ipsilon: Finish up openidc config

roles/ipsilon/tasks/main.yml

@@ -36,6 +36,51 @@
     group: ipsilon
   notify: Restart ipsilon-container
 
+- name: Fix SELinux contexts from config directory
+  community.general.sefcontext:
+    path: /etc/ipsilon(/.*)?
+    setype: container_file_t
+  when: ansible_selinux_python_present
+
+- name: Get subuid number
+  ansible.builtin.command:
+    argv:
+      - awk
+      - "-F:"
+      - '{ if ($1 == "ipsilon") print $2 + 899 }'
+      - /etc/subuid
+  changed_when: false
+  register: subuid
+
+- name: Get subgid number
+  ansible.builtin.command:
+    argv:
+      - awk
+      - "-F:"
+      - '{ if ($1 == "ipsilon") print $2 + 899 }'
+      - /etc/subgid
+  changed_when: false
+  register: subgid
+
+- name: Create config directory
+  ansible.builtin.file:
+    path: /etc/ipsilon
+    state: directory
+    mode: "0750"
+    owner: root
+    group: ipsilon
+    setype: _default
+
+- name: Copy OIDC static config
+  ansible.builtin.copy:
+    dest: /etc/ipsilon/openidc-static.conf
+    src: "{{ ansible_private }}/files/ipsilon/openidc-static.conf"
+    mode: "0600"
+    owner: "{{ subuid.stdout }}"
+    group: "{{ subgid.stdout }}"
+    setype: _default
+  notify: Restart ipsilon-container
+
 - name: Get container source
   ansible.builtin.git:
     dest: /usr/local/src/docker-ipsilon