Federation - Create Partner Playbook

[thevabby]

Hi I am trying to use below playbook to create dummy partner but it fails with below error

• name: Create federation partners
  hosts: localServers
  connection: local
  gather_facts: no
  roles:
  • role: fed/create_federation_partners
    federations: testFederation
    partners:
    • name: TestPartner
      enabled: true
      role: op
      configuration:
      clientName: Test-App
      clientSecret: "ABCDEFG12345"
      clientId: Test-App
      redirectUris:
      - http://test.demo.com
      responseTypes:
      - id_token token
      allowRefreshGrant: no
      allowIntrospect: no
      scope:
      - openid
      preauthorizedScope:
      • openid

Error here

ERROR! conflicting action statements: isam, loop_control

The error appears to have been in '/etc/ansible/roles/fed/create_federation_partners/tasks/main.yml': line 23, column 3, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:

- openid

• name: Create federation partners
  ^ here

Please suggest/help.

I am sure I am doing some mistakes.

[svetterIO]

The inventory seems to have a little mistake (without testing it). The structure starts with top level federations and sub-elements "partners". Please check the sample provided with the playbook:
Example: OIDC connect provider and Test-App partner

    federations:
       - name: oidc-provider
         partners:
             - name: Test-App
               enabled: true
               role: op
               configuration:
                 clientName: Test-App
                 clientSecret: "ABCDEFG12345"
                 clientId: Test-App
                 redirectUris:
                   - http://test-app.demo.com
                 responseTypes:
                   - id_token token
                 allowRefreshGrant: no
                 allowIntrospect: no
                 scope:
                   - openid
                 preauthorizedScope:
                   - openid

Hopefully that helps.

[thevabby]

Thanks for above info, its still not working .. .I am using default role available in github repo.
I have not modified anything in my inventory. I guess I was trying to use incorrect role for creating SAML partner.

Please note I am also trying to create SAML partner using add_partner role, but I dont have a sample on how to use this role, Can you please suggest?

Thank you!