2021-03-08: Development Meeting

Kacper, Mike L, Mike H, Craig, Tim

Agenda

• Updates
• Forward Auth + Traefik v2
  • https://doc.traefik.io/traefik/middlewares/forwardauth/
  • Supports delegating/forwarding auth to backend service (similar to Oauth2_proxy)
  • Looking at how to use it to secure instances
  • Two different steps:
    • Secure Docker service with Oauth2/authentication
    • Authorization decision (does the authenticated user have user have access to this instance)
  • https://github.com/oauth2-proxy/oauth2-proxy/pull/957

Updates

• Kacper
  • Update Tale/manifest whenever version changes
    • Also fixes Tale must be restarted to see new versions
  • Rebased remaining publish/export with version work from Tommy girder_wholetale#453
  • Reviewing Traefik v2 + Forward Auth work by Craig
• Craig
  • PR review (behind, sorry)
  • Started looking at using forward auth (draft PRs)
    • [WIP] Add endpoint to check whether user is authorized to access an instance
    • [WIP] Add support for authentication and authorization of user accessing instances
    • [WIP] Migrate to traefik v2 and add support for forward auth
  • PresQT API testing (minimal)
• Mike L
• Mike H
• Tim
  • Factoring out reusable code in blazegraph cli for use in cpr, rpz2cpr, etc.
  • Opportunity to be a community maintainer of blazegraph.