We need to investigate how to connect Keycloak authentication to Envoy proxy so that we can be sure that it's possible and API Gateway can use it as authentication/authorization provider.
Acceptance criteria
We created list of steps we need to take to connect Keycloak to Envoy.
To-Do
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Invalid | None | T321040 PoC services authentication | |||
| Resolved | roman-stolar | T321054 Investigation on how to connect Keycloack to Envoy proxy | |||
| Resolved | roman-stolar | T321067 Create API client example for authentication with Envoy | |||
| Resolved | roman-stolar | T322076 Connecting Envoy proxy with Keycloak |
Current configuration of the CentralAuth: https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/CentralAuth/+/refs/heads/master/extension.json
Options/Examples:
Potential solutions:
Setting task status to resolved as this task has been in the Done workboard column for months. (Please resolve tasks if there is nothing left to do!)
If there is still more to do in this task, then please reopen this task - thanks a lot!
Please set status of resolved tasks set to resolved, otherwise these tasks clutter the search results for open tasks.
Setting task status back to resolved as this task has been in the Done workboard column for months.
In case you lack visibility of resolved tasks on a project workboard, then the workboard view can be changed to show all tasks instead of only open tasks by filtering the view in the upper right corner (and you could also set that view as default).