get proxy

Author: dciangot

tasks/main.yml

@@ -38,6 +38,7 @@
   with_items:
     - { source: 'templates/condor_config', dest: '/etc/condor/condor_config' }
     - { source: 'templates/get_proxy.py', dest: '/home/censtos/get_proxy.py' }
+    - { source: 'templates/get_proxy.sh', dest: '/home/censtos/get_proxy.sh' }
 
 - name: copy job example
   become: yes

templates/get_proxy.py

@@ -290,14 +290,16 @@ def generate_proxy(self):
 
 """Execute the get_proxy routine."""
 
+TOKEN = os.getenv("TOKEN")
+
 configuration = {
     'CREDENTIAL_ENDPOINT' : 'https://dodas-tts.cloud.cnaf.infn.it/api/v2/iam/credential',
     'IAM_ENDPOINT':'https://dodas-iam.cloud.cnaf.infn.it/',
     'TTS':'https://dodas-tts.cloud.cnaf.infn.it',
-    'IAM_CLIENT_ID': "{{ iam.client_id }}",
-    'IAM_CLIENT_SECRET': "{{ iam.client_secret }}",
+    'IAM_CLIENT_ID': "{{ tts.client_id }}",
+    'IAM_CLIENT_SECRET': "{{ tts.client_secret }}",
     'AUDIENCE' : 'https://dodas-tts.cloud.cnaf.infn.it',
-    'IAM_TOKEN': "{{ iam.token }}" }
+    'IAM_TOKEN': TOKEN }
 
 proxy_manager = ProxyManager(configuration)
 proxy_file = proxy_manager.generate_proxy()

templates/get_proxy.sh

@@ -0,0 +1,46 @@
+#!/bin/bash
+
+IAM_CLIENT_ID=dodas-demo
+IAM_CLIENT_SECRET=dodas-demo
+IAM_USER=
+
+IAM_CLIENT_ID={{ iam.client_id }}
+IAM_CLIENT_SECRET={{ iam.client_secret }}
+
+
+if [[ -z "${IAM_CLIENT_SECRET}" ]]; then
+  echo "Please provide a client secret setting the IAM_CLIENT_SECRET env variable."
+  exit 1;
+fi
+
+if [[ -z ${IAM_USER} ]]; then
+  read -p "Username: " IAM_USER
+fi
+
+echo -ne "Password:"
+read -s IAM_PASSWORD
+echo
+
+result=$(curl -s -L \
+-d client_id=${IAM_CLIENT_ID} \
+-d client_secret=${IAM_CLIENT_SECRET} \
+-d grant_type=password \
+-d username=${IAM_USER} \
+-d password=${IAM_PASSWORD} \
+-d scope="openid profile email offline_access" \
+${IAM_ENDPOINT:-https://dodas-iam.cloud.cnaf.infn.it/token}) #| tee /tmp/response | jq
+
+if [[ $? != 0 ]]; then
+  echo "Error!"
+  echo $result
+  exit 1
+fi
+
+echo $result 
+
+access_token=$(echo $result | jq -r .access_token)
+
+echo "export TOKEN=\"${access_token}\""
+export TOKEN="${access_token}"
+
+python /home/censtos/get_proxy.py