search

StackStorm / community

Async conversation about ideas, planning, roadmap, issues, RFCs, etc around StackStorm
https://stackstorm.com/
Apache License 2.0
8 stars 3 forks source link

Custom Auth Module for authentication for stackstorm using keycloak #136

Open jerinjoseopscruise opened 4 months ago

jerinjoseopscruise commented 4 months ago

I have developed a custom authentication backend called opscruise_keycloak for integration with StackStorm. This backend leverages the Keycloak Python library to seamlessly connect with Keycloak servers. During regular StackStorm installations, the integration of this custom backend proves successful, ensuring smooth authentication processes.

However, when deploying StackStorm using Helm charts, a challenge arises. Helm deployments lack the flexibility to accommodate updates or configurations for custom authentication backends, posing a hurdle in seamlessly incorporating our opscruise_keycloak package.

I need help to make my package come up by default with the helm-based deployment.

Also, I wanted to make my package publically available for all the Stackstorm users as an open-source package.

cognifloyd commented 2 months ago

I transferred this from the helm chart repo, because this is a more general discussion.

A new auth backend would be great! Have you signed the CLA? Are you willing to open source the code under the Apache 2 license (the only license we use in the StackStorm org)? Do you have a link to the code that we can review, and then perhaps transfer it under the StackStorm org?

For now, if you want to use an alternate auth backend with k8s, you need to use a custom docker image that adds the relevant python packages. Then use the helm chart values to adjust st2.conf settings to use that new auth backend.