-
Task
-
Resolution: Unresolved
-
Blocker
-
None
-
None
-
True
-
-
False
-
-
Description
Migrate LDAP Auth Provider E2E tests to workspaces/backstage/e2e-tests/.
NOTE
This task is based on the existing RHDH core test case and may have missed some details. Please review the original test files in RHDH core before implementation. These tests are highly complex and involve Kubernetes deployment lifecycle management and LDAP/Keycloak integration.
DOCUMENTATION
Follow the RHDH E2E Test Utils - Overlay Documentation for implementation guidance.
Setup Prerequisites
LDAP Configuration via Red Hat Keycloak:
- RHBK_LDAP_REALM: Keycloak realm for LDAP
- RHBK_LDAP_CLIENT_ID, RHBK_LDAP_CLIENT_SECRET: OIDC client credentials
- RHBK_LDAP_USER_BIND, RHBK_LDAP_USER_PASSWORD: LDAP bind credentials
- RHBK_LDAP_TARGET: LDAP server target
- RHBK_BASE_URL, RHBK_REALM, RHBK_CLIENT_ID, RHBK_CLIENT_SECRET
Azure NSG Configuration (for E2E IP allowlisting):
- AUTH_PROVIDERS_ARM_CLIENT_ID, AUTH_PROVIDERS_ARM_CLIENT_SECRET
- AUTH_PROVIDERS_ARM_SUBSCRIPTION_ID, AUTH_PROVIDERS_ARM_TENANT_ID
Test User Credentials:
- DEFAULT_USER_PASSWORD, DEFAULT_USER_PASSWORD_2
LDAP Directory Structure:
- Groups DN: OU=Groups,OU=RHDH Local,DC=rhdh,DC=test
- Users DN: OU=Users,OU=RHDH Local,DC=rhdh,DC=test
Source Files (RHDH Core)
| File | Path |
|---|---|
| Test spec | e2e-tests/playwright/e2e/auth-providers/ldap.spec.ts |
| Deployment Helper | e2e-tests/playwright/utils/authentication-providers/rhdh-deployment.ts |
| MS Graph Helper | e2e-tests/playwright/utils/authentication-providers/msgraph-helper.ts (for NSG) |
Plugin Packages
| Package | Type |
|---|---|
| backstage-plugin-catalog-backend-module-ldap-dynamic | Backend |
Acceptance Criteria
1. Create Workspace Structure
- [ ] Reuse workspaces/backstage/e2e-tests/
2. Create RHDH Configuration (tests/config/)
- [ ] Configure LDAP catalog provider
- [ ] Configure OIDC auth with LDAP resolver
3. Migrate Test Files
- [ ] Create tests/specs/auth-providers/ldap.spec.ts
- [ ] Reuse deployment helper from Microsoft auth tests
4. Verify All Tests Pass
- [ ] All 2 test cases pass
Test Cases (2 total)
Login with LDAP oidcLdapUuidMatchingAnnotation resolver
Ingestion of LDAP users and groups: verify user entities and groups
Reference
- Template: workspaces/tech-radar/e2e-tests
COMPLEXITY
Very high complexity - involves Kubernetes deployment lifecycle and LDAP/Keycloak