miki3421 opened a new pull request, #229: URL: https://github.com/apache/openserverless-task/pull/229
`ops config sso` is unavailable with the `0.9.0` task repository. This draft ports configuration, IDE login and SSO administration from `0.9.1` (`71bd01f649d4f6b551240b7a3fa1db47954f4c6b`), targeting the `openserverless` namespace and `openserverless-system-api` workload. The enable/disable implementation, managed-resource preservation, workspace binding and OIDC login logic are retained. The task tree gains `config/sso`, `admin/sso unbind`, SSO help, WhiskUser display columns and the upstream delete confirmation guard when SSO is enabled. Existing `0.9.0` behavior is preserved: namespace deletion still removes the ingress first; non-SSO login produces the same configuration; deployment/dependency handling, Bun prerequisites, CRD API group and image pins remain unchanged. The unrelated IDE dependency changes from `0.9.1` are excluded. ### Validation - Bun 1.3.14: all 3 upstream SSO tests passed (22 assertions), including enable/disable cycles, preservation of unrelated Kubernetes configuration and idempotent disable. - Three legacy IDE scenarios produced identical output/configuration against `0.9.0`; three SSO scenarios checked device flow, explicit workspace binding and password login. - Three mocked delete scenarios confirmed legacy ingress cleanup, SSO protection and explicitly confirmed deletion. - Compiled `0.9.0` CLI resolved the public help/show/disable commands in an offline container; disable reused saved custom Kubernetes names. - SSO TypeScript and task definitions match upstream apart from the resource names required by `0.9.0`. - `git diff --check` passed. Requires the companion admin-api OIDC backport and an image containing it. The existing `opsroot.json` image pin is intentionally unchanged because no new image has been released. SSO is activated explicitly by the administrator. No live cluster or IdP configuration was changed or tested. Companion admin-api draft: https://github.com/apache/openserverless-admin-api/pull/52 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
