New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove the OpenShift OAuth Proxy and support alternate authentication modes #23

Open

adamgoossens opened this issue May 8, 2021 · 0 comments

Collaborator

adamgoossens commented May 8, 2021 •

edited

Currently, we use openshift/oauth-proxy as a sidecar in front of Nexus to provide user auth. There's three issues with this:

The current image is being pulled from docker.io, and this has not been updated in 2 years.
The latest versions of oauth-proxy are under registry.redhat.io, and so behind a pull secret.
We don't actually configure RUT auth in Nexus, so the OAuth Proxy isn't doing anything. Users are still prompted for credentials to login.

We should consider:

Removing the OpenShift OAuth Proxy as it's OCP-specific and currently not needed.
Adding capability to the Operator to configure other authentication modes for Nexus, such as RUT auth, LDAP or SAML.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment