metadata.yaml

# Copyright 2023 Canonical Ltd.
# See LICENSE file for licensing details.
name: oidc-gatekeeper
summary: OIDC Gatekeeper
description: |
  An HTTP Server that an API Gateway (eg Ambassador, Envoy)
  asks if an incoming request is authorized.

  https://journal.arrikto.com/kubeflow-authentication-with-istio-dex-5eafdfac4782

docs: https://discourse.charmhub.io/t/8237
website: https://charmhub.io/oidc-gatekeeper
source: https://github.com/canonical/oidc-gatekeeper-operator
issues: https://github.com/canonical/oidc-gatekeeper-operator/issues

containers:
  oidc-authservice:
    resource: oci-image

resources:
  oci-image:
    type: oci-image
    description: 'Backing OCI image'
    auto-fetch: true
    upstream-source: charmedkubeflow/oidc-authservice:ckf-1.8-58e8217
peers:
  client-secret:
    interface: client-secret
provides:
  oidc-client:
    interface: oidc-client
    schema:
      v1:
        provides:
          type: object
          properties:
            id:
              type: string
            name:
              type: string
            redirectURIs:
              type: array
              items:
                type: string
            secret:
              type: string
          required:
          - id
          - name
          - redirectURIs
          - secret
    versions: [v1]
    __schema_source: https://raw.githubusercontent.com/canonical/operator-schemas/oidc-schemas/oidc-client.yaml
requires:
  dex-oidc-config:
    interface: dex-oidc-config
  ingress:
    interface: ingress
    schema:
      v2:
        requires:
          type: object
          properties:
            service:
              type: string
            port:
              type: integer
            namespace:
              type: string
            prefix:
              type: string
            rewrite:
              type: string
          required:
          - service
          - port
          - namespace
          - prefix
      v1:
        requires:
          type: object
          properties:
            service:
              type: string
            port:
              type: integer
            prefix:
              type: string
            rewrite:
              type: string
          required:
          - service
          - port
          - prefix
    versions: [v1]
    __schema_source: https://raw.githubusercontent.com/canonical/operator-schemas/service-mesh-schemas/ingress.yaml
  ingress-auth:
    interface: ingress-auth
    schema:
      v1:
        requires:
          type: object
          properties:
            service:
              type: string
            port:
              type: integer
            allowed-request-headers:
              type: array
              items:
                type: string
            allowed-response-headers:
              type: array
              items:
                type: string
          required:
          - service
          - port
    versions: [v1]
    __schema_source: https://raw.githubusercontent.com/canonical/operator-schemas/service-mesh-schemas/ingress-auth.yaml
  logging:
    interface: loki_push_api
    optional: true