-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix che-server when used external oidc provider. #18563
Fix che-server when used external oidc provider. #18563
Conversation
[crw-ci-test --rebuild] |
✅ E2E Happy path tests succeed 🎉 See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
@nickboldt please, apply this PR before releasing |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe some tests and refactoring would be really nice to have, Currently the process of assigning the userInfoEndpoint
and jwksUriEndpoint
is not straight forward
...eycloak-server/src/main/java/org/eclipse/che/multiuser/keycloak/server/KeycloakSettings.java
Outdated
Show resolved
Hide resolved
...eycloak-server/src/main/java/org/eclipse/che/multiuser/keycloak/server/KeycloakSettings.java
Outdated
Show resolved
Hide resolved
Can we have a test for this change? |
Code spitted and good covered by tests. |
❌ E2E Happy path tests failed ❗ See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
...eycloak-server/src/main/java/org/eclipse/che/multiuser/keycloak/server/OIDCInfoProvider.java
Outdated
Show resolved
Hide resolved
...eycloak-server/src/main/java/org/eclipse/che/multiuser/keycloak/server/OIDCInfoProvider.java
Outdated
Show resolved
Hide resolved
...eycloak-server/src/main/java/org/eclipse/che/multiuser/keycloak/server/OIDCInfoProvider.java
Show resolved
Hide resolved
❌ E2E Happy path tests failed ❗ See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
❌ E2E Happy path tests failed ❗ See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
❌ E2E Happy path tests failed ❗ See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
@AndrienkoAleksandr tried to verify the PR against Hosted Che but it fails for me on startup with the following error:
Fixup applied on Hosted Che end - ibuziuk/rh-che@61841cb |
...eycloak-server/src/main/java/org/eclipse/che/multiuser/keycloak/server/OIDCInfoProvider.java
Outdated
Show resolved
Hide resolved
...eycloak-server/src/main/java/org/eclipse/che/multiuser/keycloak/server/OIDCInfoProvider.java
Show resolved
Hide resolved
✅ E2E Happy path tests succeed 🎉 See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good job!
verified on che-dev with Hosted Che.
@AndrienkoAleksandr please cherry-pick to 7.23.x once merged
❌ E2E Happy path tests failed ❗ See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
…ider injection way. Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
...ak-server/src/main/java/org/eclipse/che/multiuser/keycloak/server/KeycloakServiceClient.java
Outdated
Show resolved
Hide resolved
@@ -69,23 +69,22 @@ public KeycloakUserRemover( | |||
@Nullable @Named("che.keycloak.cascade_user_removal_enabled") boolean userRemovalEnabled, | |||
@Nullable @Named("che.keycloak.admin_username") String keycloakUser, | |||
@Nullable @Named("che.keycloak.admin_password") String keycloakPassword, | |||
KeycloakSettings keycloakSettings, | |||
OIDCInfoProvider oidcInfoProvider, | |||
@Nullable @Named(REALM_SETTING) String realm, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
what is this new env var about and how is it documented?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That's known property. But if realm is null on the hosted Che, then I think remove user
feature will be broken when this feature is enabled... I see that realm is required for https://github.com/eclipse/che/blob/7.23.x/multiuser/keycloak/che-multiuser-keycloak-user-remover/src/main/java/org/eclipse/che/multiuser/keycloak/server/KeycloakUserRemover.java#L89. But maybe it's not an issue if hosted Che doesn't supports this feature at all.
@AndrienkoAleksandr tried the new version against Hosted Che and still theia is not loaded with the following error, but this does not look like related this PR:
|
I can't reproduce that neither with |
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
aaa275e
to
07b109d
Compare
❌ E2E Happy path tests failed ❗ See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
+1. I can't reproduce it on the crc (openshift 4) cluster too. |
Test failed ❌ E2E Happy path tests failed ❗ See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
❌ E2E Happy path tests failed ❗ See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
yeah theia loading, is not related to this PR |
@skabashnyuk Could you review this pr, please? |
@rhopp @dmytro-ndp folks looks like e2e pr-check is fairly unstable - https://codeready-workspaces-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/Multiuser-Che-PR-check-E2E-Happy-path-tests-against-k8s/ how should we proceed? this change is needed to be backported to 7.23.x today |
[crw-ci-test --rebuild] |
✅ E2E Happy path tests succeed 🎉 See Details
Tested with Eclipse Che Multiuser User on K8S (minikube v1.1.1)
|
What does this PR do?
Fix che-server when used external oidc provider.
What issues does this PR fix or reference?
#18553
How to test this PR?
PR Checklist
As the author of this Pull Request I made sure that:
What issues does this PR fix or reference
andHow to test this PR
completedReviewers
Reviewers, please comment how you tested the PR when approving it.
Signed-off-by: Oleksandr Andriienko oandriie@redhat.com