Add condor credmon package to headnodes

files/llo/etc/condor/config.d/40-oauth-tokens.conf

+# Some well known OAuth providers already contain token and authorization URLs
+# in the default HTCondor config:
+
+# Box.com client
+#BOX_CLIENT_ID = box-application-client-id
+#BOX_CLIENT_SECRET_FILE = /path/to/file/containing/client-secret
+#BOX_RETURN_URL_SUFFIX = /return/box
+
+# Google Drive client
+#GDRIVE_CLIENT_ID = google-application-client-id
+#GDRIVE_CLIENT_SECRET_FILE = /path/to/file/containing/client-secret
+#GDRIVE_RETURN_URL_SUFFIX = /return/gdrive
+
+# "Other" OAuth providers require the admin to provide the token and
+# authorization URLs. Use the following as a template for setting up other
+# providers (e.g. scitokens providers):
+
+#OTHER_CLIENT_ID = other-application-client-id
+#OTHER_CLIENT_SECRET_FILE = /path/to/file/containing/client-secret
+#OTHER_RETURN_URL_SUFFIX = /return/other
+#OTHER_AUTHORIZATION_URL = https://api.other.com/oauth2/authorize
+#OTHER_TOKEN_URL = https://api.other.com/oauth2/token

manifests/condor/schedd.pp

@@ -4,6 +4,10 @@ class ligoprofile::condor::schedd (
     $localfilestore = lookup('ligoprofile::condorfilestore')
     $untrackedfilestore = lookup('ligoprofile::untrackedfilestore')
 
+    package {'condor_credmon_oauth':
+        ensure => lookup('ligoprofile::condor::schedd::condor_version'),
+    }
+
     class {'::condor':
         package_ensure => "${condor_version}",
         localfilestore => "${localfilestore}",
@@ -164,5 +168,7 @@ class ligoprofile::condor::schedd (
     condor::configfile { '20-batchnode': ensure => absent, filestore => "${localfilestore}"}
     condor::configfile { '20-schedd': filestore => "${localfilestore}"}
     condor::configfile { '20-misc': filestore => "${localfilestore}"}
-    condor::configfile { '40-oauth-credmon': filestore => "${localfilestore}"}
+    condor::configfile { '40-oauth-credmon': ensure => absent, filestore => "${localfilestore}"}
+    condor::configfile { '40-oauth-credmon.conf': filestore => "${localfilestore}"}
+    condor::configfile { '40-oauth-tokens.conf': filestore => "${localfilestore}"}
 }