Skip to content

Introduce OIDC Authentication Support for GOP Tools #510

Merged
FelixWende99 merged 18 commits into
developfrom
feature/oidc-test
Jun 30, 2026
Merged

Introduce OIDC Authentication Support for GOP Tools #510
FelixWende99 merged 18 commits into
developfrom
feature/oidc-test

Conversation

@FelixWende99

@FelixWende99 FelixWende99 commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

This PR adds support for OpenID Connect (OIDC) authentication across multiple tools (such as Argo CD, Grafana, Vault, and Jenkins) to enable admin authentication via external identity
providers. Local fallback options remain intact.

Configuration additions:

  • New properties added in Config.groovy
  • Updated configuration.schema.json.

Tool integrations:

  • Vault's dev-post-start.ftl.sh configures and enables OIDC authentication dynamically when setup credentials are provided.
  • Jenkins automatically pre-installs the necessary OIDC plugins (oic-auth  and  json-path-api) in Jenkins.groovy to boot cleanly with configuration as code (JCasC).
  • Argo CD and Grafana parse and embed user-configured OIDC configurations directly within Helm chart templates.

Refactoring and fixes:

  • UserManager.groovy method UserManager.groovy skips local metric API user creations if an external security realm (like OIC) is configured.

Developer Setup:

  • Added documentation oidc.md on running a local Keycloak instance.

nihussmann and others added 14 commits May 13, 2026 07:15
skip local metrics-user creation for oidc security realm
# Conflicts:
#	docs/Configuration.md
#	docs/configuration.schema.json
#	scripts/jenkins/plugins/plugins.txt
#	src/main/groovy/com/cloudogu/gitops/config/Config.groovy
#	src/main/groovy/com/cloudogu/gitops/config/ConfigConstants.groovy
#	src/main/groovy/com/cloudogu/gitops/features/Jenkins.groovy
#	src/main/groovy/com/cloudogu/gitops/jenkins/UserManager.groovy
#	src/main/resources/application-dev.yaml
#	src/test/groovy/com/cloudogu/gitops/features/JenkinsTest.groovy
#	src/test/groovy/com/cloudogu/gitops/features/VaultTest.groovy
#	src/test/groovy/com/cloudogu/gitops/jenkins/UserManagerTest.groovy
# Conflicts:
#	argocd/cluster-resources/apps/argocd/argocd/values.ftl.yaml
@FelixWende99 FelixWende99 changed the title Feature/OIDC test Enable OIDC Authentication for Feature Tools in GitOps Playground Jun 23, 2026
@FelixWende99 FelixWende99 changed the title Enable OIDC Authentication for Feature Tools in GitOps Playground Introduce OIDC Authentication Support for GOP Tools Jun 23, 2026
@FelixWende99 FelixWende99 self-assigned this Jun 23, 2026
Felix Wende added 4 commits June 23, 2026 11:59
# Conflicts:
#	Jenkinsfile
#	argocd/cluster-resources/apps/jenkins/templates/values.ftl.yaml
#	docs/Configuration.md
#	docs/configuration.schema.json
#	src/test/groovy/com/cloudogu/gitops/tools/core/JenkinsTest.groovy

@ThomasMichael1811 ThomasMichael1811 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@FelixWende99 FelixWende99 merged commit 4559e99 into develop Jun 30, 2026
1 check failed
@FelixWende99 FelixWende99 deleted the feature/oidc-test branch June 30, 2026 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants