Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-11651

Remove statically installed authentication plugins from RHDH backend

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 1.10.0
    • Authentication
    • None
    • Remove statically installed authentication plugins from RHDH backend
    • False
    • Hide

      None

      Show
      None
    • False
    • RHDHPLAN-933Decouple the RHDH backend from authentication module plugins
    • To Do
    • RHDHPLAN-933 - Decouple the RHDH backend from authentication module plugins
    • QE Needed, Docs Needed, TE Needed, Customer Facing, PX Needed

      EPIC Goal

      What are we trying to solve here?

      • Remove all the statically installed plugins here in favour of installing them as a dynamic plugin
      •  

      Background/Feature Origin

      • This is already supported with ENABLE_AUTH_MODULE_OVERRIDE
      • All upstream auth provider plugins are already available in the overlays repo (see list)

      Things to investigate:

      • How to continue to support RHDH-specific resolvers in OIDC and oauth2Proxy providers
        • Idea (from stlewis_2): create RHDH auth providers containing the resolvers as dynamic plugins and host them in rhdh-plugins (requires testing to confirm that it works as intended)
      • Confirm how this works with the new frontend system and if there are any considerations to be made
      • Confirm the timeline of rolling out this feature and the migration of E2E tests:
        • When to provide deprecation notice
        • How/ should we maintain backwards compatibility across which releases

      Why is this important?

      • Significantly reduces the size of RHDH core code, only the configured auth providers will be present
      • Simplifies auth provider setup process so that it can be configured alongside its respective catalog provider - now all config will be under dynamic plugins 

      User Scenarios

      Dependencies (internal and external)

      Unblocks the migration of auth provider e2e tests from the core RHDH repo to the rhdh-overlay repo since currently the auth providers are attatched to RHDH core. 

      Acceptance Criteria

      Release Enablement/Demo - Provide necessary release enablement details
      and documents

      DEV - Upstream code and tests merged: <link to meaningful PR or GitHub
      Issue>

      DEV - Upstream documentation merged: <link to meaningful PR or GitHub
      Issue>

      DEV - Downstream build attached to advisory: <link to errata>

      QE - Test plans in Playwright: <link or reference to playwright>

      QE - Automated tests merged: <link or reference to automated tests>

      DOC - Downstream documentation merged: <link to meaningful PR>

              rh-ee-jhe Jessica He
              rh-ee-jhe Jessica He
              RHDH Security
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: