[ocean] Identity propagation support for port-ocean chart - #324
Open
Amichai-Skaliter-Port wants to merge 6 commits into
Open
[ocean] Identity propagation support for port-ocean chart#324Amichai-Skaliter-Port wants to merge 6 commits into
Amichai-Skaliter-Port wants to merge 6 commits into
Conversation
Amichai-Skaliter-Port
changed the title
Adds Helm chart configuration for Ocean's identity-propagation feature, which lets downstream integration actions run as the real triggering user (via a per-provider OAuth flow) instead of the integration's shared token. - identityPropagation.enabled / baseUrl: turns the feature on and registers the OAuth broker's public callback URL with Port (OCEAN__IDENTITY_PROPAGATION__ENABLED / OCEAN__BASE_URL) - identityPropagation.vault.*: token storage backend config (type, secretPrefix, awsRegion) plus LocalStack/dev-only overrides (endpointUrl, awsAccessKeyId, awsSecretAccessKey) now templated into the ConfigMap/Secret alongside the rest - identityPropagation.oauth.*: per-provider OAuth app credentials for GitHub, GitLab (with optional self-managed host), and Azure DevOps, plus an optional shared state-signing secret; secrets are rendered into the Secret while client IDs/scopes stay in the ConfigMap, matching the existing pattern for other sensitive values - Documents the required actionsProcessor.enabled dependency for the integration-action dispatch path this feature relies on - Extends charts/port-ocean/tests with unit test coverage for the new vault fields and updates README.md accordingly Matches the env var contract implemented server-side in port-labs/ocean's identity_propagation_core PR.
Required when identityPropagation is enabled and the app URL can't be guessed from port.baseUrl (api.X -> app.X), e.g. staging domains that don't follow that convention. Without it the post-OAuth redirect can land on the wrong page.
geymed
force-pushed
the
task_tj6ysd/identity_propagation_helm_chart
branch
from
August 31, 2026 11:26
2ba36ae to
760e0ea
Compare
…task_tj6ysd/identity_propagation_helm_chart
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary