OpenID Connect Support

rust/crd/src/affinity.rs

@@ -49,7 +49,6 @@ mod tests {
             productVersion: 3.0.1
           clusterConfig:
             credentialsSecret: superset-db-credentials
-            authentication: []
           nodes:
             roleGroups:
               default:
@@ -112,7 +111,6 @@ mod tests {
             productVersion: 3.0.1
           clusterConfig:
             credentialsSecret: superset-db-credentials
-            authentication: []
           nodes:
             roleGroups:
               default:

rust/crd/src/authentication.rs

@@ -109,7 +109,7 @@ pub struct SupersetAuthenticationConfigResolved {
 
 impl SupersetAuthenticationConfigResolved {
     pub async fn from(
-        auth_details: &Vec<SupersetClientAuthenticationDetails>,
+        auth_details: &[SupersetClientAuthenticationDetails],
         client: &Client,
     ) -> Result<SupersetAuthenticationConfigResolved> {
         // TODO: Adapt if multiple authentication types are supported by Superset.

rust/crd/src/lib.rs

@@ -171,8 +171,9 @@ pub struct SupersetClusterSpec {
 #[derive(Clone, Debug, Deserialize, JsonSchema, PartialEq, Serialize)]
 #[serde(rename_all = "camelCase")]
 pub struct SupersetClusterConfig {
-    /// Mandatory list of AuthenticationClasses used to authenticate users.
-    pub authentication: Vec<SupersetClientAuthenticationDetails>,
+    /// List of AuthenticationClasses used to authenticate users.
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub authentication: Option<Vec<SupersetClientAuthenticationDetails>>,
 
     /// The name of the Secret object containing the admin user credentials and database connection details.
     /// Read the

rust/operator-binary/src/main.rs

@@ -214,6 +214,8 @@ fn references_authentication_class(
         .spec
         .cluster_config
         .authentication
+        .as_deref()
+        .unwrap_or_default()
         .iter()
         .any(|c| c.common.authentication_class_name() == &authentication_class_name)
 }

rust/operator-binary/src/superset_controller.rs

@@ -251,7 +251,12 @@ pub async fn reconcile_superset(superset: Arc<SupersetCluster>, ctx: Arc<Ctx>) -
     .context(ResolveVectorAggregatorAddressSnafu)?;
 
     let auth_config = SupersetAuthenticationConfigResolved::from(
-        &superset.spec.cluster_config.authentication,
+        superset
+            .spec
+            .cluster_config
+            .authentication
+            .as_deref()
+            .unwrap_or_default(),
         client,
     )
     .await