This epic introduces a unified authorization strategy across the RHOAI platform using OpenShift Service Mesh (OSSM) to centralize authorization responsibilities at the platform level. It aims to simplify security management by enabling a declarative approach for defining authorization rules, thus separating concerns and ensuring consistent, efficient access control across all services.

Goals

• Implement a unified authorization mechanism for all components.
• Shift the authorization (Auth(z)) layer management to the platform.

Scope

• Enable Single Sign-On (SSO) capabilities through Service Mesh authorization features.

Deliverables

Develop and launch Platform Authorization (Auth(z)) Version 1, ready for component onboarding.