Chapter 5. Configuring OAuth authorization

Procedure

• Set up the GitHub OAuth client. The Authorization callback URL is filled in the next steps.

  1. Go to the RH-SSO administration console and select the Identity Providers tab.
  2. Select the GitHub identity provider in the drop-down list.
  3. Paste the Redirect URL to the Authorization callback URL of the GitHub OAuth application.
  4. Fill the Client ID and Client Secret from the GitHub oauth app.
  5. Paste repo,user,write:public_key to the Default Scopes field.
  6. Enable Store Tokens.
  7. Save the changes of the Github Identity provider and click Register application in the GitHub oauth app page.

Prerequisites

• The oc tool is available.
• crwctl management tool is available. See https://access.redhat.com/documentation/en-us/red_hat_codeready_workspaces/2.5/html-single/installation_guide/index#installing-the-crwctl-management-tool.
• Openshift identity providers are configured on the cluster. See the Understanding identity provider configuration

Procedure

• OpenShift OAuth will be enabled by default, deploy CodeReady Workspaces using OperatorHub or the crwctl, see the crwctl server:deploy specification chapter.