Bug 1783385 - Need the ability to configure the appliance for OpenID-Connect using the appliance console CLI
Summary: Need the ability to configure the appliance for OpenID-Connect using the appl...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Appliance
Version: unspecified
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: GA
: 5.12.0
Assignee: abellott
QA Contact: Sudhir Mallamprabhakara
Red Hat CloudForms Documentation
URL:
Whiteboard:
Depends On:
Blocks: 1784145
TreeView+ depends on / blocked
 
Reported: 2019-12-13 16:43 UTC by abellott
Modified: 2020-10-26 16:13 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1784145 (view as bug list)
Environment:
Last Closed: 2020-10-26 16:13:42 UTC
Category: Feature
Cloudforms Team: CFME Core
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description abellott 2019-12-13 16:43:24 UTC 
Description of problem:

Currently for the appliance, the only option to configure it with OpenID-Connect authentication is the manual step documented here: 
https://www.manageiq.org/docs/reference/hammer/auth/openid_connect



Expected results:

We need the ability to configure the appliance for OIDC authentication
via the appliance_console_cli. This should automate all manual steps including
the Apache configuration as well as the Appliance UI Auth settings.
Comment 2 abellott 2019-12-13 16:45:09 UTC 
Adding support for OpenID-Connect Authentication configuration from the Appliance Console CLI:

Configuring Appliance for OpenID-Connect
# appliance_console_cli --oidc-config
                        [--oidc-client-host]
                        --oidc-url
                        --oidc-client-id
                        --oidc-client-secret
                        [--oidc-enable-sso]

Unconfiguring Appliance from OpenID-Connect and reverting to Database Authentication

# appliance_console_cli --oidc-unconfig
Comment 3 abellott 2019-12-13 16:46:59 UTC 
Related PRs:
- https://github.com/ManageIQ/manageiq-appliance_console/pull/104
- https://github.com/ManageIQ/manageiq-appliance/pull/265
- https://github.com/ManageIQ/manageiq_docs/pull/1299


Updated documentation: 
- https://www.manageiq.org/docs/reference/latest/auth/openid_connect
- Configuring OIDC using the CLI section: https://www.manageiq.org/docs/reference/latest/auth/openid_connect#oidc-configuration-cli
Note You need to log in before you can comment on or make changes to this bug.