search

redhat-developer / osd-monitor-poc

8 stars 20 forks source link

replace webapi-guard components with oauth_proxy #14

Closed fche closed 5 years ago

fche commented 6 years ago

The OSD-side webapi-guard components should integrate into OAUTH SSO and offer programmatic access to the timeseries guarded by pmwebd. File service provided by the current guard httpd could probably be done by pmwebd too, so we wouldn't need an apache httpd.

https://github.com/bitly/oauth2_proxy

a container is already built into the OSIO registry

fche commented 5 years ago

pcp-webapi-guard now uses a binary version of that repo (now in frozen state), and the @rhdt-dev org's @rhdt-dev/viewer-monitor-stg team, along with a secret/configuration yml, to control access to the pcp webapis. Previously configured htpasswd accounts also work for now.

@pbergene or someone just needs to approve transfer of the osd-monitor-stg oauth app to @rhdt-dev, and then we'll make a separate one for dsaas (vs. staging).

pbergene commented 5 years ago

@fche I've had a couple of emails regarding this, but they've resulted in a 404 when accessing the link. Not sure if there's been some alternate solution here?

fche commented 5 years ago

dsaas-stg now appears to be working with the @rhdt-dev/viewer-monitor-stg team.