Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create project-level AuthConfig #58

Open
aslakknutsen opened this issue Oct 5, 2023 · 0 comments
Open

Create project-level AuthConfig #58

aslakknutsen opened this issue Oct 5, 2023 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@aslakknutsen
Copy link
Member

Currently, the Opendatahub project lacks the ability for users to define and customize their own authentication requirements independently for each Opendatahub Project. To address this limitation and provide a more flexible authentication solution, we need to implement the creation of project-specific AuthConfig objects.

Task Details:

  • Create Project-Specific AuthConfig Object: Implement the necessary code changes within the project-controller to create project-specific AuthConfig objects for each Opendatahub Project. These AuthConfig objects will contain configurations related to authentication and authorization specific to each project.

  • Integration with Auth Framework: Ensure that the created AuthConfig objects can be seamlessly integrated with the external authorization provider, Authorino. This integration should allow users to define and customize their authorization requirements independently for their respective projects.

Acceptance Criteria:

  • The project-controller code is updated to support the creation of project-specific AuthConfig objects.
  • AuthConfig objects can be created and associated with Opendatahub Projects.
  • Users can define and customize authorization requirements independently for each project using AuthConfig.
  • AuthConfig objects are accessible via the project-controller and can be modified as needed.
  • Integration with the external authorization provider (Authorino) is successful, and authentication configurations can be applied based on project-specific AuthConfig.
@aslakknutsen aslakknutsen self-assigned this Oct 5, 2023
@aslakknutsen aslakknutsen added the enhancement New feature or request label Oct 6, 2023
aslakknutsen added a commit to aslakknutsen/odh-manifests that referenced this issue Oct 11, 2023
Poject Controller rely on reading the openshift.config ingresses to find the
domain or appDomain configured for this cluster to generated the current auth
URLs used in the AuthConfig.

releated-to: maistra/odh-project-controller#58
aslakknutsen added a commit to aslakknutsen/odh-manifests that referenced this issue Oct 23, 2023
Poject Controller rely on reading the openshift.config ingresses to find the
domain or appDomain configured for this cluster to generated the current auth
URLs used in the AuthConfig.

releated-to: maistra/odh-project-controller#58
aslakknutsen added a commit to aslakknutsen/odh-project-controller that referenced this issue Oct 24, 2023
* Setup namespace annotations for gatewway/host information used by this namesapce
* Generate host pattern based on openshift ingress configs AppDomain
* Generate a default AuthConfig file using ServiceAccounts TokenReview process as auth
* Rely on endpoint in `osh-model-controller` for anonymous access support

releated-to: maistra#58
aslakknutsen added a commit to aslakknutsen/odh-project-controller that referenced this issue Oct 24, 2023
* Setup namespace annotations for gatewway/host information used by this namesapce
* Generate host pattern based on openshift ingress configs AppDomain
* Generate a default AuthConfig file using ServiceAccounts TokenReview process as auth
* Rely on endpoint in `osh-model-controller` for anonymous access support

releated-to: maistra#58
aslakknutsen added a commit to aslakknutsen/odh-project-controller that referenced this issue Oct 24, 2023
* Setup namespace annotations for gatewway/host information used by this namesapce
* Generate host pattern based on openshift ingress configs AppDomain
* Generate a default AuthConfig file using ServiceAccounts TokenReview process as auth
* Rely on endpoint in `osh-model-controller` for anonymous access support

releated-to: maistra#58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant