TLDR. Sources (integrations) UI requires some information from the IBM entitlements gateway to tell the user where does a source comes from (AWS, GCP, RH, etc). The API only allows cert-based authentication which is close to impossible to easily make from browsers. After a discussion with lpichler@redhat.com , I was told the entitlements API is already making similar requests to various IT services.

The following information was provided to us from the folks working on stratosphere integrations:

Cert requirements

• the only way how to authenticate to the API is with cert-based authentication
• any RH signed certificate is good enough for he AUTH
• we can use a single certificate for all users to query the data

API

The URL for the API is:

https://ibm-entitlement-gateway.dev.api.redhat.com/v1/partnerSubscriptions 

Sample requests can look like this:

curl -X POST \
  'https://ibm-entitlement-gateway.dev.api.redhat.com/v1/partnerSubscriptions' \
  --header 'Accept: */*' \
  --header 'Content-Type: application/json' \
  --data-raw '{
  "rhAccountId": "1234",
  "page": {
    "number": 0,
    "size": 20
  }
}' 

If your team does not have time, I can implement the new feature myself. I'll just need a little guidance from someone familiar with entitlemenst API.

Frontend issue: https://issues.redhat.com/browse/RHCLOUD-19785