[che-auth] - use traefik plugin to set authorization header #20070
Labels
area/security
kind/task
Internal things, technical debt, and to-do tasks to be performed.
severity/P1
Has a major impact to usage or development of the system.
sprint/current
Is your task related to a problem? Please describe.
Traefik now supports local plugin (traefik/traefik#8224 documentation is not merged yet, but PR is here traefik/plugindemo#13). We should use this instead of dedicated header-rewrite-proxy component.
Describe the solution you'd like
We can
Then we need to update che-operator, to not deploy header-rewrite-proxy, but instead deploy and configure traefik plugin. We also need to update traefik version first, to the version that supports this. We might wait to stable release.
Productize header-rewrite-proxy component as part of CRW https://issues.redhat.com/browse/CRW-1944 this may not be needed or in some different form. We won't need to build dockerimage
Describe alternatives you've considered
Use header-rewrite-proxy as separate component
Additional context
epic: Simplify authentication and authorization with a more flexible and lightweight approach #19182
The text was updated successfully, but these errors were encountered: