Bug 1783385

Summary: Need the ability to configure the appliance for OpenID-Connect using the appliance console CLI
Product: Red Hat CloudForms Management Engine Reporter: abellott
Component: ApplianceAssignee: abellott
Status: CLOSED CURRENTRELEASE QA Contact: Sudhir Mallamprabhakara <smallamp>
Severity: high Docs Contact: Red Hat CloudForms Documentation <cloudforms-docs>
Priority: high    
Version: unspecifiedCC: abellott, dmetzger, obarenbo
Target Milestone: GAKeywords: TestOnly, ZStream
Target Release: 5.12.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1784145 (view as bug list) Environment:
Last Closed: 2020-10-26 16:13:42 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: Feature
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1784145    

Description abellott 2019-12-13 16:43:24 UTC 
Description of problem:

Currently for the appliance, the only option to configure it with OpenID-Connect authentication is the manual step documented here: 
https://www.manageiq.org/docs/reference/hammer/auth/openid_connect



Expected results:

We need the ability to configure the appliance for OIDC authentication
via the appliance_console_cli. This should automate all manual steps including
the Apache configuration as well as the Appliance UI Auth settings.
Comment 2 abellott 2019-12-13 16:45:09 UTC 
Adding support for OpenID-Connect Authentication configuration from the Appliance Console CLI:

Configuring Appliance for OpenID-Connect
# appliance_console_cli --oidc-config
                        [--oidc-client-host]
                        --oidc-url
                        --oidc-client-id
                        --oidc-client-secret
                        [--oidc-enable-sso]

Unconfiguring Appliance from OpenID-Connect and reverting to Database Authentication

# appliance_console_cli --oidc-unconfig
Comment 3 abellott 2019-12-13 16:46:59 UTC 
Related PRs:
- https://github.com/ManageIQ/manageiq-appliance_console/pull/104
- https://github.com/ManageIQ/manageiq-appliance/pull/265
- https://github.com/ManageIQ/manageiq_docs/pull/1299


Updated documentation: 
- https://www.manageiq.org/docs/reference/latest/auth/openid_connect
- Configuring OIDC using the CLI section: https://www.manageiq.org/docs/reference/latest/auth/openid_connect#oidc-configuration-cli