Gateway API: Support Smartcard authentication

Clemens Beckrequested to merge
cb-gatewayapi-smartcard into master

What does this MR do?

Gateway API: Support Smartcard authentication

  • Add smartcard listener to managed Gateway.
  • Change webservice HTTPRoute to bind smartcard listener and hostname.
  • Add ClientTrafficPolicy for tls handling.

Closes #6304 (closed)

Changelog: added

Related issues

Gateway API | Support Smartcard Authentication (#6304 - closed)

Testing

  1. Create certificates with mkcert following https://gitlab-org.gitlab.io/gitlab-development-kit/howto/smartcard/
  2. Create a secret with your CA
  3. Deploy GitLab chart with:
    1. Envoy Gateway enabled
    2. Amartcard authentication enabled (by setting global.appConfig.smartcard.enabled and global.appConfig.smartcard.CASecret)
    3. A premium/ultimate (developer) licence
    4. A webservice image thats has the rails changes of gitlab-org/gitlab!226021 (merged)

Author checklist

For general guidance, please follow our Contributing guide.

Required

For anything in this list which will not be completed, please provide a reason in the MR discussion.

  • Merge Request Title and Description are up to date, accurate, and descriptive.
  • MR targeting the appropriate branch.
  • MR has a green pipeline.
  • Documentation created/updated.
  • Tests added/updated, and test plan for scenarios not covered by automated tests.
  • Equivalent MR/issue for omnibus-gitlab opened.

Reviewers checklist

Edited by Clemens Beck

Merge request reports