but I don't know how the token is generated :).

It is documented at:
https://fedora-infra-docs.readthedocs.io/en/latest/sysadmin-guide/sops/ipsilon.html#common-actions

Basically, we need the list of scope allowed for this token

Metadata Update from @mobrien:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: low-trouble, medium-gain, ops

3 years ago

I believe the scopes from ODCS perspective should be:

I will wait for @mvadkert if he needs also some additional scopes for other services. See https://fedoraproject.org/wiki/Infrastructure/Authentication#Scopes for more info.

Metadata Update from @pingou:
- Issue assigned to pingou

3 years ago

The OIDC token has been sent by (encrypted) email.

Let us know if you need anything else! :)

Metadata Update from @pingou:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Done