added tokensmith basic config file; update env file

Signed-off-by: Travis Cotton <trcotton@lanl.gov>

Author: travisbcotton

systemd/configs/openchami.env

@@ -36,6 +36,15 @@ SMD_DBUSER=smd-user
 SMD_DBOPTS=sslmode=disable
 SMD_JWKS_URL=http://opaal:3333/keys
 
+# Environemnt Variables
+TOKENSMITH_ISSUER=https://tokensmith.openchami.dev
+TOKENSMITH_CLUSTER_ID=demo-cluster
+TOKENSMITH_OPENCHAMI_ID=demo-openchami
+TOKENSMITH_CONFIG=/tokensmith/config.json
+TOKENSMITH_KEY_DIR=/tmp/tokensmith/keys
+TOKENSMITH_OIDC_PROVIDER=http://hydra:4444
+TOKENSMITH_PORT=8080
+
 # Environemnt Variables
 STEPPATH=/home/step
 DOCKER_STEPCA_INIT_NAME=OpenCHAMI

systemd/configs/tokensmith.json

@@ -0,0 +1,19 @@
+{
+  "groupScopes": {
+    "admin": [
+      "admin",
+      "write",
+      "read"
+    ],
+    "operator": [
+      "write",
+      "read"
+    ],
+    "user": [
+      "read"
+    ],
+    "viewer": [
+      "read"
+    ]
+  }
+}

systemd/containers/tokensmith.container

@@ -0,0 +1,28 @@
+[Unit]
+Description=The tokensmith container
+Wants=hydra-gen-jwks.service
+After=hydra-gen-jwks.service
+PartOf=openchami.target
+
+[Container]
+ContainerName=tokensmith
+HostName=tokensmith
+Image=ghcr.io/openchami/tokensmith:pr-13
+EnvironmentFile=/etc/openchami/configs/openchami.env
+
+# Volumes
+Volume=/etc/openchami/tokensmith.json:/tokensmith/config.json:Z
+
+# Networks for the Container to use
+Network=openchami-internal.network
+Network=openchami-jwt-internal.network
+
+# Extra hosts
+PodmanArgs=--add-host='demo.openchami.cluster:172.16.0.254'
+# Proxy settings
+PodmanArgs=--http-proxy=false
+
+[Service]
+Restart=always
+# Run commands after container starts
+ExecStartPost=sleep 10s