{"id":24649772,"url":"https://github.com/archlinux/gluebuddy","last_synced_at":"2025-06-28T06:06:38.088Z","repository":{"id":44898660,"uuid":"266622693","full_name":"archlinux/gluebuddy","owner":"archlinux","description":"A secure helper daemon that watches several aspects of the Arch Linux infrastructure and makes sure that certain conditions are met (read-only mirror)","archived":false,"fork":false,"pushed_at":"2022-06-07T20:20:25.000Z","size":179,"stargazers_count":12,"open_issues_count":0,"forks_count":8,"subscribers_count":13,"default_branch":"main","last_synced_at":"2025-01-25T17:19:00.242Z","etag":null,"topics":["rust"],"latest_commit_sha":null,"homepage":"https://gitlab.archlinux.org/archlinux/gluebuddy","language":"Rust","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/archlinux.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-05-24T20:50:47.000Z","updated_at":"2024-10-21T20:03:37.000Z","dependencies_parsed_at":"2022-09-16T03:41:04.394Z","dependency_job_id":null,"html_url":"https://github.com/archlinux/gluebuddy","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/archlinux/gluebuddy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/archlinux%2Fgluebuddy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/archlinux%2Fgluebuddy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/archlinux%2Fgluebuddy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/archlinux%2Fgluebuddy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/archlinux","download_url":"https://codeload.github.com/archlinux/gluebuddy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/archlinux%2Fgluebuddy/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262382744,"owners_count":23302298,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["rust"],"created_at":"2025-01-25T17:18:46.851Z","updated_at":"2025-06-28T06:06:38.070Z","avatar_url":"https://github.com/archlinux.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"# gluebuddy\n\nA secure helper daemon that watches several aspects of the Arch Linux infractructure and makes sure that certain conditions are met.\n\nIt glues Arch together. :)\n\n## Usage\n\nGluebuddy requires the following environment variables to be set:\n\n* GLUEBUDDY_GITLAB_TOKEN - Gitlab bot personal access token\n* GLUEBUDDY_GITLAB_BOT_USERS - Optionally set gitlab bot users separated with commas\n* GLUEBUDDY_KEYCLOAK_USERNAME - keycloak admin username\n* GLUEBUDDY_KEYCLOAK_PASSWORD - keycloak admin password\n* GLUEBUDDY_KEYCLOAK_REALM - Keycloak realm\n* GLUEBUDDY_KEYCLOAK_URL - Keycloak base url (without trailing /)\n\n## Service account Keycloak\n\nTo not use the admin user for obtaining the users/groups a service account can be used which needs to be created in Keycloak.\n\nCreate a new client, go to `Clients` and click `Create`:\n* enter a client ID \n* make sure client protocl is set to `openid-connect`\n\nIn the client settings configure:\n* Set Access Type to `Confidential`\n* Set `Service Accounts Enabled` to `On`\n* Specify a `redirect_uri` even though it is not required\n* Click `Save` to save the changes\n\nGo to the `Service Account Roles` tab, select `realm-management` in the `Client roles` dropdown and add:\n* query-groups\n* view-users\n\nThis allows the service account to view users and groups we need in gluebuddy, the username is the `client ID` and the password is the client secret which can be found in the `Credentials` tab.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Farchlinux%2Fgluebuddy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Farchlinux%2Fgluebuddy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Farchlinux%2Fgluebuddy/lists"}