-
Task
-
Resolution: Done
-
Undefined
-
None
-
None
-
False
-
-
False
-
-
🎯 Custom Authentication Provider Testing - FLPATH-2535
Objective
Test and integrate the custom authentication provider workflow from serverless-workflows PR #751 into our existing testing infrastructure.
Implementation Status: ✅ COMPLETE
Merge Request: #649 - https://gitlab.cee.redhat.com/ocp-edge-qe/flight-path-auto-tests/-/merge_requests/649
What Was Accomplished
✅ Custom Authentication Provider Successfully Deployed
- Dynamic plugins configured for milestone6
- GitHub Two provider configured in auth configmap
- Backstage CR patched to enable custom auth provider module override
✅ Workflow Integration Complete
- custom-auth-create-branch workflow deployed and functional
- Uses existing GitHub OAuth credentials (assumed pre-configured)
- Workflow executes successfully with correct input parameters
✅ Jenkins Integration (No Changes Required)
- Existing pipeline already supports DEPLOY_CUSTOM_AUTH_CREATE_BRANCH parameter
- Custom auth deploys conditionally when parameter is set to true
- Milestone6 requirement enforced via template conditions
✅ Playwright Test Automation
- Complete test for custom auth workflow execution
- Guest user login, navigation, and workflow execution
- Unique branch name generation for test reliability
- OAuth popup handling (assumes pre-configured authentication)
Key Findings & Corrections
-
- GitHub Token Not Required: Developer confirmed workflow works without global GITHUB_TOKEN
2. Input Parameter Format: Must use individual owner/repo/branch parameters, not full URLs
3. OAuth Configuration: Assumes GitHub OAuth application is already configured
4. Conditional Deployment: Custom auth only activates when explicitly requested
- GitHub Token Not Required: Developer confirmed workflow works without global GITHUB_TOKEN
Technical Implementation
- Ansible Templates: Updated with conditional logic for custom auth
- Dynamic Plugins: Frontend and backend modules for custom authentication
- Auth Configuration: GitHub Two provider using existing credentials
- Workflow Deployment: Integrated into existing workflow deployment process
- Testing: Comprehensive Playwright test with proper error handling
Deployment Instructions
-
- Set Jenkins Parameters:
- DEPLOY_CUSTOM_AUTH_CREATE_BRANCH=true
- MILESTONE=6 (or higher)
2. Run Existing Pipeline: Execute the standard Jenkins pipeline
3. Verify Deployment: Custom auth provider and workflow will be deployed
Testing Instructions
-
- Run Playwright Test:
npx playwright test ui_tests/parallel/orchestrator_tests/customAuthCreateBranchWorkflow.spec.ts --project=parallel
- Run Playwright Test:
2. Manual Verification:
- Navigate to RHDH Orchestrator tab
- Execute custom-auth-create-branch workflow
- Verify GitHub OAuth integration works
Files Modified/Added
- Ansible templates and configurations
- Workflow deployment tasks
- Playwright test automation
- Documentation and testing guides
- Jenkins pipeline (no changes needed)
Status: READY FOR PRODUCTION
The implementation is complete, tested, and ready for review. All changes are additive and conditional, ensuring zero impact on existing deployments while providing full milestone6 custom authentication functionality.
Note: Please copy this comment to the description and then delete this comment to keep the ticket clean.
- is blocked by
-
FLPATH-2532 create dynamic plugin image for custom auth provider for testing
-
- Closed
-