]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
mgr/cephadm: adding oauth2-proxy cephadm service 58460/head
authorRedouane Kachach <rkachach@ibm.com>
Tue, 2 Jul 2024 15:28:40 +0000 (17:28 +0200)
committerRedouane Kachach <rkachach@ibm.com>
Wed, 14 Aug 2024 11:53:08 +0000 (13:53 +0200)
commit677affcbf548cb2a432695e824b9cd8c2a70dbe1
tree5061f1c9354174a8a984856b08f7d4d831ed75cc
parent094fc1836fd6ffe8ed96904d2e8dc388c3e46289
mgr/cephadm: adding oauth2-proxy cephadm service

adding new oauth2-proxy service. The enable_auth flag enables SSO
authentication via the oauth2-proxy service. The user must ensure the
oauth2-proxy service is deployed before enabling this flag in the
mgmt-gateway service.

FQDN related changes: previously, we were obtaining the FQDN using a
call to the Python socket library run inside the container. While this
generally works, the FQDN returned inside a container can sometimes
differ from the one obtained outside the container. This discrepancy
could cause some issues. To ensure consistency, we now use the FQDN
from the inventory, which provides the correct value as recognized on the host.

Signed-off-by: Redouane Kachach <rkachach@ibm.com>
24 files changed:
doc/cephadm/services/index.rst
doc/cephadm/services/oauth2-proxy.rst [new file with mode: 0644]
src/cephadm/cephadm.py
src/cephadm/cephadmlib/constants.py
src/cephadm/cephadmlib/daemons/__init__.py
src/cephadm/cephadmlib/daemons/oauth2_proxy.py [new file with mode: 0644]
src/pybind/mgr/cephadm/http_server.py
src/pybind/mgr/cephadm/inventory.py
src/pybind/mgr/cephadm/module.py
src/pybind/mgr/cephadm/services/cephadmservice.py
src/pybind/mgr/cephadm/services/mgmt_gateway.py
src/pybind/mgr/cephadm/services/monitoring.py
src/pybind/mgr/cephadm/services/oauth2_proxy.py [new file with mode: 0644]
src/pybind/mgr/cephadm/templates/services/grafana/grafana.ini.j2
src/pybind/mgr/cephadm/templates/services/mgmt-gateway/external_server.conf.j2
src/pybind/mgr/cephadm/templates/services/mgmt-gateway/internal_server.conf.j2
src/pybind/mgr/cephadm/templates/services/mgmt-gateway/nginx.conf.j2
src/pybind/mgr/cephadm/templates/services/oauth2-proxy/oauth2-proxy.conf.j2 [new file with mode: 0644]
src/pybind/mgr/cephadm/tests/fixtures.py
src/pybind/mgr/cephadm/tests/test_cephadm.py
src/pybind/mgr/cephadm/tests/test_services.py
src/pybind/mgr/orchestrator/_interface.py
src/pybind/mgr/orchestrator/module.py
src/python-common/ceph/deployment/service_spec.py