Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow updating domain and admin domain seamlessly on upgrade #1220

Open
mjnagel opened this issue Jan 23, 2025 · 0 comments
Open

Allow updating domain and admin domain seamlessly on upgrade #1220

mjnagel opened this issue Jan 23, 2025 · 0 comments
Labels
enhancement New feature or request

Comments

@mjnagel
Copy link
Contributor

mjnagel commented Jan 23, 2025

Is your feature request related to a problem? Please describe.

Currently UDS Core does not (easily) support updating the domain on an existing deployment. While anywhere the domain is directly used in helm values will typically get updated, there are a number of operator-controlled-resources that need to be adjusted when the domain changes. In particular the following need to happen but do not currently:

  • All virtualservices and serviceentries need to update to the new domain
  • Keycloak's trusted host policy needs to be updated to the new domain
  • All SSO clients need to be updated with the right domain (for redirect uris, etc)
  • Related to ^ Authservice configuration must be updated with the right domain
  • Potential pod cycling to ensure all the updated config is read (unsure if this is required)

Describe the solution you'd like

When I update my domain, all deployments properly read in the new domain and Pepr updates any necessary configuration so that everything works!

Describe alternatives you've considered

Document a manual process for how to shift to a new domain - this could be partially necessary with the current state of Keycloak management, but ideally we would manage this all for the end user.

Additional context

This was a TODO from #1186

@mjnagel mjnagel added the enhancement New feature or request label Jan 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant