Skip to content

Draft: Automate User Management

Samuel Bartel requested to merge 785-automate-user-management into main

GLAuth

GLAuth (Go-lang LDAP Authentication) is an easy Cloud Native LDAP-like server simplifying the secured management of users. The goal is to replace the current solution based on FreeIPA.

Usage

GLAuth is used by our Authentication system (Keycloak) to gather additionnal informations on the users (more specifically the list of the groups they belong to).

Purpose of the MR

this MR will deploy the wollogin components:

  • glauth with its initial configuation and the internal users
  • keycloak sylva realm is updated in order to add glauth as an UserStorageProvider together with the mapping values between keycloak and glauth users and groups
  • the schema is updated in order to add the capacity yo specify for each workload cluster a list of users, groups, roles and rules
  • rancher-users-resources unit deploy the rancher-users-resources helm chart (see sylva-projects/sylva-elements/helm-charts/rancher-users-resources!1) from workload cluster values to create the workload cluster users, groups and roles
  • the rancher-users-resources-inject is used to inject into initial glauth configuration the projected volume corresponding to the users secret and group config maps created on the rancher-users-resources helm chart

Closes #785

Edited by Samuel Bartel

Merge request reports