New IAM client management

jupyter/private-net/jupyter_vm.yaml

@@ -49,7 +49,7 @@ topology_template:
 
     iam_url:
       type: string
-      default: "https://iam.cloud.infn.it"
+      default: "https://iam.cloud.infn.it/"
       description: IAM Instance for end user authentication
 
     iam_subject:
@@ -118,9 +118,17 @@ topology_template:
 
   node_templates:
 
+    iam_client:
+      type: tosca.nodes.indigo.iam.client
+      properties:
+        scopes: openid email profile wlcg offline_access address wlcg.groups
+        issuer: { get_input: iam_url }
+
     ml_install:
       type: tosca.nodes.DODAS.single-node-jupyterhub
       properties:
+        iam_client_id: { get_property : [ iam_client, client_id ] }
+        iam_token: { get_property : [ iam_client, registration_access_token ] }
         contact_email: { get_input: contact_email }
         iam_url: { get_input: iam_url }
         iam_subject: { get_input: iam_subject }