samply/bridgehead
1
0
Fork 0
mirror of https://github.com/samply/bridgehead.git synced 2026-10-13 01:06:41 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,091 Commits 70 Branches 0 Tags
00192eaefc9219c8f03fbf0a08efbeb5cfc5735d
Commit Graph
121 Commits
Author SHA1 Message Date
Pierre DelpyandMartin Lablans 00192eaefc Secret Sync for the config repo token, one-time enrollment code, check output (#401) 
* cce: Fetch the config repository token via Secret Sync

* Keep the Secret Sync GitLab token across reboots and outages

* Install site configuration with a one-time enrollment code

* Align the itcc and dhki cases in prepare-system.sh

* Report an unreachable broker instead of a clock skew during install

* Show bridgehead check results as OK, WARN or CRIT and run them during install

* Refresh the config repo token before bridgehead check fetches

* Skip Secret Sync until the private key and root certificate exist

* Indent the case block in prepare-system.sh with tabs only

* Hide the config repo URL, token and enrollment code from other local users

* remove the unreachable second dhki case

---------

Co-authored-by: Martin Lablans <m.lablans@dkfz-heidelberg.de>
 2026-10-08 14:16:00 +02:00
Jan 7a8664a636 fix project check in secret_sync_gitlab_token (#378) 2026-04-10 11:38:28 +02:00
Jan 85cfc2514d update beam proxy server used for oauth enrollment (#366) 2025-12-11 11:33:29 +01:00
djuarezgf 58d3e6487c feat: add nNGM project (#340) 2025-11-06 16:47:50 +01:00
Pierre Delpyp.delpy@dkfz-heidelberg.deJan
 		230ff1debb feat: add PSCC 
* add pscc and prepare lens2 deployment
---------

Co-authored-by: p.delpy@dkfz-heidelberg.de <p.delpy@dkfz-heidelberg.de>
Co-authored-by: Jan <59206115+Threated@users.noreply.github.com>
 2025-11-05 15:18:00 +01:00
Jan b31f2aff7d fix: don't run secret sync for minimal (#349) 2025-10-15 10:45:42 +02:00
Jan eab7700404 feat: add bridgehead check command (#342) 2025-09-30 11:47:51 +02:00
djuarezgfandJan 8414604257 feat: migrate OIDC Configuration from Keycloak to Authentik (#327) 
* Change: Authentik instead of Keycloak in CCP

Co-authored-by: Jan <59206115+Threated@users.noreply.github.com>

---------

Co-authored-by: Jan <59206115+Threated@users.noreply.github.com>
 2025-07-04 14:26:19 +02:00
Jan 4c6f9e0f13 feat: remove local rstudio (#322) 2025-06-27 10:55:53 +02:00
Martin Lablans 9782bf66b6 Code review: Move to /tmp/bridgehead/... 2025-05-08 09:18:02 +02:00
Tim Schumacher 87f0e8ad7f Use temp directory for secret sync cache 2025-05-08 09:18:02 +02:00
Tim Schumacher 3144ee5214 Fix GitLab token syncing for BBMRI 2025-03-31 11:08:59 +02:00
Tim Schumacher 83555540f5 chore: update central Secret Sync proxy ID (#280) 2025-03-10 12:08:19 +01:00
Tim Schumacher ecb29830e4 Send the origin of /etc/bridgehead repo to Secret Sync 
This is to anticipate an upcoming change in Secret Sync that will allow it to support multiple GitLab servers, e.g. verbis GitLab and BBMRI GitLab.
 2025-03-05 11:04:22 +01:00
Jan 1ad73d8f82 fix: properly load oidc secrets (#267) 2025-01-29 10:59:27 +01:00
Martin LablansTim SchumacherJanTim Schumacher
 		615990b92a Use secret-sync for gitpassword (#257) 
---------

Co-authored-by: Tim Schumacher <tim@tschumacher.net>
Co-authored-by: Jan <59206115+Threated@users.noreply.github.com>
Co-authored-by: Tim Schumacher <tim.schumacher@dkfz-heidelberg.de>
 2025-01-28 14:53:49 +01:00
patrickskowronekdkfz 3312ca8a64 feat: added blaze cql cache (#236) 2024-10-10 14:34:28 +02:00
Pierre Delpy 65359c2ee6 Feature/pilot projects backup (#227) 
add pilot projects
 2024-09-12 10:04:53 +02:00
p.delpy@dkfz-heidelberg.de cfa85067f0 initialize develop; add itcc and cce 2024-07-25 12:44:39 +02:00
janskiba a018104e0b feat: Add logs command for journalctl and rename old one to docker-logs 2024-06-05 12:35:44 +00:00
janskiba f9a9baf13d fix: Generate public oidc client when there is no private client 2024-04-15 15:53:27 +02:00
Pierre Delpy 7418861e8c fix typo functions.sh 2024-04-15 09:08:56 +02:00
janskiba 2831fb9a22 fix: Make math work on bash 4.2 2024-04-02 14:36:23 +02:00
patrickskowronekdkfz 4fac079aec Merge branch 'main' into feature/datashield 2024-03-19 09:52:40 +01:00
djuarezgf 3180d0fd76 Replace | openssl rsautl -sign with | sha1sum | openssl pkeyutl -sign 2024-03-18 12:44:34 +01:00
djuarezgfandTobias Kussel 3a8df378a6 Update lib/functions.sh 
Co-authored-by: Tobias Kussel <TKussel@users.noreply.github.com>
 2024-03-18 12:36:09 +01:00
Torben Brenner 6217e28590 fix: use always english output of free command 2024-03-15 11:48:25 +01:00
janskiba 1f17fad366 fix: Dont change ownership of all files under /tmp/bridgehead and /var/cache/bridgehead 2024-03-14 14:09:21 +00:00
Torben Brenner e1e523f1ac refactor: tune configuration of blaze according to system memory 2024-03-13 08:56:48 +01:00
janskiba 7478d804df refactor: Move vars to their setup files 2024-03-11 10:34:05 +00:00
janskiba db9692795a fix: Fix if syntrax 2024-02-27 12:47:33 +01:00
janskiba 74eb86f8af fix: Update permissions on update 2024-02-27 12:47:33 +01:00
juarez f72e7c7799 Changed: replace keycloak with oidc 2024-02-27 12:47:33 +01:00
juarez 2eb56e66c8 Integrate central Keycloak in Teiler 2024-02-27 12:47:33 +01:00
janskiba 64250d9d21 refactor: Use beam proxy directly as proxy 2024-02-27 12:47:33 +01:00
janskiba f3fa1ce712 fix: secret sync account for minimal override 2024-02-27 12:47:33 +01:00
janskiba 4a9427a1bd fix: Use forward proxy for secret sync 2024-02-27 12:47:33 +01:00
janskiba 51e8888fe1 Use latest jq 2024-02-27 12:47:32 +01:00
janskiba 224c1472b2 fix: Correctly set file permissions 2024-02-27 12:47:32 +01:00
janskiba 01d3a38e18 refactor: Use jq from docker 2024-02-27 12:47:32 +01:00
janskiba c60c9fc4b4 fix: Use strong pw for opal 2024-02-27 12:47:32 +01:00
janskiba f0a05b12ad fix: Generate stable passwords 2024-02-27 12:47:32 +01:00
Jan fa141f8e86 fix: undo permission changes on startup 2024-02-27 12:47:31 +01:00
Jan 2a024e751d fix: only change permissions on related files 2024-02-27 12:47:31 +01:00
janskiba b34f4f2a0f fix: chown syntax 2024-02-27 12:47:31 +01:00
janskiba b73ddc883c fix: Change permissions on new bridgehead dirs 2024-02-27 12:47:31 +01:00
janskiba 9f31e950a5 fix: generate the right beam connect mappings 2024-02-27 12:47:31 +01:00
janskiba 5d4d0405ab fix: public client generation 2024-02-27 12:47:14 +01:00
janskiba b44a208e08 Better redirect url handeling 2024-02-27 12:47:13 +01:00
juarez 163650f592 Add generate_password function 2024-02-27 12:47:13 +01:00