Skip to content

feat(charts): policy to enable authenticated workflows#1414

Open
davehadley wants to merge 1 commit into
mainfrom
drh/inject-auth-daemon-into-workflows-2
Open

feat(charts): policy to enable authenticated workflows#1414
davehadley wants to merge 1 commit into
mainfrom
drh/inject-auth-daemon-into-workflows-2

Conversation

@davehadley

@davehadley davehadley commented Jun 26, 2026

Copy link
Copy Markdown
Collaborator

This is incremental progress towards https://jira.diamond.ac.uk/browse/AP-1176
Further changes are needed to https://github.com/DiamondLightSource/workflows/blob/main/charts/workflows/templates/auth-daemon-config-clusterpolicy.yaml
but I would like have this reviewed and merged in now.

It is locked behind a feature flag and only deployed to staging.

@davehadley davehadley force-pushed the drh/inject-auth-daemon-into-workflows-2 branch 3 times, most recently from 310aab4 to 9e02149 Compare June 26, 2026 14:37
@davehadley davehadley force-pushed the drh/inject-auth-daemon-into-workflows-2 branch from 9e02149 to d9ee825 Compare June 26, 2026 14:40
@davehadley davehadley marked this pull request as ready for review June 26, 2026 14:56
spec:
entrypoint: entry
templates:
- name: entry

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think that while we are testing this, could it be worth running having both templates instead of deleting the current one?

parameters:
- name: cmd
value: |
curl -v --request POST ${GRAPH_URL} -H "Content-Type: application/json" -d '{"query": "mutation{ submitWorkflowTemplate(name: \"conditional-steps\", visit: {proposalCode: \"ks\", proposalNumber: 10000, number: 1}, parameters: {}){ name } }" }'

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How does curling this command to the graph intiate auth-daemon. the reason why we curl auth-daemon is so that it can forward that request while refreshing the token

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants