che-operator/pkg/operator/oauth_client.go

52 lines
1.5 KiB
Go

//
// Copyright (c) 2012-2018 Red Hat, Inc.
// This program and the accompanying materials are made
// available under the terms of the Eclipse Public License 2.0
// which is available at https://www.eclipse.org/legal/epl-2.0/
//
// SPDX-License-Identifier: EPL-2.0
//
// Contributors:
// Red Hat, Inc. - initial API and implementation
//
package operator
import (
oauth "github.com/openshift/api/oauth/v1"
"github.com/operator-framework/operator-sdk/pkg/sdk"
"github.com/sirupsen/logrus"
"k8s.io/apimachinery/pkg/api/errors"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
)
func newOAuthClient(name string, oauthSecret string, keycloakURL string, keycloakRealm string ) *oauth.OAuthClient {
return &oauth.OAuthClient{
TypeMeta: metav1.TypeMeta{
Kind: "OAuthClient",
APIVersion: oauth.SchemeGroupVersion.String(),
},
ObjectMeta: metav1.ObjectMeta{
Name: name,
Labels: map[string]string{"app":"che"},
},
Secret: oauthSecret,
RedirectURIs: []string{
keycloakURL + "/auth/realms/" + keycloakRealm +"/broker/openshift-v3/endpoint",
},
GrantMethod: oauth.GrantHandlerPrompt,
}
}
func CreateOAuthClient (name string, oauthSecret string, keycloakURL string, keycloakRealm string ) *oauth.OAuthClient {
oauthClient := newOAuthClient(name, oauthSecret, keycloakURL, keycloakRealm)
if err := sdk.Create(oauthClient); err != nil && !errors.IsAlreadyExists(err) {
logrus.Errorf("Failed to create oAuth client : %v", err)
return nil
}
return oauthClient
}