[feedhenry-dev] Change of Scope for 3Scale/APICast Integration for 5.x

[David Martin]

Hi all,

As per Jason's mail with subject 'MCP PoC - Sprint 5 Goals',
the Goal of the 5.x team current sprint [0] is:

"looking into 3scale apicast fronting Sync and KeyCloak"

This Goal is actually 2 sub-goals.
- Put 3Scale in front of Sync, using App ID/App Key authentication
- Put 3Scale in front of Sync, using OpenID Connect authtentication via

To give some context, the 3Scale integration will require/involve:
- having a 3Scale SaaS account on 3scale.net (90 day trial accounts are
available)
- provisioning the 3Scale gateway (APICast) via the Service Catalog in
OpenShift
- MCP will autoconfigure your 3Scale SaaS a/c for sitting in front of Sync
with App ID/Key authentication
- APICast will make a call to 3Scale SaaS on startup to get it's
confguration for doing authentication & proxying to Sync


I propose that for this sprint we only focus on the first of these
sub-goals.
The OpenID Connect authentication integration can be deferred.


Rationale for this proposal:
- the OpenID Connect authentication option is currently not generally
available in 3Scale SaaS (may be in the near future, based on activity on
the apicast repo [1])
- the Keycloak service will need to be publicly accessible to 3Scale SaaS
to allow it to configure the necessary client(s) in your Keycloak


Thoughts & comments welcome
Thanks


[0] https://issues.jboss.org/secure/RapidBoard.jspa?rapidView=4143
[1] https://github.com/3scale/apicast


-- 
David Martin
Red Hat Mobile
Twitter: @irldavem
IRC: @irldavem (feedhenry, mobile-internal)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/feedhenry-dev/attachments/20171011/0c2bb187/attachment.htm>