canonical / identity-platform-admin-ui-operator

Charmed Operator for the Identity Platform Admin UI application.

Identity Platform Admin UI Charmed Operator

Description

This repository hosts a Juju Kubernetes Charmed Operator for the Identity Platform Admin UI application.

Usage

The identity-platform-admin-ui operator can be deployed using the following command:

juju deploy identity-platform-admin-ui --channel edge --trust

Integrations

Please refer to the metadata.yaml for all required and provided integrations.

kratos_info Integration

juju integrate identity-platform-admin-ui:kratos-info kratos

hydra_endpoint_info Integration

juju integrate identity-platform-admin-ui:hydra-endpoint-info hydra

oathkeeper_info Integration

juju integrate identity-platform-admin-ui:oathkeeper-info oathkeeper

openfga Integration

juju integrate identity-platform-admin-ui openfga-k8s

ingress Integration

juju integrate identity-platform-admin-ui:ingress traefik-k8s

oauth Integration

juju integrate identity-platform-admin-ui:oauth hydra

certificate_transfer integration

If the oauth integration is built, please also integrate with a CA issuer charmed operator, e.g.elf-signed-certificats` operator:

juju integrate identity-platform-admin-ui:receive-ca-cert self-signed-certificates

Security

Security issues can be reported through LaunchPad. Please do not file GitHub issues about security issues.

Contributing

Please see the Juju SDK docs for guidelines on enhancements to this charm following best practice guidelines, and CONTRIBUTING.md for developer guidance.

License

The Identity Platform Admin UI Charmed Operator is a free software, distributed under the Apache Software License, version 2.0. See LICENSE for more information.

identity-platform-admin-ui-operator's Issues

Create a grafana dashboard for Admin UI

Admin UI is integrated with grafana, but doesn't have a dashboard template defined.

Admin UI fails to start when openfga config is not ready

Due to recent changes to the image, Admin UI fails to start the service when openfga relation is in place, but it's missing the store and model config:

{"severity":"error","@timestamp":"2024-04-15T08:15:38.698981745Z","message":"invalid config object: Key: 'Config.ApiScheme' Error:Field validation for 'ApiScheme' failed on the 'required' tag\nKey: 'Config.ApiHost' Error:Field validation for 'ApiHost' failed on the 'required' tag\nKey: 'Config.StoreID' Error:Field validation for 'StoreID' failed on the 'required' tag\nKey: 'Config.ApiToken' Error:Field validation for 'ApiToken' failed on the 'required' tag\nKey: 'Config.AuthModelID' Error:Field validation for 'AuthModelID' failed on the 'required' tag"}
panic: OpenFGA config missing

The container shouldn't be replanned until these environment variables are present.