Uploaded image for project: 'OpenShift GitOps'
  1. OpenShift GitOps
  2. GITOPS-4451

Add host attribute to SSO provider spec

XMLWordPrintable

    • Add host attribute to SSO provider spec
    • 8
    • False
    • False
    • 0% To Do, 0% In Progress, 100% Done
    • This enhancement allows customisation of the Keycloak route name in OpenShift GitOps Operator, supporting advanced routing use cases such as splitting routes across multiple ingress controller shards.
    • Enhancement

      Add host attribute to SSO provider spec

      As a user of OpenShift GitOps, I want to customize the route name of the keycloak instance that is instantiated by the OpenShit GitOps operator, to support advanced routing uses cases, such as Routes split between multiple ingress controller shards.

      Background (Required)

      This Story came as an RFE from a customer (RFE-3089). 

      The customer's specific use case is:

      When using Ingress Controller sharding it's important that route name can be specified as domain respectively DNSsuffix can change depending on what IngressController the route is exposed too. The ArgoCD server hostname can already be specified. Now the same needs to be possible for the sso part, where Red Hat SSO/Keycloak is being used.

      1. Why does the customer need this? (List the business requirements here)
        With Ingress Controller sharding we need to be able to either automatically detect the DNSsuffix configured for the IngressController the route is exposed too and use that or otherwise allow configure it in the ArgoCD custom resource. Allowing to configure it will provide more flexibility and therefore is the preferred approach.

      Approach (Required)

      Ultimately this boils down into adding a new field to the ArgoCD CR which can be use to customize the Keycloak Route/Ingress. The keycloak Route/Ingress are already automatically created by OpenShift GitOps.

      An example how the ArgoCD could potentially look like to configure sso route name:

      apiVersion: argoproj.io/v1alpha1
      kind: ArgoCD
      metadata:
        name: example-argocd
        namespace: foobar
      [...]
      spec:
        server:
          host: argocd-foobar.apps.example.com
          route:
            enabled: true
        sso:
          provider: keycloak
            host: sso-foobar.apps.example.com <<-- something like that 

       

              rh-ee-rnaaz Rizwana Naaz
              rhn-support-sreber Simon Reber
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: