Skip to content

fournos-ui: add OpenShift OAuth proxy and Let's Encrypt TLS - #116

Merged
openshift-merge-bot[bot] merged 1 commit into
openshift-psap:mainfrom
Harshith-umesh:fournos-ui-gitops
Aug 28, 2026
Merged

fournos-ui: add OpenShift OAuth proxy and Let's Encrypt TLS#116
openshift-merge-bot[bot] merged 1 commit into
openshift-psap:mainfrom
Harshith-umesh:fournos-ui-gitops

Conversation

@Harshith-umesh

Copy link
Copy Markdown
Member

Summary

  • Add OAuth proxy sidecar to authenticate dashboard users via OpenShift's built-in OAuth server
  • Add cert-manager integration with Let's Encrypt ClusterIssuer for automatic TLS certificate issuance
  • Add Route and Certificate CR manifests for the dashboard
  • Update kustomize overlay with patches for OAuth proxy, service TLS, and ServiceAccount annotation
  • Update README with full deployment instructions and troubleshooting

Split from #113 — this PR contains only the gitops/infrastructure changes.

Test plan

  • Verify kustomize build succeeds with the new overlay patches
  • Verify OAuth proxy sidecar starts and redirects unauthenticated users to OpenShift login
  • Verify Let's Encrypt certificate is issued for the dashboard route

Made with Cursor

Secure the dashboard with an OAuth proxy sidecar that authenticates
users via OpenShift's built-in OAuth server. Add cert-manager
integration for automatic Let's Encrypt certificate issuance.

- Add kustomize overlay patches for OAuth proxy sidecar, service TLS,
  and ServiceAccount OAuth redirect annotation
- Add Route, Certificate CR, and ClusterIssuer manifests
- Update README with full deployment instructions and troubleshooting
- Gitignore deployment-specific files (secrets, cluster config)
- Replace params.env.example with oauth-cookie-secret.yaml.example

Co-authored-by: Cursor <cursoragent@cursor.com>
@coderabbitai

coderabbitai Bot commented Aug 25, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 6bd8a04c-4249-4884-9b68-8458daf05720


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@kpouget kpouget left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks @Harshith-umesh
/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Aug 27, 2026
@kpouget

kpouget commented Aug 28, 2026

Copy link
Copy Markdown
Collaborator

/approve

@openshift-ci

openshift-ci Bot commented Aug 28, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kpouget

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 28, 2026
@openshift-merge-bot
openshift-merge-bot Bot merged commit d0a9098 into openshift-psap:main Aug 28, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants