OpenID Connect Support

[Maleware]

Description

closes #337

Definition of Done Checklist

• Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant
• Please make sure all these things are done and tick the boxes

Author

Preview Give feedback

1. Changes are OpenShift compatible
2. CRD changes approved
3. CRD documentation for all fields, following the style guide.
4. Helm chart can be installed and deployed operator works
5. Integration tests passed (for non trivial changes)
6. Changes need to be "offline" compatible

Reviewer

Preview Give feedback

1. Code contains useful comments
2. Code contains useful logging statements
3. (Integration-)Test cases added
4. Documentation added or updated. Follows the style guide.
5. Changelog updated
6. Cargo.toml only contains references to git tags (not specific commits or branches)

Acceptance

Preview Give feedback

1. Feature Tracker has been updated
2. Proper release label has been added
3. Roadmap has been updated

[Maleware]

=== NAME  kuttl
    harness.go:407: run tests finished
    harness.go:515: cleaning up
    harness.go:572: removing temp folder: ""
--- PASS: kuttl (169.74s)
    --- PASS: kuttl/harness (0.00s)
        --- PASS: kuttl/harness/oidc_airflow-2.9.3_openshift-false (169.70s)
PASS

[Maleware]

=== NAME  kuttl
    harness.go:407: run tests finished
    harness.go:515: cleaning up
    harness.go:572: removing temp folder: ""
--- PASS: kuttl (184.54s)
    --- PASS: kuttl/harness (0.00s)
        --- PASS: kuttl/harness/oidc_airflow-2.9.3_openshift-false (184.50s)
PASS

[maltesander]

Just a quick glance, will leave the rest for andrew :)

[adwk67]

Code looks good - I think some screenshots would help to explain how to use this feature from the UI-perspective.

[adwk67]

lgtm - nightly tests all ran successfully locally.

[adwk67]

Suggested comment for the release notes:

OpenID Connect is now supported by the airflow operator: this means that the necessary Flask dependencies have been added to the product image and that the operator can process OIDC authentication classes. It will still be necessary, however, for users to configure their own webserver configuration themselves, if they want to be directly redirected to the authentication authority.

[Maleware]

We will need a fix #530 this will complete the Ticket.

I forgot to add certificates to airflow via python certify.