From c386a69fe13be0dd174da5d0bbb7add6020ab9c3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Franti=C5=A1ek=20Dvo=C5=99=C3=A1k?= <valtri@civ.zcu.cz> Date: Thu, 4 Apr 2024 11:30:30 +0000 Subject: [PATCH] =?UTF-8?q?Switch=20to=20G=C3=89ANT=20AAI?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- cesnet-central/deployments/central.yaml | 20 ++++++-------------- 1 file changed, 6 insertions(+), 14 deletions(-) diff --git a/cesnet-central/deployments/central.yaml b/cesnet-central/deployments/central.yaml index 138fa0e..6c2e893 100644 --- a/cesnet-central/deployments/central.yaml +++ b/cesnet-central/deployments/central.yaml @@ -83,26 +83,18 @@ hub: # - cesnet/playbooks/templates/binder.yaml # - documentation/content/en/users/dev-env/notebooks/_index.md allowed_groups: - - urn:mace:egi.eu:group:vo.access.egi.eu:role=member#aai.egi.eu - - urn:mace:egi.eu:group:vo.notebooks.egi.eu:role=member#aai.egi.eu - - urn:mace:egi.eu:www.egi.eu:fedcloud-users:member@egi.eu - - urn:mace:egi.eu:www.egi.eu:techsolutions:member@egi.eu - # changed 2022-10 - - urn:mace:egi.eu:group:fedcloud-users#sso.egi.eu - - urn:mace:egi.eu:group:supplier-notebooks#sso.egi.eu - - urn:mace:egi.eu:group:techsolutions#sso.egi.eu - - urn:mace:egi.eu:group:notebooks-support#sso.egi.eu + - urn:geant:eosc-federation.eu:testing:group:eosc#testing.eosc-federation.eu auto_login: true - claim_groups_key: "eduperson_entitlement" + claim_groups_key: "entitlements" EGICheckinAuthenticator: checkin_host: "{{ secret['checkin_host'] }}" - authorize_url: "https://{{ secret['checkin_host'] }}/auth/realms/egi/protocol/openid-connect/auth" - token_url: "https://{{ secret['checkin_host'] }}/auth/realms/egi/protocol/openid-connect/token" - userdata_url: "https://{{ secret['checkin_host'] }}/auth/realms/egi/protocol/openid-connect/userinfo" + authorize_url: "https://{{ secret['checkin_host'] }}/OIDC/authorization" + token_url: "https://{{ secret['checkin_host'] }}/OIDC/token" + userdata_url: "https://{{ secret['checkin_host'] }}/OIDC/userinfo" client_id: "{{ secret['client_id'] }}" client_secret: "{{ secret['client_secret'] }}" oauth_callback_url: "https://eosc.zcu.cz/hub/oauth_callback" - scope: ["openid", "profile", "email", "offline_access", "eduperson_scoped_affiliation", "eduperson_entitlement"] + scope: ["openid", "profile", "email", "entitlements"] username_key: "sub" JupyterHub: admin_access: true -- GitLab