diff --git a/default.packages.yaml b/default.packages.yaml index 26bf164381..1914fb6d41 100644 --- a/default.packages.yaml +++ b/default.packages.yaml @@ -66,6 +66,16 @@ packages: support: "generally-available" - package: '@backstage-community/plugin-topology' support: "generally-available" + - package: '@backstage/plugin-auth-backend-module-github-provider' + support: "generally-available" + - package: '@backstage/plugin-auth-backend-module-gitlab-provider' + support: "generally-available" + - package: '@backstage/plugin-auth-backend-module-guest-provider' + support: "generally-available" + - package: '@backstage/plugin-auth-backend-module-microsoft-provider' + support: "generally-available" + - package: '@backstage/plugin-auth-backend-module-oidc-provider' + support: "generally-available" - package: '@backstage/plugin-catalog-backend-module-github' support: generally-available - package: '@backstage/plugin-catalog-backend-module-github-org' diff --git a/rhdh-supported-packages.txt b/rhdh-supported-packages.txt index 42f766b402..e4ef15b7ba 100644 --- a/rhdh-supported-packages.txt +++ b/rhdh-supported-packages.txt @@ -13,6 +13,11 @@ app-defaults/plugins/app-auth app-defaults/plugins/app-defaults app-defaults/plugins/app-integrations +backstage/plugins/auth-backend-module-github-provider +backstage/plugins/auth-backend-module-gitlab-provider +backstage/plugins/auth-backend-module-guest-provider +backstage/plugins/auth-backend-module-microsoft-provider +backstage/plugins/auth-backend-module-oidc-provider backstage/plugins/catalog-backend-module-github backstage/plugins/catalog-backend-module-github-org backstage/plugins/catalog-backend-module-ldap diff --git a/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-github-provider b/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-github-provider new file mode 100644 index 0000000000..e69de29bb2 diff --git a/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-gitlab-provider b/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-gitlab-provider new file mode 100644 index 0000000000..e69de29bb2 diff --git a/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-guest-provider b/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-guest-provider new file mode 100644 index 0000000000..e69de29bb2 diff --git a/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-microsoft-provider b/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-microsoft-provider new file mode 100644 index 0000000000..e69de29bb2 diff --git a/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-oidc-provider b/workspaces/backstage/coverage-anchors/backstage.plugin-auth-backend-module-oidc-provider new file mode 100644 index 0000000000..e69de29bb2 diff --git a/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-github-provider.yaml b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-github-provider.yaml new file mode 100644 index 0000000000..d025297ee3 --- /dev/null +++ b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-github-provider.yaml @@ -0,0 +1,41 @@ +apiVersion: extensions.backstage.io/v1alpha1 +kind: Package +metadata: + name: backstage-plugin-auth-backend-module-github-provider + namespace: rhdh + title: "Auth Backend Module GitHub Provider" + links: + - url: https://red.ht/rhdh + title: Homepage + - url: https://github.com/backstage/backstage/issues + title: Bugs + - title: Source Code + url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-github-provider + annotations: + backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-github-provider + tags: + - authentication +spec: + packageName: "@backstage/plugin-auth-backend-module-github-provider" + dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-github-provider:bs_1.52.0__0.5.4 + version: 0.5.4 + backstage: + role: backend-plugin-module + supportedVersions: 1.52.0 + author: Red Hat + support: generally-available + lifecycle: active + partOf: + - backstage-plugin-auth-backend-module-github-provider + appConfigExamples: + - title: Default configuration + content: + auth: + providers: + github: + development: + clientId: ${GITHUB_CLIENT_ID} + clientSecret: ${GITHUB_CLIENT_SECRET} + signIn: + resolvers: + - resolver: emailMatchingUserEntityProfileEmail diff --git a/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-gitlab-provider.yaml b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-gitlab-provider.yaml new file mode 100644 index 0000000000..2c543c0341 --- /dev/null +++ b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-gitlab-provider.yaml @@ -0,0 +1,41 @@ +apiVersion: extensions.backstage.io/v1alpha1 +kind: Package +metadata: + name: backstage-plugin-auth-backend-module-gitlab-provider + namespace: rhdh + title: "Auth Backend Module GitLab Provider" + links: + - url: https://red.ht/rhdh + title: Homepage + - url: https://github.com/backstage/backstage/issues + title: Bugs + - title: Source Code + url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-gitlab-provider + annotations: + backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-gitlab-provider + tags: + - authentication +spec: + packageName: "@backstage/plugin-auth-backend-module-gitlab-provider" + dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-gitlab-provider:bs_1.52.0__0.4.4 + version: 0.4.4 + backstage: + role: backend-plugin-module + supportedVersions: 1.52.0 + author: Red Hat + support: generally-available + lifecycle: active + partOf: + - backstage-plugin-auth-backend-module-gitlab-provider + appConfigExamples: + - title: Default configuration + content: + auth: + providers: + gitlab: + development: + clientId: ${GITLAB_CLIENT_ID} + clientSecret: ${GITLAB_CLIENT_SECRET} + signIn: + resolvers: + - resolver: emailMatchingUserEntityProfileEmail diff --git a/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-guest-provider.yaml b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-guest-provider.yaml new file mode 100644 index 0000000000..200a8851a5 --- /dev/null +++ b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-guest-provider.yaml @@ -0,0 +1,36 @@ +apiVersion: extensions.backstage.io/v1alpha1 +kind: Package +metadata: + name: backstage-plugin-auth-backend-module-guest-provider + namespace: rhdh + title: "Auth Backend Module Guest Provider" + links: + - url: https://red.ht/rhdh + title: Homepage + - url: https://github.com/backstage/backstage/issues + title: Bugs + - title: Source Code + url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-guest-provider + annotations: + backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-guest-provider + tags: + - authentication +spec: + packageName: "@backstage/plugin-auth-backend-module-guest-provider" + dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-guest-provider:bs_1.52.0__0.2.20 + version: 0.2.20 + backstage: + role: backend-plugin-module + supportedVersions: 1.52.0 + author: Red Hat + support: generally-available + lifecycle: active + partOf: + - backstage-plugin-auth-backend-module-guest-provider + appConfigExamples: + - title: Default configuration + content: + auth: + providers: + guest: + dangerouslyAllowOutsideDevelopment: false diff --git a/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-microsoft-provider.yaml b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-microsoft-provider.yaml new file mode 100644 index 0000000000..fd64de48c3 --- /dev/null +++ b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-microsoft-provider.yaml @@ -0,0 +1,42 @@ +apiVersion: extensions.backstage.io/v1alpha1 +kind: Package +metadata: + name: backstage-plugin-auth-backend-module-microsoft-provider + namespace: rhdh + title: "Auth Backend Module Microsoft Provider" + links: + - url: https://red.ht/rhdh + title: Homepage + - url: https://github.com/backstage/backstage/issues + title: Bugs + - title: Source Code + url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-microsoft-provider + annotations: + backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-microsoft-provider + tags: + - authentication +spec: + packageName: "@backstage/plugin-auth-backend-module-microsoft-provider" + dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-microsoft-provider:bs_1.52.0__0.3.16 + version: 0.3.16 + backstage: + role: backend-plugin-module + supportedVersions: 1.52.0 + author: Red Hat + support: generally-available + lifecycle: active + partOf: + - backstage-plugin-auth-backend-module-microsoft-provider + appConfigExamples: + - title: Default configuration + content: + auth: + providers: + microsoft: + development: + clientId: ${MICROSOFT_CLIENT_ID} + clientSecret: ${MICROSOFT_CLIENT_SECRET} + tenantId: ${MICROSOFT_TENANT_ID} + signIn: + resolvers: + - resolver: emailMatchingUserEntityProfileEmail diff --git a/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-oidc-provider.yaml b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-oidc-provider.yaml new file mode 100644 index 0000000000..1ff72c3658 --- /dev/null +++ b/workspaces/backstage/metadata/backstage-plugin-auth-backend-module-oidc-provider.yaml @@ -0,0 +1,42 @@ +apiVersion: extensions.backstage.io/v1alpha1 +kind: Package +metadata: + name: backstage-plugin-auth-backend-module-oidc-provider + namespace: rhdh + title: "Auth Backend Module OIDC Provider" + links: + - url: https://red.ht/rhdh + title: Homepage + - url: https://github.com/backstage/backstage/issues + title: Bugs + - title: Source Code + url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-oidc-provider + annotations: + backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-oidc-provider + tags: + - authentication +spec: + packageName: "@backstage/plugin-auth-backend-module-oidc-provider" + dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-oidc-provider:bs_1.52.0__0.4.17 + version: 0.4.17 + backstage: + role: backend-plugin-module + supportedVersions: 1.52.0 + author: Red Hat + support: generally-available + lifecycle: active + partOf: + - backstage-plugin-auth-backend-module-oidc-provider + appConfigExamples: + - title: Default configuration + content: + auth: + providers: + oidc: + development: + clientId: ${OIDC_CLIENT_ID} + clientSecret: ${OIDC_CLIENT_SECRET} + metadataUrl: ${OIDC_METADATA_URL} + signIn: + resolvers: + - resolver: emailMatchingUserEntityProfileEmail diff --git a/workspaces/backstage/smoke-tests/test.env b/workspaces/backstage/smoke-tests/test.env index 384e062c4c..a366be3d96 100644 --- a/workspaces/backstage/smoke-tests/test.env +++ b/workspaces/backstage/smoke-tests/test.env @@ -9,10 +9,14 @@ EMAIL_HOSTNAME=localhost EMAIL_PASSWORD=dummy-smoke-test-secret EMAIL_SENDER=smoke-test@example.com EMAIL_USERNAME=dummyUser +GITHUB_CLIENT_ID=smoke-client-id +GITHUB_CLIENT_SECRET=dummy-smoke-test-secret GITHUB_ORG=smoke-test-org GITHUB_URL=https://github.com GITHUB_WEBHOOK_SECRET=smoke-webhook-secret GITHUB_TOKEN=dummy-smoke-test-secret +GITLAB_CLIENT_ID=smoke-client-id +GITLAB_CLIENT_SECRET=dummy-smoke-test-secret GITLAB_DISCOVERY_GROUP=smoke-test-org GITLAB_HOST=gitlab.example.com GITLAB_ORG_GROUP=smoke-test-org @@ -27,6 +31,14 @@ LDAP_GROUPS_DN=dc=smoke,dc=example,dc=com LDAP_TARGET_URL=ldap://localhost:389 LDAP_USERS_DN=dc=smoke,dc=example,dc=com MCP_TOKEN=dummy-smoke-test-secret +OIDC_CLIENT_ID=smoke-client-id +OIDC_CLIENT_SECRET=dummy-smoke-test-secret +OIDC_METADATA_URL=https://smoke-test.example.com/oidc_metadata_url MICROSOFT_CLIENT_ID=smoke-client-id MICROSOFT_CLIENT_SECRET=dummy-smoke-test-secret MICROSOFT_TENANT_ID=11111111-1111-1111-1111-111111111111 + +# Disable RHDH's static authProvidersModule so the dynamic keycloak provider +# can register without "No auth provider found for keycloak". +# TODO: remove this once RHIDP-11651 removes the static auth module. +ENABLE_AUTH_PROVIDER_MODULE_OVERRIDE=true \ No newline at end of file