1. 12 Jan, 2022 1 commit
    • Jelle van der Waa's avatar
      Add bluebuddy client · 65a1b33a
      Jelle van der Waa authored
      The gluebuddy client is required for gluebuddy to retrieve users and
      groups membership without being able to change other keycloak data. The
      realm-management roles cannot be assigned yet via keycloak as it does
      not know about the roles and realm-management client.
      65a1b33a
  2. 29 Oct, 2021 1 commit
  3. 04 Sep, 2021 2 commits
  4. 07 Jul, 2021 1 commit
    • Evangelos Foutras's avatar
      misc/get_key.py: load vault file without chdir'ing · faba3a3d
      Evangelos Foutras authored
      Now that misc/get_key.py checks if the vault file passed to it exists,
      we cannot pass paths only resolvable from the root directory. Instead,
      use paths that make sense relative to the current directory and avoid
      calling chdir when loading the vault file.
      
      Fixes: 77542146 ("Rewrite get_key.py to use click instead of typer")
      faba3a3d
  5. 06 Jul, 2021 1 commit
  6. 15 Apr, 2021 2 commits
  7. 08 Apr, 2021 1 commit
    • Jelle van der Waa's avatar
      Restrict Grafana access to DevOps · a434870b
      Jelle van der Waa authored
      As our grafana now contains Loki logs, we don't want non devops to view
      logs which potentially contain sensitive data. As Grafana does not have
      a system to easily restrict data sources to roles we use Keycloak.
      a434870b
  8. 01 Feb, 2021 1 commit
    • Jelle van der Waa's avatar
      Add hedgedoc as new service · 3124cfd9
      Jelle van der Waa authored
      This adds a collaborative markdown editor as newly offered service which
      is available via login for all Arch Linux Staff with an option to allow
      anonymous edits by users (not default). Users are managed via keycloak
      and require the Staff role to be allowed in, non staff keycloak users
      currently will receive an internal server error due to an upstream
      issue.
      3124cfd9
  9. 24 Dec, 2020 1 commit
  10. 11 Dec, 2020 1 commit
  11. 22 Oct, 2020 1 commit
  12. 22 Sep, 2020 4 commits
  13. 10 Sep, 2020 1 commit
    • Jelle van der Waa's avatar
      Add a new Support groups · 76e334c6
      Jelle van der Waa authored
      Expand the Support group with subgroups for the Wiki, Forum, Security
      Tracker and Archweb. The subgroups are just a placeholder for groups for
      the roles which a user can be in for the service. New onboarded users
      should be assigned to correct groups for their Support staff team.
      76e334c6
  14. 09 Sep, 2020 1 commit
  15. 08 Sep, 2020 4 commits
  16. 29 Aug, 2020 1 commit
  17. 27 Aug, 2020 1 commit
  18. 20 Aug, 2020 2 commits
  19. 19 Aug, 2020 2 commits
  20. 18 Aug, 2020 1 commit
    • Jelle van der Waa's avatar
      Add a prometheus exporter to Keycloak · 5ac750c9
      Jelle van der Waa authored
      Install keycloak-metrics-spi and configure it to provide prometheus
      endpoints available as auth/realms/$realm/metrics. The prometheus
      metrics are behind basic_auth as some metrics might be sensitive or can
      be used by attackers. #23
      5ac750c9
  21. 30 Jul, 2020 1 commit
  22. 17 Jul, 2020 2 commits
  23. 03 Jun, 2020 1 commit
  24. 27 May, 2020 1 commit
  25. 26 May, 2020 2 commits
  26. 25 May, 2020 1 commit
  27. 24 May, 2020 1 commit
  28. 23 May, 2020 1 commit