[Feature Request]: Use openly available Oauth Proxy image

[lucferbux]

Feature description

In relation to: opendatahub-io/opendatahub-community#100

Oauth Proxy Image uses the image from registry.redhat.io, which requires authentication, and is thus not freely accessible anonymously. We should look for open alternatives to this image and update it accordingly.

Describe alternatives you've considered

Users can access registering to Red Hat

Anything else?

No response

[shalberd]

so community Openshift Users (OKD) do not also have access to registry.redhat.io via the Openshift Cluster?

https://docs.okd.io/4.9/registry/index.html#registry-authentication-enabled-registry-overview_registry-overview

If testing from within an openshift cluster, I have never had issues with registry.redhat.io image pulling because it is configured as a global image pull secret in the Openshift Cluster.

Meaning: it is not possible for community users to get access to registry.redhat.io? For non-corporate users, Red Hat Developer program should give easy access to registry.redhat.io via a Red Hat Login. https://access.redhat.com/RegistryAuthentication

For Dev outside Openshift, i.e. with Docker or Podman, one initial login should suffice on the local dev computer.

[lucferbux]

@shalberd mmm that's interesting, I wasn't aware of the Red Hat Developer Program, I'm gonna add that to the conversation in opendatahub-io/opendatahub-community#100 cause it's an interesting point.

[lucferbux]

@zdtsw @VaishnaviHire Is this something the operator will take over or are we expecting all the components to manage these resources? (talking about the oauth proxy)

[zdtsw]

i thought we are moving towards the SSO solution, or?

[shalberd]

@zdtsw interesting .. so for example Red Hat Single Sign On / Keycloak, for example? I was under the impression that ODH Notebook controller would need tweaks for that, i.e. ServiceMesh / Istio, but I might be wrong.

[shalberd]

it seems the ose-oauth-proxy image is only available via authenticated access to registry.redhat.io.

opendatahub-io/opendatahub-community#100 (comment)

[lucferbux]

i thought we are moving towards the SSO solution, or?

Yes, that would be ideal, I might close this issue in favor of that if we can sync about it.

[dgutride]

Migrated to: https://issues.redhat.com/browse/RHOAIENG-2910 - Please close the new jira issue if this is no longer valid.