Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-11389

Migrate LDAP Auth Provider E2E tests to Overlay (backstage workspace)

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Blocker Blocker
    • 1.10.0
    • None
    • Authentication, LDAP, Overlay
    • None

      Description

      Migrate LDAP Auth Provider E2E tests to workspaces/backstage/e2e-tests/.

      NOTE

      This task is based on the existing RHDH core test case and may have missed some details. Please review the original test files in RHDH core before implementation. These tests are highly complex and involve Kubernetes deployment lifecycle management and LDAP/Keycloak integration.

      DOCUMENTATION

      Follow the RHDH E2E Test Utils - Overlay Documentation for implementation guidance.

      Setup Prerequisites

      LDAP Configuration via Red Hat Keycloak:

      • RHBK_LDAP_REALM: Keycloak realm for LDAP
      • RHBK_LDAP_CLIENT_ID, RHBK_LDAP_CLIENT_SECRET: OIDC client credentials
      • RHBK_LDAP_USER_BIND, RHBK_LDAP_USER_PASSWORD: LDAP bind credentials
      • RHBK_LDAP_TARGET: LDAP server target
      • RHBK_BASE_URL, RHBK_REALM, RHBK_CLIENT_ID, RHBK_CLIENT_SECRET

      Azure NSG Configuration (for E2E IP allowlisting):

      • AUTH_PROVIDERS_ARM_CLIENT_ID, AUTH_PROVIDERS_ARM_CLIENT_SECRET
      • AUTH_PROVIDERS_ARM_SUBSCRIPTION_ID, AUTH_PROVIDERS_ARM_TENANT_ID

      Test User Credentials:

      • DEFAULT_USER_PASSWORD, DEFAULT_USER_PASSWORD_2

      LDAP Directory Structure:

      • Groups DN: OU=Groups,OU=RHDH Local,DC=rhdh,DC=test
      • Users DN: OU=Users,OU=RHDH Local,DC=rhdh,DC=test

      Source Files (RHDH Core)

      Plugin Packages

      Package Type
      backstage-plugin-catalog-backend-module-ldap-dynamic Backend

      Acceptance Criteria

      1. Create Workspace Structure

      • [ ] Reuse workspaces/backstage/e2e-tests/

      2. Create RHDH Configuration (tests/config/)

      • [ ] Configure LDAP catalog provider
      • [ ] Configure OIDC auth with LDAP resolver

      3. Migrate Test Files

      • [ ] Create tests/specs/auth-providers/ldap.spec.ts
      • [ ] Reuse deployment helper from Microsoft auth tests

      4. Verify All Tests Pass

      • [ ] All 2 test cases pass

      Test Cases (2 total)

      Login with LDAP oidcLdapUuidMatchingAnnotation resolver

      Ingestion of LDAP users and groups: verify user entities and groups

      Reference

      COMPLEXITY

      Very high complexity - involves Kubernetes deployment lifecycle and LDAP/Keycloak

              Unassigned Unassigned
              skhileri Subhash Khileri
              RHDH Security
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: