Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-4498

Directly support SSO in oc CLI

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Unresolved
    • Undefined
    • None
    • None
    • oc
    • False
    • None
    • False
    • Not Selected
    • 0
    • 0% 0%

    Description

      1. Proposed title of this feature request

      Directly support SSO in oc CLI

      2. What is the nature and description of the request?

      The OpenShift CLI should support logging into an OpenShift cluster directly from the CLI. This should be done by adding an `–sso` command line option to login, for example:

      oc login --sso https://api.mycluster.mydomain.com

      When the --sso switch is used, the CLI would automatically open a browser for the user to perform a login and once successful automatically log the user into the cluster from the CLI.

      Other CLI tools like Azure (az) and Argo CD support this capability and it greatly reduces the friction of using the CLI tool when sso is being used.

      3. Why does the customer need this? (List the business requirements here)

      When integrating SSO with OpenShift, such as Keycloak, logging into the cluster from the CLI becomes a laborious process where the user must perform the following steps:

      a. Login into the OpenShift GUI console
      b. Navigate to Copy login command
      c. Login into console again
      d. Expand Display Token item that is shown
      e. Copy login command and paste into command prompt

      Related RFEs:

      Improve SSO the "Copy Login command" workflow:
      https://issues.redhat.com/browse/RFE-937

      4. List any affected packages or components.

      OpenShift oc CLI

      Attachments

        Activity

          People

            gausingh@redhat.com Gaurav Singh
            gnunn@redhat.com Gerald Nunn
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: