Opstella Integrations with Tools Testing

Opstella Single Sign-On Function

✅ All of the steps below, if all done sucessfully, it can be said that Opstella Single Sign-On functions properly with other components.

Go to Opstella Single Sign-On Page

1. Go to opstella.${BASE_DOMAIN} with Opstella Administrator Credentials

   

2. Go to Single Sign-On Page (SSO) ; Click SSO button on the left.

   

GitLab

1. From Single Sign-On Page Page > Click GitLab from Code Lane and VCS Section.

2. It should redirect to GitLab Login Page with or sign in with text and Opstella button.

   

3. Click on Opstella button and check for user information.

   

SonarQube

1. From Single Sign-On Page Page > Click SonarQube from Pre-Build Lane and SAST Section.

2. It should redirect to SonarQube Login Page with Log in with Opstella.

   

3. Click on Login with Opstella and check for user information.

   

DefectDojo

1. From Single Sign-On Page Page > Click DefectDojo from Pre-Build Lane and ASPM Section.

2. It should redirect to DefectDojo Login Page with Login with Opstella.

   

3. Click on Login with Opstella and check for user information.

   

Harbor

1. From Single Sign-On Page Page > Click Harbor from Build Lane and Artifact Section.

2. It should redirect to Harbor Login Page with LOGIN WITH OPSTELLA.

   

3. Click on LOGIN WITH OPSTELLA and check for user information.

   

Vault

1. From Single Sign-On Page Page > Click Vault from Pre-Deploy Lane and Secrets Management Section.

2. It should redirect to Vault Login Page selecting oidc/ path (Opstella Platform SSO Integration).

   

3. Click on Sign in with OIDC Provider and check for user information.

   

ArgoCD

Note

Applies to all ArgoCD instances.

1. From Single Sign-On Page Page > Click ArgoCD from Deploy Lane and Deploy Section.

2. It should redirect to ArgoCD Login Page with LOG IN VIA OPSTELLA.

   

3. Click on LOG IN VIA OPSTELLA and check for user information

   

Headlamp

Note

Applies to all Headlamp instances.

1. From Single Sign-On Page Page > Click Headlamp from Deploy Lane and Deploy Section.

2. It should redirect to Headlamp and you can start browsing through Kubernetes Resources right away.

   

Grafana Dashboard

Note

Grafana Dashboard will be the only way to access to Grafana Mimir, Grafana Loki, and Grafana Tempo (They are Data Sources of Grafana Dashboard).

If you try to click on any of Grafana Loki, and Grafana Tempo, it would redirect to Grafana Dashboard.

This is due to Application Architecture.

1. From Single Sign-On Page Page > Click Grafana from Observability Lane and Monitoring Section.

2. It should redirect to ArgoCD Login Page with Sign in with Opstella.

   

3. Click on Sign in with Opstella and check for user information

   

4. Verify that all Data Sources can be connected properly, Go to Left-side Menu > Connections > Data Sources. Add Data Source if not exists yet.

   Be sure to be on Main Org. for Grafana Organization.

   

   Click on + Add new data source

   

   Add these customization to ALL Type of Data Source Settings.

   • Grafana Mimir

     Type: Time series databases > Prometheus

     Name: Mimir

     URL: https://mimir.${BASE_DOMAIN}/prometheus

     

     HTTP Headers:

     • X-Scope-OrgID: opstella-platform

     

   • Grafana Loki

     Type: Logging & document databases > Loki

     Name: Loki

     URL: https://loki.${BASE_DOMAIN}

     HTTP Headers:

     • X-Scope-OrgID: opstella-platform

     

   • Grafana Tempo

     Type: Distributed tracing > Tempo

     Name: Tempo

     URL: https://tempo.${BASE_DOMAIN}

     HTTP Headers:

     • X-Scope-OrgID: opstella-platform

     

   Once you finished filling the settings, Click on Save & Test button. It should show,

   ✅ Data source successfully connected.