Authorising OpenShift Hosted Projects to Community

on YouTube ↗07m

" summary

Fedora builds an Ansible-based operator, CommuniShift Authorisation Operator, that reads group membership from FreeIPA via the FASJSON API (Kerberos-backed) and writes it to OpenShift projects, reconciling every 20 minutes. The implementation uses custom Ansible modules and the Operator SDK, and the same pattern is reused for a second operator syncing groups to Discourse. Demo shows add/remove events picked up and synced so users can log into OpenShift, though the cluster isn’t fully re-released yet.

AI-written summary · about

" related talks

• 31mAutomate Openshift Cluster deployment with RHACM and AAPMichael DiDato, Michael Zamot, Michael Navarro · DevConf.US 2024
• 19mOpenShift in your own backyardFreddy Rolland, Nir Magnezi · DevConf.CZ 2021
• 22mOpenShift, or Kubernetes on steroidsAmine Rachyd · BlaBlaConf 2022
• 31mThe OpenShift federation: how to manage multiple Kubernetes clustersPhilippe Huet · DevOps D-DAY 2019
• 45mOpenShift the power of Kubernetes for developersMarek Jelen · Devoxx Belgium 2017
• 44mThe Road to OKD4: Operators, Fedora CoreOS and K8SDiane Mueller, Christian Glombek · DevConf.CZ 2020
• 34mOpenShift multi-cluster management with RH ACMMario Vázquez, Andres Valero · DevConf.CZ 2021
• 41mOpenShift: a Kubernetes Story in an Enterprise EnvironmentSimonas Kareiva · Build Stuff 2019