[UI] Embedded - Fix Authentication

[richard-cox]

• Embedded UI uses the default user secret within basic auth for api requests
• Default user is now going to be optional (see Don't create a default (non-admin) user by default helm-charts#214)
• In addition the password in the secret is now bencrpt'd, yet we need it in plain text to make the api requests
• Possible workaround - dashboard automatically creates an epinio-ui user with password in plain text. it will only be usable by the epinio ui and not the cli.
• in the future though the dashboard should handle different creds or epinio uses the rancher auth provider

Tasks

Preview Give feedback

1. [ui] Support logging in via local and dex user in embedded ui #358
   area/embedded epinio-1.11.0-2 kind/enhancement +3
2. [ui] Improve embedded ui log in UX #359
   area/embedded kind/enhancement +2
3. Build / publish a new version of the epinio ui extension

Note - #360 has been removed from this epic, given that it might be a while until this is achievable

[juadk]

When we talked about the broken dashboard, you mentioned that issue to me but is it really related to the fact that we cannot see the epinio icon in the nav menu anymore? (just to be sure).
I can still install epinio through the marketplace but once done, there is no button to access to the epinio instance.

[richard-cox]

When we talked about the broken dashboard, you mentioned that issue to me but is it really related to the fact that we cannot see the epinio icon in the nav menu anymore? (just to be sure).
I can still install epinio through the marketplace but once done, there is no button to access to the epinio instance.

That's the expected behaviour, the button is part of the embedded solution and takes the user to the embedded pages. Some rancher products (kube warden, neuvector, etc) have links within the cluster explorer's side nav (not burger menu side nav) for standalone ui's... but they take the user away from the dashboard.

[juadk]

ok so we definitively have to wait for that issue to be resolved to progress.

[thehejik]

@richard-cox Hello, our CI is still using non-existing Epinio icon/button in the Rancher UI to access Epinio dashboard so the Rancher UI tests are broken then.

There is a couple of other ways to get the link but most Rancher products offer an icon, so I think it would be nice to have it.

Do you think the lack of icon deserves a separate card to prioritize this issue or should we do a workaround in CI?

[richard-cox]

@thehejik To clear a few things up, there are two 'modes' that the UI has

• Standalone - The UI is served up by the UI backend, and is deployed and released as part of the general Epinio release.
• Embedded - The UI is served up by the Rancher Dashboard and has a separate build/package for the Rancher Management product. This is not currently released (but we hope to in the future) and is blocked on this issue ([UI] Embedded - Fix Authentication #129).

An alternative mode would be, as i think you were implying from your comment, is to have links from the Rancher Dashboard to the standalone UI. That is currently out of scope and would be in a different form (the link would appear as part of the cluster explorer area rather than a menu item in the burger menu).

[richard-cox]

• local user - possible cloud credentials / secret , use rancher proxy & cloud credential / secret id

[richard-cox]

Closing, tested as part of #358