Uploaded image for project: 'Compass '
  1. Compass
  2. COMPASS-7494

Investigate changes in PM-3513: (Backport) Internal Authorization for OIDC

    XMLWordPrintableJSON

Details

    • Icon: Investigation Investigation
    • Resolution: Unresolved
    • Icon: Major - P3 Major - P3
    • None
    • None
    • None
    • None

    Description

      Original Downstream Change Summary

      This project will backport support for internal authorization with OIDC authentication to v7.0. This would allow clients which possess access tokens without roles to authenticate to the server. Access rights are stored in user documents persisted in the server.

      Description of Linked Ticket

      Epic Summary

      Summary

      This project will backport the feature implemented in PM-3385 to the v7.0 LTS branch.

      Motivation

      PM-3385 introduced support for internal authorization for OIDC authenticated clients. This feature simplified administration of clusters using OIDC for workload federation. Atlas configures this feature on Federations, and not necessarily at the level of individual clusters. If some clusters support internal authorization and some do not, Atlas administrators will have an inconsistent experience.

      Documentation

      Product Description
      Scope
      Technical Design
      Docs Update

      Attachments

        Activity

          People

            Unassigned Unassigned
            backlog-server-pm Backlog - Core Eng Program Management Team
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated: