miki3421 opened a new pull request, #52: URL: https://github.com/apache/openserverless-cli/pull/52
`ops config sso` fails with `no command named sso found` when the CLI uses the current `0.9.0` task repository. The CLI's entire `auth/` and `config/` trees already match `0.9.1`; the missing implementation is in the task and admin-api repositories. This documentation-only draft targets `0.9.0` and explains the command ownership, pins the compared commits, and identifies the external components required for a coordinated SSO backport. It also documents the `openserverless` versus `nuvolaris` namespace, workload and CRD API-group differences, and corrects the legacy disable example to `ops -config sso disable`. ### External gaps requiring separate work - `apache/openserverless-task`: `config/sso/`, SSO help discovery, IDE login handling, admin lifecycle commands and WhiskUser SSO columns are missing from `0.9.0`. - `apache/openserverless-admin-api`: the OIDC validator, device/password endpoints, namespace mapping and login-triggered provisioning are missing from `0.9.0`. - `apache/openserverless-testing`: the mock OIDC provider and SSO smoke script are missing from `0.9.0`. - Operator compatibility: `0.9.0` uses `openserverless.org/v1` in namespace `openserverless`, while the `0.9.1` SSO backend uses `nuvolaris.org/v1` in `nuvolaris`. Configuration flags alone do not adapt the backend's Kubernetes client or provisioning code. Companion drafts in the task, admin-api and testing repositories contain the functional backports. This CLI proposal changes documentation only. This draft documents the prerequisites; it does not claim to enable the complete SSO flow on `0.9.0` or restore the old CLI interception of the public command. ### Validation - `git diff --exit-code 83075cbc890dd9692782e27340fd2eee6b498a59 a0dd56cf5667acb092cfbac14de531f5de139af0 -- auth config`: identical trees. - Go 1.24.3: `go test -mod=readonly -buildvcs=false -count=1 -p 2 ./auth ./config` passed. - Go 1.24.3: `go build -mod=readonly -buildvcs=false -p 2 ./cmd/ops` passed. - Five checks of the compiled `0.9.0` binary in containers with networking disabled: embedded SSO help/show succeed; public SSO help/show fail with the `0.9.0` tasks; public SSO help succeeds with the `0.9.1` tasks. - Documentation links validated against the referenced Git objects; `git diff --check` passed. No live cluster, IdP login or deployment was exercised. End-to-end cluster validation remains dependent on the companion backports and an admin-api image containing them. ### Companion drafts - Task backport: https://github.com/apache/openserverless-task/pull/229 - Admin-api backport: https://github.com/apache/openserverless-admin-api/pull/52 - Optional smoke test: https://github.com/apache/openserverless-testing/pull/13 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
