-
Notifications
You must be signed in to change notification settings - Fork 1.2k
oAuth-proxy enhancements for Azure AKS deployment #21450
Copy link
Copy link
Closed
Labels
area/ciCI build and releases, PR testing, & whitelabel/productization issuesCI build and releases, PR testing, & whitelabel/productization issueskind/enhancementA feature request - must adhere to the feature request template.A feature request - must adhere to the feature request template.new¬eworthyFor new and/or noteworthy issues that deserve a blog post, new docs, or emphasis in release notesFor new and/or noteworthy issues that deserve a blog post, new docs, or emphasis in release notesseverity/P1Has a major impact to usage or development of the system.Has a major impact to usage or development of the system.
Milestone
Metadata
Metadata
Assignees
Labels
area/ciCI build and releases, PR testing, & whitelabel/productization issuesCI build and releases, PR testing, & whitelabel/productization issueskind/enhancementA feature request - must adhere to the feature request template.A feature request - must adhere to the feature request template.new¬eworthyFor new and/or noteworthy issues that deserve a blog post, new docs, or emphasis in release notesFor new and/or noteworthy issues that deserve a blog post, new docs, or emphasis in release notesseverity/P1Has a major impact to usage or development of the system.Has a major impact to usage or development of the system.
Type
Fields
Give feedbackNo fields configured for issues without a type.
Is your enhancement related to a problem? Please describe
There are several enhancements of ouath-proxy configuration (aka oauth-proxy.cfg) for kubernetes:
pass_access_tokentotrue(default value isfalse) to pass access token to upstream via "X-Forwarded-Access-Token"cookie_refreshto1h0m0sto refresh the cookie when duration has elapsed after cookie was initially set.whitelist_domainsto whitelist che domain (ie: .yourcompany.com)cookie_domainsto set cookie domain to force cookies to (ie: .yourcompany.com)OAuthScopeto Che Resource to allow users to configure Access Token Scope.Describe the solution you'd like
Update che-operator to support addition configuration of ouath-proxy for kubernetes
Describe alternatives you've considered
No response
Release Notes Text
Enhancements needed to deploy Che on Azure AKS, contributed by @karatkep. Thank you for your contribution!