Feature Overview: This feature focuses on enabling a seamless adoption path for customers using OIDC-federated Keystone in RHOSP 17.1 to migrate to RHOSO 18. While the core OIDC functionality is already implemented in RHOSO 18, this work will ensure that the configuration, mappings, and federated trust can be successfully carried over during the data plane adoption process.

Goals:

• Provide a documented and tested procedure for migrating an OIDC-enabled RHOSP 17.1 environment to RHOSO 18.
• Ensure no loss of federation or identity mappings during the adoption process.
• Maintain a consistent and secure user authentication experience post-adoption.

Acceptance Criteria:

• A successful data plane adoption of a RHOSP 17.1 environment with OIDC-federated Keystone.
• Post-adoption, users from the external OIDC provider can still authenticate and receive a valid OpenStack token.
• Existing role and group mappings are preserved and functional.
• The adoption and migration procedure is fully documented.