From c7f45836d22f4f5f9527db1aad44ef8471f434bf Mon Sep 17 00:00:00 2001 From: Thomas Binu Thomas Date: Fri, 26 Jun 2026 11:51:25 +0100 Subject: [PATCH 1/8] refactor(backend): reword backend to auth-gateway --- backend/Cargo.lock | 2 +- backend/Cargo.toml | 4 ++-- backend/Dockerfile.auth-daemon | 6 +++--- .../{Dockerfile.oidc-bff => Dockerfile.auth-gateway} | 12 ++++++------ backend/Dockerfile.graph-proxy | 6 +++--- backend/Dockerfile.sessionspaces | 6 +++--- backend/auth-core/README.md | 2 +- backend/auth-core/src/middleware/inject_token.rs | 2 +- backend/auth-core/src/oidc.rs | 2 +- backend/oidc-bff/Cargo.toml | 6 +++--- backend/oidc-bff/README.md | 6 +++--- backend/oidc-bff/src/login.rs | 1 - backend/oidc-bff/src/main.rs | 3 +-- 13 files changed, 28 insertions(+), 30 deletions(-) rename backend/{Dockerfile.oidc-bff => Dockerfile.auth-gateway} (55%) diff --git a/backend/Cargo.lock b/backend/Cargo.lock index c5ffafc70..c6c6b19e6 100644 --- a/backend/Cargo.lock +++ b/backend/Cargo.lock @@ -4391,7 +4391,7 @@ dependencies = [ ] [[package]] -name = "oidc-bff" +name = "auth-gateway" version = "0.1.0" dependencies = [ "anyhow", diff --git a/backend/Cargo.toml b/backend/Cargo.toml index a95f7b435..5ced373e7 100644 --- a/backend/Cargo.toml +++ b/backend/Cargo.toml @@ -4,8 +4,8 @@ members = [ "auth-core", "auth-core/migration", "auth-daemon", - "graph-proxy", - "oidc-bff", + "graph-proxy", + "auth-gateway", "sessionspaces", "telemetry", ] diff --git a/backend/Dockerfile.auth-daemon b/backend/Dockerfile.auth-daemon index 59173897c..f850ac541 100644 --- a/backend/Dockerfile.auth-daemon +++ b/backend/Dockerfile.auth-daemon @@ -7,7 +7,7 @@ RUN cargo install cargo-auditable COPY argo-workflows-openapi/Cargo.toml argo-workflows-openapi/Cargo.toml COPY graph-proxy/Cargo.toml graph-proxy/ COPY sessionspaces/Cargo.toml sessionspaces/ -COPY oidc-bff/Cargo.toml oidc-bff/ +COPY auth-gateway/Cargo.toml auth-gateway/ COPY auth-core/Cargo.toml auth-core/ COPY auth-core/migration/Cargo.toml auth-core/migration/ COPY auth-daemon/Cargo.toml auth-daemon/ @@ -21,8 +21,8 @@ RUN mkdir -p argo-workflows-openapi/src \ && echo "fn main() {}" > graph-proxy/src/main.rs \ && mkdir -p sessionspaces/src \ && echo "fn main() {}" > sessionspaces/src/main.rs \ - && mkdir -p oidc-bff/src \ - && echo "fn main() {}" > oidc-bff/src/main.rs \ + && mkdir -p auth-gateway/src \ + && echo "fn main() {}" > auth-gateway/src/main.rs \ && mkdir -p auth-daemon/src \ && echo "fn main() {}" > auth-daemon/src/main.rs \ && mkdir -p auth-core/src \ diff --git a/backend/Dockerfile.oidc-bff b/backend/Dockerfile.auth-gateway similarity index 55% rename from backend/Dockerfile.oidc-bff rename to backend/Dockerfile.auth-gateway index 4c5fe74d1..4b3d21f7f 100644 --- a/backend/Dockerfile.oidc-bff +++ b/backend/Dockerfile.auth-gateway @@ -9,14 +9,14 @@ COPY Cargo.toml Cargo.lock ./ COPY . . -RUN touch --date @0 oidc-bff/src/main.rs \ - && cargo build --release --package oidc-bff +RUN touch --date @0 auth-gateway/src/main.rs \ + && cargo build --release --package auth-gateway -RUN touch oidc-bff/src/main.rs \ - && cargo auditable build --release --package oidc-bff +RUN touch auth-gateway/src/main.rs \ + && cargo auditable build --release --package auth-gateway FROM gcr.io/distroless/cc-debian12@sha256:d703b626ba455c4e6c6fbe5f36e6f427c85d51445598d564652a2f334179f96e AS deploy -COPY --from=build /app/target/release/oidc-bff /oidc-bff +COPY --from=build /app/target/release/auth-gateway /auth-gateway -ENTRYPOINT ["/oidc-bff"] +ENTRYPOINT ["/auth-gateway"] diff --git a/backend/Dockerfile.graph-proxy b/backend/Dockerfile.graph-proxy index 1f6af085a..71bb18f16 100644 --- a/backend/Dockerfile.graph-proxy +++ b/backend/Dockerfile.graph-proxy @@ -15,7 +15,7 @@ COPY auth-core/Cargo.toml auth-core/ COPY auth-core/src/lib.rs auth-core/src/lib.rs COPY auth-core/migration/Cargo.toml auth-core/migration/ COPY auth-daemon/Cargo.toml auth-daemon/ -COPY oidc-bff/Cargo.toml oidc-bff/ +COPY auth-gateway/Cargo.toml auth-gateway/ COPY graph-proxy/Cargo.toml graph-proxy/ COPY telemetry/build.rs telemetry/Cargo.toml telemetry/ COPY Cargo.toml Cargo.lock ./ @@ -24,8 +24,8 @@ RUN mkdir -p graph-proxy/src \ && echo "fn main() {}" > graph-proxy/src/main.rs \ && mkdir -p sessionspaces/src \ && echo "fn main() {}" > sessionspaces/src/main.rs \ - && mkdir -p oidc-bff/src \ - && echo "fn main() {}" > oidc-bff/src/main.rs \ + && mkdir -p auth-gateway/src \ + && echo "fn main() {}" > auth-gateway/src/main.rs \ && mkdir -p auth-core/src \ && touch auth-core/src/lib.rs \ && echo "fn main() {}" > auth-core/src/main.rs \ diff --git a/backend/Dockerfile.sessionspaces b/backend/Dockerfile.sessionspaces index bdba0da35..b5ab6483f 100644 --- a/backend/Dockerfile.sessionspaces +++ b/backend/Dockerfile.sessionspaces @@ -10,7 +10,7 @@ COPY argo-workflows-openapi/Cargo.toml argo-workflows-openapi/Cargo.toml COPY graph-proxy/Cargo.toml graph-proxy/ COPY sessionspaces/Cargo.toml sessionspaces/ COPY auth-daemon/Cargo.toml auth-daemon/ -COPY oidc-bff/Cargo.toml oidc-bff/ +COPY auth-gateway/Cargo.toml auth-gateway/ COPY auth-core/Cargo.toml auth-core/ COPY auth-core/src/lib.rs auth-core/src/lib.rs COPY auth-core/migration/Cargo.toml auth-core/migration/ @@ -26,8 +26,8 @@ RUN mkdir -p argo-workflows-openapi/src \ && echo "fn main() {}" > sessionspaces/src/main.rs \ && mkdir -p auth-daemon/src \ && echo "fn prebuild() {}" > auth-daemon/src/main.rs \ - && mkdir -p oidc-bff/src \ - && echo "fn main() {}" > oidc-bff/src/main.rs \ + && mkdir -p auth-gateway/src \ + && echo "fn main() {}" > auth-gateway/src/main.rs \ && mkdir -p telemetry/src \ && echo "fn prebuild() {}" > telemetry/src/lib.rs diff --git a/backend/auth-core/README.md b/backend/auth-core/README.md index 812149a77..2b4ba02af 100644 --- a/backend/auth-core/README.md +++ b/backend/auth-core/README.md @@ -1,6 +1,6 @@ # auth-core -Shared Rust library providing OIDC authentication primitives for the Workflows auth services. Not deployed independently — consumed by `auth-daemon` and `oidc-bff` as a Cargo dependency. +Shared Rust library providing OIDC authentication primitives for the Workflows auth services. Not deployed independently — consumed by `auth-daemon` and `auth-gateway` as a Cargo dependency. ## What it provides diff --git a/backend/auth-core/src/middleware/inject_token.rs b/backend/auth-core/src/middleware/inject_token.rs index 4b754d636..341ff3721 100644 --- a/backend/auth-core/src/middleware/inject_token.rs +++ b/backend/auth-core/src/middleware/inject_token.rs @@ -13,7 +13,7 @@ use crate::request::{clone_request, prepare_headers}; /// Injects a token into the request, refreshing it if expired, and retries on auth failure. /// Use this when the store cannot be expressed as a single `Arc` in axum `State` — for /// example, when it must be assembled per-request from multiple sources such as shared app -/// state and a per-request session (as in oidc-bff's `GatewayTokenContext`). +/// state and a per-request session (as in auth-gateway's `GatewayTokenContext`). pub async fn inject_token_with( store: &S, req: Request, diff --git a/backend/auth-core/src/oidc.rs b/backend/auth-core/src/oidc.rs index 88eb0aa06..0b0a27a34 100644 --- a/backend/auth-core/src/oidc.rs +++ b/backend/auth-core/src/oidc.rs @@ -9,7 +9,7 @@ use sodiumoxide::crypto::box_::{PublicKey, SecretKey}; use crate::Result; -// Re-export types needed by downstream crates (oidc-bff, auth-daemon) +// Re-export types needed by downstream crates (auth-gateway, auth-daemon) pub use reqwest::Client as HttpClient; pub use sea_orm::DatabaseConnection as DbConnection; pub use sodiumoxide::crypto::box_::PublicKey as SodiumPublicKey; diff --git a/backend/oidc-bff/Cargo.toml b/backend/oidc-bff/Cargo.toml index 25d887ec0..57c790b9c 100644 --- a/backend/oidc-bff/Cargo.toml +++ b/backend/oidc-bff/Cargo.toml @@ -1,8 +1,8 @@ [package] -name = "oidc-bff" +name = "auth-gateway" version = "0.1.0" edition = "2024" -default-run = "oidc-bff" +default-run = "auth-gateway" license-file = "../../LICENSE" [[bin]] @@ -11,7 +11,7 @@ path = "src/bin/keygen.rs" publish = false [dependencies] -async-trait = {workspace = true } +async-trait = {workspace = true } auth-core = { path = "../auth-core" } anyhow = { workspace = true, features = ["backtrace"] } axum = { workspace = true, features = ["macros"] } diff --git a/backend/oidc-bff/README.md b/backend/oidc-bff/README.md index 95b54f4dd..241db604f 100644 --- a/backend/oidc-bff/README.md +++ b/backend/oidc-bff/README.md @@ -1,11 +1,11 @@ -# oidc-bff +# Auth-Gateway -Backend-For-Frontend (BFF) authentication gateway for the Workflows UI. Handles OIDC login via Diamond Keycloak, manages browser session cookies, stores encrypted tokens, and proxies authenticated requests to the GraphQL backend. +Authentication gateway for the Workflows UI. Handles OIDC login via Diamond Keycloak, manages browser session cookies, stores encrypted tokens, and proxies authenticated requests to the GraphQL backend. ## Usage ```sh -WORKFLOWS_OIDC_BFF_CONFIG=config.yaml cargo run +WORKFLOWS_AUTH_GATEWAY_CONFIG=config.yaml cargo run ``` Serves on port `5173` by default (configurable in `config.yaml`). diff --git a/backend/oidc-bff/src/login.rs b/backend/oidc-bff/src/login.rs index 34928acfa..c23282459 100644 --- a/backend/oidc-bff/src/login.rs +++ b/backend/oidc-bff/src/login.rs @@ -15,7 +15,6 @@ pub async fn login(State(state): State>, session: Session) -> Resu // Set the URL the user will be redirected to after the authorization process. // .set_redirect_uri(RedirectUrl::new("https://localhost/callback".to_string())?); let oidc_client = state.oidc_client.clone().set_redirect_uri(RedirectUrl::new( - // "http://localhost:5173/auth/callback".to_string(), "https://staging.workflows.diamond.ac.uk/auth/callback".to_string(), )?); // .set_redirect_uri(RedirectUrl::new("https://workflows.diamond.ac.uk".to_string())?) diff --git a/backend/oidc-bff/src/main.rs b/backend/oidc-bff/src/main.rs index 196c20e4c..3d9243e4f 100644 --- a/backend/oidc-bff/src/main.rs +++ b/backend/oidc-bff/src/main.rs @@ -37,13 +37,12 @@ struct Args { #[arg( short, long, - env = "WORKFLOWS_OIDC_BFF_CONFIG", + env = "WORKFLOWS_AUTH_GATEWAY_CONFIG", default_value = "config.yaml" )] config: String, #[arg( env = "GRAPH_URL", - default_value = "https://staging.workflows.diamond.ac.uk/graphql" )] graph_url: String, } From 9405907f163c31207fdd866d622c64085dad5baf Mon Sep 17 00:00:00 2001 From: Thomas Binu Thomas Date: Fri, 26 Jun 2026 11:57:59 +0100 Subject: [PATCH 2/8] refactor(ci): replace oidc-bff to auth-gateway for ci --- .../{_oidc_bff_code.yaml => _auth_gateway_code.yaml} | 10 +++++----- ...bff_container.yaml => _auth_gateway_container.yaml} | 10 +++++----- .github/workflows/ci.yaml | 10 +++++----- release-please-config.json | 10 +++++----- 4 files changed, 20 insertions(+), 20 deletions(-) rename .github/workflows/{_oidc_bff_code.yaml => _auth_gateway_code.yaml} (86%) rename .github/workflows/{_oidc_bff_container.yaml => _auth_gateway_container.yaml} (85%) diff --git a/.github/workflows/_oidc_bff_code.yaml b/.github/workflows/_auth_gateway_code.yaml similarity index 86% rename from .github/workflows/_oidc_bff_code.yaml rename to .github/workflows/_auth_gateway_code.yaml index 0d140d3df..019eb8c48 100644 --- a/.github/workflows/_oidc_bff_code.yaml +++ b/.github/workflows/_auth_gateway_code.yaml @@ -19,17 +19,17 @@ jobs: - name: Cache Rust Build uses: Swatinem/rust-cache@v2.9.1 with: - shared-key: backend/oidc-bff + shared-key: backend/auth-gateway workspaces: backend - name: Check Formatting - working-directory: backend/oidc-bff + working-directory: backend/auth-gateway run: > cargo fmt --check - name: Lint with Clippy - working-directory: backend/oidc-bff + working-directory: backend/auth-gateway run: > cargo clippy --all-targets @@ -59,11 +59,11 @@ jobs: - name: Cache Rust Build uses: Swatinem/rust-cache@v2.9.1 with: - shared-key: backend/oidc-bff + shared-key: backend/auth-gateway workspaces: backend - name: Run Tests - working-directory: backend/oidc-bff + working-directory: backend/auth-gateway run: > cargo test --all-targets diff --git a/.github/workflows/_oidc_bff_container.yaml b/.github/workflows/_auth_gateway_container.yaml similarity index 85% rename from .github/workflows/_oidc_bff_container.yaml rename to .github/workflows/_auth_gateway_container.yaml index dfce6973d..240bb995d 100644 --- a/.github/workflows/_oidc_bff_container.yaml +++ b/.github/workflows/_auth_gateway_container.yaml @@ -13,7 +13,7 @@ jobs: uses: actions/checkout@v5 - name: Generate Image Name - run: echo IMAGE_REPOSITORY=ghcr.io/$(echo "${{ github.repository }}" | tr '[:upper:]' '[:lower:]' | tr '[_]' '[\-]')-oidc-bff >> $GITHUB_ENV + run: echo IMAGE_REPOSITORY=ghcr.io/$(echo "${{ github.repository }}" | tr '[:upper:]' '[:lower:]' | tr '[_]' '[\-]')-auth-gateway >> $GITHUB_ENV - name: Log in to GitHub Docker Registry if: github.event_name != 'pull_request' @@ -25,7 +25,7 @@ jobs: - name: Extract Version from Tag id: tags - run: echo version=$(echo "${{ github.ref }}" | awk -F '[@v]' '{print $3}') >> $GITHUB_OUTPUT + run: echo version=$(echo "${{ github.ref }}" | awk -F '[@v]' '{print $3}') >> $GITHUB_OUTPUT - name: Docker Metadata id: meta @@ -43,10 +43,10 @@ jobs: uses: docker/build-push-action@v6.18.0 with: context: backend - file: backend/Dockerfile.oidc-bff + file: backend/Dockerfile.auth-gateway target: deploy - push: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/oidc-bff@') }} - load: ${{ !(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/oidc-bff@')) }} + push: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/auth-gateway@') }} + load: ${{ !(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/auth-gateway@')) }} tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} cache-from: type=gha diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 333be771d..f7b26700f 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -79,16 +79,16 @@ jobs: contents: read packages: write - oidc_bff_code: + auth_gateway_code: # Deduplicate jobs from pull requests and branch pushes within the same repo. if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.repository - uses: ./.github/workflows/_oidc_bff_code.yaml + uses: ./.github/workflows/_auth_gateway_code.yaml - oidc_bff_container: + auth_gateway_container: # Deduplicate jobs from pull requests and branch pushes within the same repo. if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.repository - needs: oidc_bff_code - uses: ./.github/workflows/_oidc_bff_container.yaml + needs: auth_gateway_code + uses: ./.github/workflows/_auth_gateway_container.yaml permissions: contents: read packages: write diff --git a/release-please-config.json b/release-please-config.json index 1738929a0..a093bf47d 100644 --- a/release-please-config.json +++ b/release-please-config.json @@ -22,7 +22,7 @@ "path": "/charts/graph-proxy/Chart.yaml", "jsonpath": "$.appVersion" } - ] + ] }, "backend/identity-mapper": { "release-type": "python", @@ -40,13 +40,13 @@ } ] }, - "backend/oidc-bff": { + "backend/auth-gateway": { "release-type": "rust", "extra-files": [ { "type": "yaml", "path": "/charts/dashboard/staging-values.yaml", - "jsonpath": "$.oidcBff.image.tag" + "jsonpath": "$.authGateway.image.tag" } ] }, @@ -58,7 +58,7 @@ "path": "/charts/sessionspaces/Chart.yaml", "jsonpath": "$.appVersion" } - ] + ] }, "frontend/dashboard": { "release-type": "node", @@ -68,7 +68,7 @@ "path": "/charts/dashboard/Chart.yaml", "jsonpath": "$.appVersion" } - ] + ] }, "frontend/relay-workflows-lib": { "release-type": "node" From 94c32f8229abf92339a7a4e887849128a106ca27 Mon Sep 17 00:00:00 2001 From: Thomas Binu Thomas Date: Fri, 26 Jun 2026 12:36:50 +0100 Subject: [PATCH 3/8] refactor(charts): reword oidc-bff to auth-gateway for charts --- charts/dashboard/staging-values.yaml | 8 ++--- .../{oidc-bff.yaml => auth-gateway.yaml} | 36 ++++++++++--------- charts/dashboard/values.yaml | 6 ++-- 3 files changed, 26 insertions(+), 24 deletions(-) rename charts/dashboard/templates/{oidc-bff.yaml => auth-gateway.yaml} (59%) diff --git a/charts/dashboard/staging-values.yaml b/charts/dashboard/staging-values.yaml index f07c27402..79067178f 100644 --- a/charts/dashboard/staging-values.yaml +++ b/charts/dashboard/staging-values.yaml @@ -19,19 +19,19 @@ ingress: - path: /api pathType: Prefix service: - name: oidc-bff + name: auth-gateway port: 80 - path: /auth pathType: Prefix service: - name: oidc-bff + name: auth-gateway port: 80 tls: true secretName: dashboard-tls-cert host: staging.workflows.diamond.ac.uk -oidcBff: +authGateway: enabled: true image: registry: ghcr.io @@ -41,4 +41,4 @@ oidcBff: pullPolicy: IfNotPresent pullSecrets: [] configuration: - secretName: oidc-bff-config + secretName: auth-gateway-config diff --git a/charts/dashboard/templates/oidc-bff.yaml b/charts/dashboard/templates/auth-gateway.yaml similarity index 59% rename from charts/dashboard/templates/oidc-bff.yaml rename to charts/dashboard/templates/auth-gateway.yaml index 9b2c9bb3a..8296e2ced 100644 --- a/charts/dashboard/templates/oidc-bff.yaml +++ b/charts/dashboard/templates/auth-gateway.yaml @@ -1,15 +1,15 @@ -{{- if $.Values.oidcBff.enabled }} +{{- if $.Values.authGateway.enabled }} apiVersion: v1 kind: Service metadata: - name: oidc-bff + name: auth-gateway namespace: {{ .Release.Namespace }} spec: type: ClusterIP selector: - app: oidc-bff + app: auth-gateway ports: - - name: oidc-bff + - name: auth-gateway port: 80 targetPort: 80 protocol: TCP @@ -17,22 +17,22 @@ spec: apiVersion: apps/v1 kind: Deployment metadata: - name: oidc-bff + name: auth-gateway spec: replicas: 1 selector: matchLabels: - app: oidc-bff + app: auth-gateway template: metadata: labels: - app: oidc-bff + app: auth-gateway spec: - imagePullSecrets: {{ include "common.images.renderPullSecrets" (dict "images" (list $.Values.oidcBff.image) "context" $ ) }} + imagePullSecrets: {{ include "common.images.renderPullSecrets" (dict "images" (list $.Values.authGateway.image) "context" $ ) }} containers: - - name: oidc-bff - image: {{ include "common.images.image" ( dict "imageRoot" $.Values.oidcBff.image "global" $.Values.global "chart" $.Chart ) }} - imagePullPolicy: {{ $.Values.oidcBff.image.pullPolicy }} + - name: auth-gateway + image: {{ include "common.images.image" ( dict "imageRoot" $.Values.authGateway.image "global" $.Values.global "chart" $.Chart ) }} + imagePullPolicy: {{ $.Values.authGateway.image.pullPolicy }} ports: - containerPort: 80 livenessProbe: @@ -54,18 +54,20 @@ spec: failureThreshold: 3 periodSeconds: 5 env: - - name: WORKFLOWS_OIDC_BFF_CONFIG - value: "/etc/oidc-bff/config.yaml" + - name: WORKFLOWS_AUTH_GATEWAY_CONFIG + value: "/etc/auth-gateway/config.yaml" + - name: GRAPH_URL + value: "https://staging.workflows.diamond.ac.uk/graphql" - name: RUST_BACKTRACE value: "1" volumeMounts: - - name: oidc-bff-config - mountPath: /etc/oidc-bff + - name: auth-gateway-config + mountPath: /etc/auth-gateway readOnly: true volumes: - - name: oidc-bff-config + - name: auth-gateway-config secret: - secretName: {{ .Values.oidcBff.configuration.secretName | default "oidc-bff-config" }} + secretName: {{ .Values.authGateway.configuration.secretName | default "auth-gateway-config" }} items: - key: config.yaml path: config.yaml diff --git a/charts/dashboard/values.yaml b/charts/dashboard/values.yaml index ba7f3c4b9..835c08ef1 100644 --- a/charts/dashboard/values.yaml +++ b/charts/dashboard/values.yaml @@ -50,12 +50,12 @@ ingress: - path: /api pathType: Prefix service: - name: oidc-bff + name: auth-gateway port: 80 - path: /auth pathType: Prefix service: - name: oidc-bff + name: auth-gateway port: 80 tls: false annotations: @@ -69,5 +69,5 @@ serviceAccount: name: "" annotations: [] -oidcBff: +authGateway: enabled: false From 64814c235fd46b5ce6cd3624662eda698cadfa25 Mon Sep 17 00:00:00 2001 From: Thomas Binu Thomas Date: Wed, 1 Jul 2026 07:27:20 +0100 Subject: [PATCH 4/8] feat(charts): applied new package --- charts/dashboard/staging-values.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/dashboard/staging-values.yaml b/charts/dashboard/staging-values.yaml index 79067178f..f877f44d3 100644 --- a/charts/dashboard/staging-values.yaml +++ b/charts/dashboard/staging-values.yaml @@ -35,9 +35,9 @@ authGateway: enabled: true image: registry: ghcr.io - repository: diamondlightsource/workflows-oidc-bff - tag: "tbt" - digest: "sha256:568b03a69ed9dda9df5bd96470ebba46d0460b7703c71b8ae3333c723a615d89" + repository: diamondlightsource/workflows-auth-gateway + tag: "latest" + digest: "sha256:b4dd2991fc67bb13b432e48821351aefa6487c4f3417c74f2d86cb19634b7760" pullPolicy: IfNotPresent pullSecrets: [] configuration: From 88b44f4b07ad682e8375129adbacd8b613eb5d56 Mon Sep 17 00:00:00 2001 From: TBThomas56 Date: Tue, 30 Jun 2026 20:33:38 +0100 Subject: [PATCH 5/8] feat(charts): parametrize graph-proxy url to auth-gateway --- charts/dashboard/staging-values.yaml | 1 + charts/dashboard/templates/auth-gateway.yaml | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/charts/dashboard/staging-values.yaml b/charts/dashboard/staging-values.yaml index f877f44d3..a2f2f5752 100644 --- a/charts/dashboard/staging-values.yaml +++ b/charts/dashboard/staging-values.yaml @@ -40,5 +40,6 @@ authGateway: digest: "sha256:b4dd2991fc67bb13b432e48821351aefa6487c4f3417c74f2d86cb19634b7760" pullPolicy: IfNotPresent pullSecrets: [] + graphUrl: https://staging.workflows.diamond.ac.uk/graphql configuration: secretName: auth-gateway-config diff --git a/charts/dashboard/templates/auth-gateway.yaml b/charts/dashboard/templates/auth-gateway.yaml index 8296e2ced..21e0cc932 100644 --- a/charts/dashboard/templates/auth-gateway.yaml +++ b/charts/dashboard/templates/auth-gateway.yaml @@ -57,7 +57,7 @@ spec: - name: WORKFLOWS_AUTH_GATEWAY_CONFIG value: "/etc/auth-gateway/config.yaml" - name: GRAPH_URL - value: "https://staging.workflows.diamond.ac.uk/graphql" + value: {{ .Values.authGateway.graphUrl }} - name: RUST_BACKTRACE value: "1" volumeMounts: From 7ea27e99b0e0262b6b196f80af897cab0c4c4303 Mon Sep 17 00:00:00 2001 From: Thomas Binu Thomas Date: Tue, 30 Jun 2026 16:11:37 +0100 Subject: [PATCH 6/8] refactor(backend): change package name to auth-gateway --- backend/{oidc-bff => auth-gateway}/.cargo/config.toml | 0 backend/{oidc-bff => auth-gateway}/.devcontainer/Dockerfile | 0 .../.devcontainer/devcontainer.json | 0 .../.devcontainer/docker-compose.yml | 4 ++-- backend/{oidc-bff => auth-gateway}/Cargo.toml | 0 backend/{oidc-bff => auth-gateway}/README.md | 0 backend/{oidc-bff => auth-gateway}/config.yaml | 0 backend/{oidc-bff => auth-gateway}/src/auth_session_data.rs | 0 backend/{oidc-bff => auth-gateway}/src/bin/keygen.rs | 0 backend/{oidc-bff => auth-gateway}/src/callback.rs | 0 backend/{oidc-bff => auth-gateway}/src/config.rs | 0 backend/{oidc-bff => auth-gateway}/src/login.rs | 0 backend/{oidc-bff => auth-gateway}/src/main.rs | 4 +--- backend/{oidc-bff => auth-gateway}/src/state.rs | 0 14 files changed, 3 insertions(+), 5 deletions(-) rename backend/{oidc-bff => auth-gateway}/.cargo/config.toml (100%) rename backend/{oidc-bff => auth-gateway}/.devcontainer/Dockerfile (100%) rename backend/{oidc-bff => auth-gateway}/.devcontainer/devcontainer.json (100%) rename backend/{oidc-bff => auth-gateway}/.devcontainer/docker-compose.yml (96%) rename backend/{oidc-bff => auth-gateway}/Cargo.toml (100%) rename backend/{oidc-bff => auth-gateway}/README.md (100%) rename backend/{oidc-bff => auth-gateway}/config.yaml (100%) rename backend/{oidc-bff => auth-gateway}/src/auth_session_data.rs (100%) rename backend/{oidc-bff => auth-gateway}/src/bin/keygen.rs (100%) rename backend/{oidc-bff => auth-gateway}/src/callback.rs (100%) rename backend/{oidc-bff => auth-gateway}/src/config.rs (100%) rename backend/{oidc-bff => auth-gateway}/src/login.rs (100%) rename backend/{oidc-bff => auth-gateway}/src/main.rs (98%) rename backend/{oidc-bff => auth-gateway}/src/state.rs (100%) diff --git a/backend/oidc-bff/.cargo/config.toml b/backend/auth-gateway/.cargo/config.toml similarity index 100% rename from backend/oidc-bff/.cargo/config.toml rename to backend/auth-gateway/.cargo/config.toml diff --git a/backend/oidc-bff/.devcontainer/Dockerfile b/backend/auth-gateway/.devcontainer/Dockerfile similarity index 100% rename from backend/oidc-bff/.devcontainer/Dockerfile rename to backend/auth-gateway/.devcontainer/Dockerfile diff --git a/backend/oidc-bff/.devcontainer/devcontainer.json b/backend/auth-gateway/.devcontainer/devcontainer.json similarity index 100% rename from backend/oidc-bff/.devcontainer/devcontainer.json rename to backend/auth-gateway/.devcontainer/devcontainer.json diff --git a/backend/oidc-bff/.devcontainer/docker-compose.yml b/backend/auth-gateway/.devcontainer/docker-compose.yml similarity index 96% rename from backend/oidc-bff/.devcontainer/docker-compose.yml rename to backend/auth-gateway/.devcontainer/docker-compose.yml index 9de487c90..67910a0c1 100644 --- a/backend/oidc-bff/.devcontainer/docker-compose.yml +++ b/backend/auth-gateway/.devcontainer/docker-compose.yml @@ -21,7 +21,7 @@ services: # Runs app on the same network as the database container, allows "forwardPorts" in devcontainer.json function. network_mode: service:db - # Use "forwardPorts" in **devcontainer.json** to forward an app port locally. + # Use "forwardPorts" in **devcontainer.json** to forward an app port locally. # (Adding the "ports" property to this file will not forward from a Codespace.) db: @@ -34,4 +34,4 @@ services: - .env # Add "forwardPorts": ["5432"] to **devcontainer.json** to forward PostgreSQL locally. - # (Adding the "ports" property to this file will not forward from a Codespace.) \ No newline at end of file + # (Adding the "ports" property to this file will not forward from a Codespace.) diff --git a/backend/oidc-bff/Cargo.toml b/backend/auth-gateway/Cargo.toml similarity index 100% rename from backend/oidc-bff/Cargo.toml rename to backend/auth-gateway/Cargo.toml diff --git a/backend/oidc-bff/README.md b/backend/auth-gateway/README.md similarity index 100% rename from backend/oidc-bff/README.md rename to backend/auth-gateway/README.md diff --git a/backend/oidc-bff/config.yaml b/backend/auth-gateway/config.yaml similarity index 100% rename from backend/oidc-bff/config.yaml rename to backend/auth-gateway/config.yaml diff --git a/backend/oidc-bff/src/auth_session_data.rs b/backend/auth-gateway/src/auth_session_data.rs similarity index 100% rename from backend/oidc-bff/src/auth_session_data.rs rename to backend/auth-gateway/src/auth_session_data.rs diff --git a/backend/oidc-bff/src/bin/keygen.rs b/backend/auth-gateway/src/bin/keygen.rs similarity index 100% rename from backend/oidc-bff/src/bin/keygen.rs rename to backend/auth-gateway/src/bin/keygen.rs diff --git a/backend/oidc-bff/src/callback.rs b/backend/auth-gateway/src/callback.rs similarity index 100% rename from backend/oidc-bff/src/callback.rs rename to backend/auth-gateway/src/callback.rs diff --git a/backend/oidc-bff/src/config.rs b/backend/auth-gateway/src/config.rs similarity index 100% rename from backend/oidc-bff/src/config.rs rename to backend/auth-gateway/src/config.rs diff --git a/backend/oidc-bff/src/login.rs b/backend/auth-gateway/src/login.rs similarity index 100% rename from backend/oidc-bff/src/login.rs rename to backend/auth-gateway/src/login.rs diff --git a/backend/oidc-bff/src/main.rs b/backend/auth-gateway/src/main.rs similarity index 98% rename from backend/oidc-bff/src/main.rs rename to backend/auth-gateway/src/main.rs index 3d9243e4f..6479e9d6d 100644 --- a/backend/oidc-bff/src/main.rs +++ b/backend/auth-gateway/src/main.rs @@ -41,9 +41,7 @@ struct Args { default_value = "config.yaml" )] config: String, - #[arg( - env = "GRAPH_URL", - )] + #[arg(env = "GRAPH_URL")] graph_url: String, } diff --git a/backend/oidc-bff/src/state.rs b/backend/auth-gateway/src/state.rs similarity index 100% rename from backend/oidc-bff/src/state.rs rename to backend/auth-gateway/src/state.rs From 8dd642fef4d02c51eebbf07f6d9acb55990ef356 Mon Sep 17 00:00:00 2001 From: Thomas Binu Thomas Date: Tue, 30 Jun 2026 16:49:18 +0100 Subject: [PATCH 7/8] refactor(charts): change secrets for oidc-bff config --- .../templates/auth-gateway-config.yaml | 28 +++++++++++++++++++ .../charts/secrets/templates/oidc-bff.yaml | 28 ------------------- charts/workflows-cluster/staging-values.yaml | 2 +- 3 files changed, 29 insertions(+), 29 deletions(-) create mode 100644 charts/workflows-cluster/charts/secrets/templates/auth-gateway-config.yaml delete mode 100644 charts/workflows-cluster/charts/secrets/templates/oidc-bff.yaml diff --git a/charts/workflows-cluster/charts/secrets/templates/auth-gateway-config.yaml b/charts/workflows-cluster/charts/secrets/templates/auth-gateway-config.yaml new file mode 100644 index 000000000..06e9b9aaa --- /dev/null +++ b/charts/workflows-cluster/charts/secrets/templates/auth-gateway-config.yaml @@ -0,0 +1,28 @@ +{{- if eq .Values.cluster "argus" }} +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + name: auth-gateway-config + namespace: workflows +spec: + encryptedData: + config.yaml: AgAVUclxqYra6pqcnx7piqB0OkxuIcsEWrGO0chMJYvWVwBt1t5HWNwEhUuFECXA3LY3EizJlALH/5/ejt9N7y4Ybu+mkAyM+dPFSPvO2qBP70rWfkTtN4UsT4gXemRhXIr8jA0EO8EjfkhziX/Sqktf6q/6ssguHdtOxQHNKeORN9cbqSnk+R7uCcOM/EFpYsG2sncJf5yyh8dainuQ3/TBPxaRPcMvX5io9zZtRpEG/LisQGnyXAMgLtp/Treik7V9Io7Dq4xI7yn4rswX+Hg13nnj3YWoqYXDrzp/PVNtngepjjHdbxt045bJ7NvF1UN/aM7fFLrZG2v17aKphH1118XTzxMWFByGYSXWEBXQG3wwkNMDPwIUY3EM+npacwEO+5JiTcsnO926V0lJyaQJfD0Ar8MQBgV0cQEoHB0nAUsbUbO6dHwKzOs53lLCssv1wPxmzSf59K0ThqdpJYfFowNrNxQxUeFL49gTyiifEuCzZ1+5t4wF/+NInKRWB92Bq2cbgYb6FE14ZHBeA+lz4JTvUWg1gGhhBDYVh9xyHQct4RiaaSzquWgNLqHYPLDGQktUan1+L57jjATNnp5kvI6M2jrIDCyE4gWDy3OAoOXKnMoFsQHJat2hVLP7O3EvifxczJs2npfG23abX9itxN+XkJYGMScgQlNCavmUN67dX0j0jkXUzQVBOF8VdWkAlMc+GPqu+Ve7b4xyJgGLGLV7CW6xpZBJA2plQmpvTL3fbRm55x8KZGxaQj+nauRlisXVSmGqyaTdakyLYdaMNDlZ7BoTqJLxA750GESXz8fr1kIfbJxYDo3tjKNtM7r3XUJ2Yu258Pw1OW6ZZmS8sJb1zi1JSPI7qGihYlwPBWkpKlzR9AO+iyl3uKI3xZjtMtNzlxdhAqzc4cn04OMwrYHaPPZmU3rQMKL6LFDd3ckJQj5zl12B8pIdFHcLrO57ikv4wRdPtr9KuebA7Zo9mjCeMVmqw3haiS3P7CTMtUcRUrJW84jsgB+34d6kLzC7ZTO19Hze7oKkzH7ltAkT+UbXGxRP/KIKwLRix8xSYkMuaRsCMTpUl2p4jmoMQu+iPgTyr+iQ9nJ1GuJMd1VP8WfazD/KLi/RBHu5QIH+Ixy3QVgxd5K48roLDeng0IG9dAZFCjKkYv50yuk6cuyaALklQVUZSucqzfc2Uics6XCI3tP6S++GI3JCggEBTP9dG5RGd1ukjJGvtALwKK9dGGZIVMPKrF2F3PtBImNwAlrYMketfhPkdnTwaZ69xFHS9YuYd8ACWjytMgKEoml0HnBetbrAE/l0+qhAmULPEWGqbn0qDVXpMOo2Bp2ivlw= + template: + metadata: + name: auth-gateway-config + namespace: workflows +{{- else if eq .Values.cluster "pollux" }} +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + name: auth-gateway-config + namespace: workflows +spec: + encryptedData: + config.yaml: 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 + template: + metadata: + name: auth-gateway-config + namespace: workflows +{{- else }} +{{- end }} diff --git a/charts/workflows-cluster/charts/secrets/templates/oidc-bff.yaml b/charts/workflows-cluster/charts/secrets/templates/oidc-bff.yaml deleted file mode 100644 index 70ac8873a..000000000 --- a/charts/workflows-cluster/charts/secrets/templates/oidc-bff.yaml +++ /dev/null @@ -1,28 +0,0 @@ -{{- if eq .Values.cluster "argus" }} -apiVersion: bitnami.com/v1alpha1 -kind: SealedSecret -metadata: - name: oidc-bff-config - namespace: workflows -spec: - encryptedData: - config.yaml: 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 - template: - metadata: - name: oidc-bff-config - namespace: workflows -{{- else if eq .Values.cluster "pollux" }} -apiVersion: bitnami.com/v1alpha1 -kind: SealedSecret -metadata: - name: oidc-bff-config - namespace: workflows -spec: - encryptedData: - config.yaml: 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 - template: - metadata: - name: oidc-bff-config - namespace: workflows -{{- else }} -{{- end }} diff --git a/charts/workflows-cluster/staging-values.yaml b/charts/workflows-cluster/staging-values.yaml index 3d9d4453c..cc0760ae0 100644 --- a/charts/workflows-cluster/staging-values.yaml +++ b/charts/workflows-cluster/staging-values.yaml @@ -82,7 +82,7 @@ vcluster: "/sessionspaces-ispyb": "kube-system/sessionspaces-ispyb" "/artifact-s3-secret": "graph-proxy/artifact-s3-secret" "/s3-artifact": "workflows/artifact-s3" - "/oidc-bff-config": "workflows/oidc-bff-config" + "/auth-gateway-config": "workflows/auth-gateway-config" "/auth-daemon-config": "workflows/auth-daemon-config" "/postgres-passwords": "workflows/postgres-passwords" "/postgres-argo-workflows-password": "workflows/postgres-argo-workflows-password" From ef377691552d43755513c04b4e5ef45d2aedc926 Mon Sep 17 00:00:00 2001 From: Thomas Binu Thomas Date: Tue, 30 Jun 2026 16:51:30 +0100 Subject: [PATCH 8/8] feat(charts): bump chart versions --- charts/dashboard/Chart.yaml | 2 +- charts/workflows-cluster/Chart.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/charts/dashboard/Chart.yaml b/charts/dashboard/Chart.yaml index be9d71708..ceaa70872 100644 --- a/charts/dashboard/Chart.yaml +++ b/charts/dashboard/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: dashboard description: A dashboard for Diamond workflows type: application -version: 0.2.19 +version: 0.2.20 appVersion: 0.1.13 dependencies: - name: common diff --git a/charts/workflows-cluster/Chart.yaml b/charts/workflows-cluster/Chart.yaml index fdcf737c4..ec09b6cdc 100644 --- a/charts/workflows-cluster/Chart.yaml +++ b/charts/workflows-cluster/Chart.yaml @@ -3,7 +3,7 @@ name: workflows-cluster description: A virtual cluster for Data Analysis workflows type: application -version: 0.13.11 +version: 0.13.12 dependencies: - name: common version: 2.23.0