library/roles/smartgears/smartgears: Changes to the container.xml template and to the default variables to manage the case when we need authorization for all the VREs.

smartgears/smartgears/defaults/main.yml

@@ -23,6 +23,18 @@ smartgears_mode: online
 smartgears_application_mode: online
 # Production infra
 smartgears_infrastructure_name: "d4science.research-infrastructures.eu"
+# Production VOs
+smartgears_production_vo:
+  - '/{{ smartgears_infrastructure_name }}'
+  - '/{{ smartgears_infrastructure_name }}/FARM'
+  - '/{{ smartgears_infrastructure_name }}/SoBigData'
+  - '/{{ smartgears_infrastructure_name }}/SmartArea'
+  - '/{{ smartgears_infrastructure_name }}/gCubeApps'
+  - '/{{ smartgears_infrastructure_name }}/D4research'
+# Set to 'true' or 'false'. Pay attention to the case
+smartgears_authorized_on_all_scopes: 'false'
+smartgears_scopes:
+  - '/{{ smartgears_infrastructure_name }}'
 smartgears_hostname: '{{ ansible_fqdn }}'
 smartgears_country: it
 smartgears_location: pisa
@@ -36,8 +48,6 @@ smartgears_loglevel: WARN
 
 smartgears_tomcat_contexts: [ 'whn-manager' ]
 
-smartgears_scopes:
-  - '/{{ smartgears_infrastructure_name }}'
 
 # The iptables rules use this
 http_port: '{{ smartgears_http_port }}'

smartgears/smartgears/templates/container.xml.j2

@@ -24,6 +24,9 @@
 	<longitude>{{ smartgears_longitude }}</longitude>
   </site>
 
+
+<authorizeChildrenContext>{{ smartgears_authorized_on_all_scopes }}</authorizeChildrenContext>
+
   <property name='SmartGearsDistributionBundle' value='UnBundled' />
   <property name='SmartGearsDistribution' value='{{ smartgears_distribution_version }}' />
   <publication-frequency>{{ smartgears_publication_frequency }}</publication-frequency>