First attempt to the ACS onboarding#100

Merged

sabre1041 merged 59 commits intovalidatedpatterns:mainfrom

p-rog:acs-onboarding

Mar 12, 2026

Commits on Feb 23, 2026

First attempt to the ACS onboarding
Przemyslaw Roguski
committed
Fix YAML syntax and remove acs-init-bundle requirement

Przemyslaw Roguski
and
claude
committed
fixing yaml syntax error
Przemyslaw Roguski
committed

Commits on Feb 24, 2026

changing the ASC Ccentral project and enabling keycloak integration
Przemyslaw Roguski
committed
patch to the ACS central
Przemyslaw Roguski
committed
ACS adjustments
Przemyslaw Roguski
committed
Fixing Central and SecuredCluster ACS CRs and adding missing jobs: bundle and integration
Przemyslaw Roguski
committed
Fix ACS deployment: Enable helm rendering and add admin password secret

Przemyslaw Roguski
and
claude
committed
Additional config improvements, adding SkipDryRunOnMissingResource to the central-cr.yaml and secured-cluster-cr.yaml, removing the perNode duplication, adding explicit scannerV4 configuration to c…
Przemyslaw Roguski
committed
Fix ACM channel to release-2.15 for OpenShift 4.21 compatibility

Przemyslaw Roguski
and
claude
committed

Commits on Feb 25, 2026

Removing stackrox project definition
Przemyslaw Roguski
committed
Fix Helm template errors in ACS deployment

Przemyslaw Roguski
and
claude
committed
Fix YAML syntax: use literal 'hub' for clusterName override
Przemyslaw Roguski
committed
Add secretStore defaults to acs-central chart

Przemyslaw Roguski
and
claude
committed
Fix Vault path in ExternalSecret for ACS admin password

Przemyslaw Roguski
and
claude
committed
Disable ACS scanner for minimal deployment

Przemyslaw Roguski
and
claude
committed
Revert "Disable ACS scanner for minimal deployment"
Przemyslaw Roguski
committed
Redusing the ACS resources allocation just for testing purpose
Przemyslaw Roguski
committed

Commits on Feb 26, 2026

Fixing the automated Central app resources creation
Przemyslaw Roguski
committed
Fixing the keycloak.realm value for ACS Central and adding a reference to the central-htpasswd secret
Przemyslaw Roguski
committed
Fix Central CR adminPasswordSecret field name and add required Job template labels
Przemyslaw Roguski
committed
Add htpasswd field generation and handle existing init bundles
Przemyslaw Roguski
committed
Fix YAML syntax errors in create-cluster-init-bundle job
Przemyslaw Roguski
committed
Fix create-htpasswd-field job to show dnf install errors
Przemyslaw Roguski
committed
Fix create-htpasswd-field job registry and remove blocking hook
Przemyslaw Roguski
committed
Fix htpasswd job to check for valid bcrypt entry instead of exact match
Przemyslaw Roguski
committed

Commits on Feb 27, 2026

Fix create-htpasswd-field job to work in OpenShift environment

Przemyslaw Roguski
and
claude
committed
Add complete resource configuration to Central CR template

Przemyslaw Roguski
and
claude
committed
Remove explicit persistence config for databases in Central CR

Przemyslaw Roguski
and
claude
committed
Fix Central CR API fields for Scanner V4 configuration

Przemyslaw Roguski
and
claude
committed
Fix cluster init bundle creation - use correct variable name

Przemyslaw Roguski
and
claude
committed
Adding ACS deployment details and workflow
Przemyslaw Roguski
committed

Commits on Mar 2, 2026

Enabling Keycloak
Przemyslaw Roguski
committed
fixing keycloack integration
Przemyslaw Roguski
committed
fixing keycloack username and secrets references
Przemyslaw Roguski
committed
fixing acs admin secret path in keycloak config
Przemyslaw Roguski
committed

Commits on Mar 3, 2026

Fixing the Keycloak realm variable and adding user to the Keycloak realm
Przemyslaw Roguski
committed
Adding missing ACS_CLIENT_SECRET placeholde
Przemyslaw Roguski
committed
Fix JSON formatting in create-auth-provider job - remove heredoc indentation
Przemyslaw Roguski
committed
Fix YAML structure - use heredoc instead of multi-line printf
Przemyslaw Roguski
committed
Fix OIDC issuer URL - remove duplicate 'apps' subdomain
Przemyslaw Roguski
committed
updated to the create-auth-provider job to use correct ACS Central url variable
Przemyslaw Roguski
committed
Add offline_access to ACS client default scopes
Przemyslaw Roguski
committed
Add openid scope to Keycloak realm for OIDC compliance

Przemyslaw Roguski
and
claude
committed
Fix ACS OIDC authentication mode and offline_access permissions

Przemyslaw Roguski
and
claude
committed

Commits on Mar 4, 2026

Wait for Keycloak OIDC discovery endpoint before creating auth provider

Przemyslaw Roguski
and
claude
committed
Add detailed debugging to create-auth-provider job

Przemyslaw Roguski
and
claude
committed
Add roles claim mapping to ACS OIDC auth provider

Przemyslaw Roguski
and
claude
committed

Commits on Mar 5, 2026

Merge branch 'main' into acs-onboarding
p-rog
authored
Fixing trailing newline in the acs-deployment.md doc file
Przemyslaw Roguski
committed
fixing all the markdown linting errors in the acs-deployment.md
Przemyslaw Roguski
committed

Commits on Mar 10, 2026

1. Storage Configuration
Przemyslaw Roguski
committed
confict patch
Przemyslaw Roguski
committed
confict patch
Przemyslaw Roguski
committed
Merge branch 'main' into acs-onboarding
p-rog
authored
fixing missing global.localClusterDomain variable to fix Keycloak integration
Przemyslaw Roguski
committed
handle special characters in the client secret
Przemyslaw Roguski
committed

Commits on Mar 11, 2026

ACS deployment workflow documentation improvement
Przemyslaw Roguski
committed

Commits on Mar 12, 2026

updating the ACS ConsoleLink category from Observability to Security
Przemyslaw Roguski
committed