Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Minor
Fix Version/s: 7.4.0.GA
Affects Version/s: 7.0.1.GA
Component/s: Cloud
Labels:
- Cloud
Environment:

OpenShift

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Fix Build:
CR1
Target Release:

7.4.0.GA
Steps to Reproduce:
Hide

Start OpenShift

Import SSO image stream and sso secret from application-templates application-templates

Deploy SSO template (e.g. sso72-https.json)

Import RHPAM image stream and secrets

Deploy RHPAM template with SSO (e.g. rhpam70-authoring.yaml) without custom hostnames
Show
Start OpenShift Import SSO image stream and sso secret from application-templates application-templates Deploy SSO template (e.g. sso72-https.json) Import RHPAM image stream and secrets Deploy RHPAM template with SSO (e.g. rhpam70-authoring.yaml) without custom hostnames

Sprint:
2019 Week 20-22

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Connection to the RH-SSO can be configured in the RHPAM templates. In the template we specify the name of the client in RH-SSO realm. If this client is not in the RH-SSO realm, then a new one is auto created.
New client require custom hostnames to specify the URLs in client for the redirection. When custom hostname is not provided, new client is not created and deployment of the Business central and deployment of the Kie Server fail.

If BUSINESS_CENTRAL_HOSTNAME_HTTP, BUSINESS_CENTRAL_HOSTNAME_HTTPS EXECUTION_SERVER_HOSTNAME_HTTP or EXECUTION_SERVER_HOSTNAME_HTTPS is not specified, then should be used default hostnames for the SSO clients (BUSINESS_CENTRAL_SSO_CLIENT and KIE_SERVER_SSO_CLIENT)

Changes should be applied to for all templates with SSO configuration.

is blocked by

CLOUD-3200 Discover application routes during Keycloak client configuration via Kubernetes API

CLOUD-3207 [7.2.x-openjdk11] Discover application routes during Keycloak client configuration via Kubernetes API

is related to

CLOUD-3199 SSO_SECRET parameter should be required if configuring RH-SSO integration

BXMSDOC-4184 Add a section to the RHPAM/RHDM on Openshift explaining that the client side of SSO should be created first

Closed

Assignee:: Ricardo Zanini

Reporter:: Jakub Schwan

Tester:: Jakub Schwan

QA Contact:: Jakub Schwan

Votes:: 0 Vote for this issue

Watchers:: 6 Start watching this issue

Created:: 2018/06/28 7:51 AM

Updated:: 2024/02/12 9:44 AM

Resolved:: 2019/05/29 10:38 AM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates