Skip to content

Revert mTLS / multi-authenticator effort (#41, #52) - #57

Draft
philipgough wants to merge 1 commit into
rhobs:rhobs-obs-api-konfluxfrom
philipgough:mtls-revert
Draft

Revert mTLS / multi-authenticator effort (#41, #52)#57
philipgough wants to merge 1 commit into
rhobs:rhobs-obs-api-konfluxfrom
philipgough:mtls-revert

Conversation

@philipgough

Copy link
Copy Markdown

Reverts the path-based-auth and multi-authenticator framework landed in PR #41 (mtls-spike, fc22eac) and PR #52 (multi-auth-safe, d2e2a61):

  • Removes per-tenant multiple authenticators, per-path dispatch (PathPattern/PathMatcher), and path support added to the mTLS, OIDC, and OPA authenticators.
  • Restores authentication/{authentication,http,mtls,oidc}.go and main.go to their pre-effort state; deletes the effort-only tests, root ca.crt, test/e2e/path_rbac_test.go, and the test/kind e2e environment.

…rium#52)

Reverts the path-based-auth and multi-authenticator framework landed in
PR observatorium#41 (mtls-spike, fc22eac) and PR observatorium#52 (multi-auth-safe, d2e2a61):

- Removes per-tenant multiple authenticators, per-path dispatch
  (PathPattern/PathMatcher), and path support added to the mTLS, OIDC,
  and OPA authenticators.
- Restores authentication/{authentication,http,mtls,oidc}.go and main.go
  to their pre-effort state; deletes the effort-only tests, root ca.crt,
  test/e2e/path_rbac_test.go, and the test/kind e2e environment.

Preserves unrelated work landed after the effort:
- PR observatorium#51 (b3f5e32) OIDC token-expired -> 403 handling.
- PR observatorium#54/observatorium#55/observatorium#56 changes to main.go (upstream merge, logs metrics,
  alertmanager silenceID).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant