-
Epic
-
Resolution: Done
-
Normal
-
None
-
Add host attribute to SSO provider spec
-
8
-
False
-
False
-
0% To Do, 0% In Progress, 100% Done
-
This enhancement allows customisation of the Keycloak route name in OpenShift GitOps Operator, supporting advanced routing use cases such as splitting routes across multiple ingress controller shards.
-
Enhancement
Add host attribute to SSO provider spec
As a user of OpenShift GitOps, I want to customize the route name of the keycloak instance that is instantiated by the OpenShit GitOps operator, to support advanced routing uses cases, such as Routes split between multiple ingress controller shards.
Background (Required)
This Story came as an RFE from a customer (RFE-3089).
The customer's specific use case is:
When using Ingress Controller sharding it's important that route name can be specified as domain respectively DNSsuffix can change depending on what IngressController the route is exposed too. The ArgoCD server hostname can already be specified. Now the same needs to be possible for the sso part, where Red Hat SSO/Keycloak is being used.
- Why does the customer need this? (List the business requirements here)
With Ingress Controller sharding we need to be able to either automatically detect the DNSsuffix configured for the IngressController the route is exposed too and use that or otherwise allow configure it in the ArgoCD custom resource. Allowing to configure it will provide more flexibility and therefore is the preferred approach.
Approach (Required)
Ultimately this boils down into adding a new field to the ArgoCD CR which can be use to customize the Keycloak Route/Ingress. The keycloak Route/Ingress are already automatically created by OpenShift GitOps.
An example how the ArgoCD could potentially look like to configure sso route name:
apiVersion: argoproj.io/v1alpha1
kind: ArgoCD
metadata:
name: example-argocd
namespace: foobar
[...]
spec:
server:
host: argocd-foobar.apps.example.com
route:
enabled: true
sso:
provider: keycloak
host: sso-foobar.apps.example.com <<-- something like that
- clones
-
GITOPS-1737 Add host attribute to SSO provider spec
- Closed
- is documented by
-
RHDEVDOCS-6010 [Recurring task]: GitOps 1.13.0 release notes
- Closed
- links to
-
RHEA-2024:133299 Errata Advisory for Red Hat OpenShift GitOps v1.13.0