Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add API for OIDC configuration override in ext-auth #3929

Merged
merged 11 commits into from
Dec 1, 2020

Conversation

sam-heilbron
Copy link
Contributor

@sam-heilbron sam-heilbron commented Nov 30, 2020

Description

Expose the API to allow users to specify an OIDC configuration override.

Context

OIDC configuration is discovered via the discovery endpoint: <issuerUrl>/.well-known/openid-configuration. To allow for additional user customization, we expose an override API. Any properties set in this will override the discovered properties.

Checklist:

  • I included a concise, user-facing changelog (for details, see https://github.com/solo-io/go-utils/tree/master/changelogutils) which references the issue that is resolved.
  • If I updated APIs (our protos) or helm values, I ran make install-go-tools generated-code to ensure there will be no code diff
  • I followed guidelines laid out in the Gloo Edge contribution guide
  • I opened a draft PR or added the work in progress label if my PR is not ready for review
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works

@solo-changelog-bot
Copy link

Issues linked to changelog:
#3879

@github-actions github-actions bot added the keep pr updated signals bulldozer to keep pr up to date with base branch label Nov 30, 2020
@sam-heilbron sam-heilbron marked this pull request as ready for review November 30, 2020 18:29
@sam-heilbron sam-heilbron changed the title [WIP] Expose OIDC configuration override in ext-auth API Expose OIDC configuration override in ext-auth API Nov 30, 2020
@@ -546,6 +550,10 @@ message ExtAuthConfig {
// Configures headers added to requests.
HeaderConfiguration headers = 10;

// OIDC configuration is discovered at <issuerUrl>/.well-known/openid-configuration
// The configuration override defines any properties that should override this discovery configuration
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

an example yaml here in the comments for how the replace would work would be very helpful for users

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good call

@sam-heilbron sam-heilbron changed the title Expose OIDC configuration override in ext-auth API Add API for OIDC configuration override in ext-auth Nov 30, 2020
Comment on lines 556 to 557
// ```yaml
// apiVersion: enterprise.gloo.solo.io/v1
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit, formatting

@soloio-bulldozer soloio-bulldozer bot merged commit 873ff9f into master Dec 1, 2020
@soloio-bulldozer soloio-bulldozer bot deleted the ext-ath-oidc-override-config branch December 1, 2020 17:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
keep pr updated signals bulldozer to keep pr up to date with base branch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants