Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[TOAZ-355] [TOAZ-356] Use Managed Identity auth when running Azure Control Plane, support for Service Catalog deployed Azure Managed Apps #1404

Merged
merged 31 commits into from
May 28, 2024

Conversation

aaronegrant
Copy link
Contributor

  • Refactor SAM ARM authorization code to support using a Managed Identity app id instead of Service Principal clientid/clientsecret

  • Service Catalog deployed app support:
    Sam maintains its own list of Terra managed app plans https://github.com/broadinstitute/sam/blob/develop/src/main/resources/sam.conf#L192 and validates a billing profile managed app against this list during billing profile creation.
    Service catalog managed apps do not have a plan defined so we will need change the validation in Sam to accept this.

@aaronegrant aaronegrant marked this pull request as ready for review May 2, 2024 02:26
@aaronegrant aaronegrant requested review from dvoet and rtitle May 2, 2024 02:26
@aaronegrant aaronegrant marked this pull request as draft May 6, 2024 15:23
@aaronegrant aaronegrant marked this pull request as ready for review May 6, 2024 16:05
src/main/resources/sam.conf Outdated Show resolved Hide resolved
Copy link
Contributor

@rtitle rtitle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left a couple comments above, but overall the approach makes sense to me.

@aaronegrant aaronegrant marked this pull request as draft May 16, 2024 17:43
@aaronegrant aaronegrant marked this pull request as draft May 16, 2024 17:43
@aaronegrant aaronegrant marked this pull request as ready for review May 17, 2024 23:12
@aaronegrant aaronegrant requested a review from dvoet May 17, 2024 23:14
@aaronegrant aaronegrant dismissed dvoet’s stale review May 17, 2024 23:21

Refactor of validateAuthorizedAppUser completed

…ic for deciding when to check for ServiceCatalogManagedApps vs MarketplaceManagedApps
@aaronegrant aaronegrant requested review from dvoet and rtitle May 23, 2024 16:29
Copy link
Contributor

@Shakespeared Shakespeared left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not super familiar with this azure functionality but changes seem reasonable to me, requested minor naming changes for clarity

src/main/resources/sam.conf Outdated Show resolved Hide resolved
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
15.8% Duplication on New Code

See analysis details on SonarCloud

@aaronegrant aaronegrant merged commit a65f522 into develop May 28, 2024
16 of 17 checks passed
@aaronegrant aaronegrant deleted the grantaar-azuremanagedapps branch May 28, 2024 16:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants