onboard backstage auth provider plugins as dynamic

default.packages.yaml

@@ -66,6 +66,16 @@ packages:
     support: "generally-available"
   - package: '@backstage-community/plugin-topology'
     support: "generally-available"
+  - package: '@backstage/plugin-auth-backend-module-github-provider'
+    support: "generally-available"
+  - package: '@backstage/plugin-auth-backend-module-gitlab-provider'
+    support: "generally-available"
+  - package: '@backstage/plugin-auth-backend-module-guest-provider'
+    support: "generally-available"
+  - package: '@backstage/plugin-auth-backend-module-microsoft-provider'
+    support: "generally-available"
+  - package: '@backstage/plugin-auth-backend-module-oidc-provider'
+    support: "generally-available"
   - package: '@backstage/plugin-catalog-backend-module-github'
     support: generally-available
   - package: '@backstage/plugin-catalog-backend-module-github-org'

rhdh-supported-packages.txt

@@ -13,6 +13,11 @@ app-defaults/plugins/app-auth
 app-defaults/plugins/app-defaults
 app-defaults/plugins/app-integrations
 
+backstage/plugins/auth-backend-module-github-provider
+backstage/plugins/auth-backend-module-gitlab-provider
+backstage/plugins/auth-backend-module-guest-provider
+backstage/plugins/auth-backend-module-microsoft-provider
+backstage/plugins/auth-backend-module-oidc-provider
 backstage/plugins/catalog-backend-module-github
 backstage/plugins/catalog-backend-module-github-org
 backstage/plugins/catalog-backend-module-ldap

workspaces/backstage/metadata/backstage-plugin-auth-backend-module-github-provider.yaml

@@ -0,0 +1,41 @@
+apiVersion: extensions.backstage.io/v1alpha1
+kind: Package
+metadata:
+  name: backstage-plugin-auth-backend-module-github-provider
+  namespace: rhdh
+  title: "Auth Backend Module GitHub Provider"
+  links:
+    - url: https://red.ht/rhdh
+      title: Homepage
+    - url: https://github.com/backstage/backstage/issues
+      title: Bugs
+    - title: Source Code
+      url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-github-provider
+  annotations:
+    backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-github-provider
+  tags:
+    - authentication
+spec:
+  packageName: "@backstage/plugin-auth-backend-module-github-provider"
+  dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-github-provider:bs_1.52.0__0.5.4
+  version: 0.5.4
+  backstage:
+    role: backend-plugin-module
+    supportedVersions: 1.52.0
+  author: Red Hat
+  support: generally-available
+  lifecycle: active
+  partOf:
+    - backstage-plugin-auth-backend-module-github-provider
+  appConfigExamples:
+    - title: Default configuration
+      content:
+        auth:
+          providers:
+            github:
+              development:
+                clientId: ${GITHUB_CLIENT_ID}
+                clientSecret: ${GITHUB_CLIENT_SECRET}
+                signIn:
+                  resolvers:
+                    - resolver: emailMatchingUserEntityProfileEmail

workspaces/backstage/metadata/backstage-plugin-auth-backend-module-gitlab-provider.yaml

@@ -0,0 +1,41 @@
+apiVersion: extensions.backstage.io/v1alpha1
+kind: Package
+metadata:
+  name: backstage-plugin-auth-backend-module-gitlab-provider
+  namespace: rhdh
+  title: "Auth Backend Module GitLab Provider"
+  links:
+    - url: https://red.ht/rhdh
+      title: Homepage
+    - url: https://github.com/backstage/backstage/issues
+      title: Bugs
+    - title: Source Code
+      url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-gitlab-provider
+  annotations:
+    backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-gitlab-provider
+  tags:
+    - authentication
+spec:
+  packageName: "@backstage/plugin-auth-backend-module-gitlab-provider"
+  dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-gitlab-provider:bs_1.52.0__0.4.4
+  version: 0.4.4
+  backstage:
+    role: backend-plugin-module
+    supportedVersions: 1.52.0
+  author: Red Hat
+  support: generally-available
+  lifecycle: active
+  partOf:
+    - backstage-plugin-auth-backend-module-gitlab-provider
+  appConfigExamples:
+    - title: Default configuration
+      content:
+        auth:
+          providers:
+            gitlab:
+              development:
+                clientId: ${GITLAB_CLIENT_ID}
+                clientSecret: ${GITLAB_CLIENT_SECRET}
+                signIn:
+                  resolvers:
+                    - resolver: emailMatchingUserEntityProfileEmail

workspaces/backstage/metadata/backstage-plugin-auth-backend-module-guest-provider.yaml

@@ -0,0 +1,36 @@
+apiVersion: extensions.backstage.io/v1alpha1
+kind: Package
+metadata:
+  name: backstage-plugin-auth-backend-module-guest-provider
+  namespace: rhdh
+  title: "Auth Backend Module Guest Provider"
+  links:
+    - url: https://red.ht/rhdh
+      title: Homepage
+    - url: https://github.com/backstage/backstage/issues
+      title: Bugs
+    - title: Source Code
+      url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-guest-provider
+  annotations:
+    backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-guest-provider
+  tags:
+    - authentication
+spec:
+  packageName: "@backstage/plugin-auth-backend-module-guest-provider"
+  dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-guest-provider:bs_1.52.0__0.2.20
+  version: 0.2.20
+  backstage:
+    role: backend-plugin-module
+    supportedVersions: 1.52.0
+  author: Red Hat
+  support: generally-available
+  lifecycle: active
+  partOf:
+    - backstage-plugin-auth-backend-module-guest-provider
+  appConfigExamples:
+    - title: Default configuration
+      content:
+        auth:
+          providers:
+            guest:
+              dangerouslyAllowOutsideDevelopment: false

workspaces/backstage/metadata/backstage-plugin-auth-backend-module-microsoft-provider.yaml

@@ -0,0 +1,42 @@
+apiVersion: extensions.backstage.io/v1alpha1
+kind: Package
+metadata:
+  name: backstage-plugin-auth-backend-module-microsoft-provider
+  namespace: rhdh
+  title: "Auth Backend Module Microsoft Provider"
+  links:
+    - url: https://red.ht/rhdh
+      title: Homepage
+    - url: https://github.com/backstage/backstage/issues
+      title: Bugs
+    - title: Source Code
+      url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-microsoft-provider
+  annotations:
+    backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-microsoft-provider
+  tags:
+    - authentication
+spec:
+  packageName: "@backstage/plugin-auth-backend-module-microsoft-provider"
+  dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-microsoft-provider:bs_1.52.0__0.3.16
+  version: 0.3.16
+  backstage:
+    role: backend-plugin-module
+    supportedVersions: 1.52.0
+  author: Red Hat
+  support: generally-available
+  lifecycle: active
+  partOf:
+    - backstage-plugin-auth-backend-module-microsoft-provider
+  appConfigExamples:
+    - title: Default configuration
+      content:
+        auth:
+          providers:
+            microsoft:
+              development:
+                clientId: ${MICROSOFT_CLIENT_ID}
+                clientSecret: ${MICROSOFT_CLIENT_SECRET}
+                tenantId: ${MICROSOFT_TENANT_ID}
+                signIn:
+                  resolvers:
+                    - resolver: emailMatchingUserEntityProfileEmail

workspaces/backstage/metadata/backstage-plugin-auth-backend-module-oidc-provider.yaml

@@ -0,0 +1,42 @@
+apiVersion: extensions.backstage.io/v1alpha1
+kind: Package
+metadata:
+  name: backstage-plugin-auth-backend-module-oidc-provider
+  namespace: rhdh
+  title: "Auth Backend Module OIDC Provider"
+  links:
+    - url: https://red.ht/rhdh
+      title: Homepage
+    - url: https://github.com/backstage/backstage/issues
+      title: Bugs
+    - title: Source Code
+      url: https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-oidc-provider
+  annotations:
+    backstage.io/source-location: url:https://github.com/backstage/backstage/tree/master/plugins/auth-backend-module-oidc-provider
+  tags:
+    - authentication
+spec:
+  packageName: "@backstage/plugin-auth-backend-module-oidc-provider"
+  dynamicArtifact: oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/backstage-plugin-auth-backend-module-oidc-provider:bs_1.52.0__0.4.17
+  version: 0.4.17
+  backstage:
+    role: backend-plugin-module
+    supportedVersions: 1.52.0
+  author: Red Hat
+  support: generally-available
+  lifecycle: active
+  partOf:
+    - backstage-plugin-auth-backend-module-oidc-provider
+  appConfigExamples:
+    - title: Default configuration
+      content:
+        auth:
+          providers:
+            oidc:
+              development:
+                clientId: ${OIDC_CLIENT_ID}
+                clientSecret: ${OIDC_CLIENT_SECRET}
+                metadataUrl: ${OIDC_METADATA_URL}
+                signIn:
+                  resolvers:
+                    - resolver: emailMatchingUserEntityProfileEmail

workspaces/backstage/smoke-tests/test.env

@@ -9,10 +9,14 @@ EMAIL_HOSTNAME=localhost
 EMAIL_PASSWORD=dummy-smoke-test-secret
 EMAIL_SENDER=smoke-test@example.com
 EMAIL_USERNAME=dummyUser
+GITHUB_CLIENT_ID=smoke-client-id
+GITHUB_CLIENT_SECRET=dummy-smoke-test-secret
 GITHUB_ORG=smoke-test-org
 GITHUB_URL=https://github.com
 GITHUB_WEBHOOK_SECRET=smoke-webhook-secret
 GITHUB_TOKEN=dummy-smoke-test-secret
+GITLAB_CLIENT_ID=smoke-client-id
+GITLAB_CLIENT_SECRET=dummy-smoke-test-secret
 GITLAB_DISCOVERY_GROUP=smoke-test-org
 GITLAB_HOST=gitlab.example.com
 GITLAB_ORG_GROUP=smoke-test-org
@@ -27,6 +31,14 @@ LDAP_GROUPS_DN=dc=smoke,dc=example,dc=com
 LDAP_TARGET_URL=ldap://localhost:389
 LDAP_USERS_DN=dc=smoke,dc=example,dc=com
 MCP_TOKEN=dummy-smoke-test-secret
+OIDC_CLIENT_ID=smoke-client-id
+OIDC_CLIENT_SECRET=dummy-smoke-test-secret
+OIDC_METADATA_URL=https://smoke-test.example.com/oidc_metadata_url
 MICROSOFT_CLIENT_ID=smoke-client-id
 MICROSOFT_CLIENT_SECRET=dummy-smoke-test-secret
 MICROSOFT_TENANT_ID=11111111-1111-1111-1111-111111111111
+
+# Disable RHDH's static authProvidersModule so the dynamic keycloak provider
+# can register without "No auth provider found for keycloak".
+# TODO: remove this once RHIDP-11651 removes the static auth module.
+ENABLE_AUTH_PROVIDER_MODULE_OVERRIDE=true