Skip to content

oAuth-proxy enhancements for Azure AKS deployment #21450

@karatkep

Description

@karatkep

Is your enhancement related to a problem? Please describe

There are several enhancements of ouath-proxy configuration (aka oauth-proxy.cfg) for kubernetes:

  • To set pass_access_token to true (default value is false) to pass access token to upstream via "X-Forwarded-Access-Token"
  • To set cookie_refresh to 1h0m0s to refresh the cookie when duration has elapsed after cookie was initially set.
  • To add whitelist_domains to whitelist che domain (ie: .yourcompany.com)
  • To add cookie_domains to set cookie domain to force cookies to (ie: .yourcompany.com)
  • To add OAuthScope to Che Resource to allow users to configure Access Token Scope.

Describe the solution you'd like

Update che-operator to support addition configuration of ouath-proxy for kubernetes

Describe alternatives you've considered

No response

Release Notes Text

Enhancements needed to deploy Che on Azure AKS, contributed by @karatkep. Thank you for your contribution!

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/ciCI build and releases, PR testing, & whitelabel/productization issueskind/enhancementA feature request - must adhere to the feature request template.new&noteworthyFor new and/or noteworthy issues that deserve a blog post, new docs, or emphasis in release notesseverity/P1Has a major impact to usage or development of the system.

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions