-
Epic
-
Resolution: Unresolved
-
Normal
-
None
-
1.10.0
-
None
-
Remove statically installed authentication plugins from RHDH backend
-
False
-
-
False
-
-
To Do
-
RHDHPLAN-933 - Decouple the RHDH backend from authentication module plugins
-
QE Needed, Docs Needed, TE Needed, Customer Facing, PX Needed
-
-
EPIC Goal
What are we trying to solve here?
- Remove all the statically installed plugins here in favour of installing them as a dynamic plugin
Background/Feature Origin
- This is already supported with ENABLE_AUTH_MODULE_OVERRIDE
- All upstream auth provider plugins are already available in the overlays repo (see list)
Things to investigate:
- How to continue to support RHDH-specific resolvers in OIDC and oauth2Proxy providers
- Idea (from stlewis_2): create RHDH auth providers containing the resolvers as dynamic plugins and host them in rhdh-plugins (requires testing to confirm that it works as intended)
- Confirm how this works with the new frontend system and if there are any considerations to be made
- Confirm the timeline of rolling out this feature and the migration of E2E tests:
- When to provide deprecation notice
- How/ should we maintain backwards compatibility across which releases
Why is this important?
- Significantly reduces the size of RHDH core code, only the configured auth providers will be present
- Simplifies auth provider setup process so that it can be configured alongside its respective catalog provider - now all config will be under dynamic plugins
User Scenarios
Dependencies (internal and external)
Unblocks the migration of auth provider e2e tests from the core RHDH repo to the rhdh-overlay repo since currently the auth providers are attatched to RHDH core.
Acceptance Criteria
Release Enablement/Demo - Provide necessary release enablement details
and documents
DEV - Upstream code and tests merged: <link to meaningful PR or GitHub
Issue>
DEV - Upstream documentation merged: <link to meaningful PR or GitHub
Issue>
DEV - Downstream build attached to advisory: <link to errata>
QE - Test plans in Playwright: <link or reference to playwright>
QE - Automated tests merged: <link or reference to automated tests>
DOC - Downstream documentation merged: <link to meaningful PR>