RBAC: Support Gitlab teams

[joaofrsilva]

Hi, I am trying to make kafka-ui available for an entire organization. For now I was able to integrate the authentication with GitLab, but when it comes to RBAC I can not find the config. Is it supported?

Config I am using for the authentication:
auth:
type: OAUTH2
oauth2:
client:
gitlab:
provider: gitlab
clientId: redacted
authorizationGrantType: authorization_code
clientSecret: redacted
redirectUri: http://kafka-ui.com/login/oauth2/code/gitlab
scope:
- read_user
clientName: GitLab
authorizationUri: https://gitlab.com/oauth/authorize
tokenUri: https://gitlab.com/oauth/token
userInfoUri: https://gitlab.com/api/v3/user
jwkSetUri: https://gitlab.com/oauth/discovery/keys
userNameAttribute: username
customParams:
type: gitlab

Config I am trying for RBAC:
rbac:
roles:
- name: "admin"
clusters:
- dev
subjects:
- provider: oauth_gitlab
type: user
value: "user1"
- provider: oauth_gitlab
type: user
value: "user2"
permissions:
- resource: clusterconfig
actions: all
- resource: topic
value: "."
actions: all
- resource: consumer
value: "."
actions: all
- resource: connect
value: ".*"
actions: all

[Haarolean]

Hi, currently we do not support gitlab for RBAC.
Probly it'd be possible after we implement #2844, otherwise I'll take a look and implement a separate one for gitlab.
Stay tuned!

[varkey]

@Haarolean Is there any progress on RBAC with Gitlab? Similar to @EI-Joao, we are able to login with Gitlab SSO, but RBAC would definitely help us.

[Haarolean]

@varkey with our current bandwidth we have planned support for LDAP & generic oauth providers for the current release. It may work with gitlab as a generic provider, otherwise, it'll be a separate task in future releases.

[Haarolean]

The original issue is solvable thru #2844.
Probably we need to explicitly support gitlab teams just like GitHub ones (#2751). Let's keep this issue for this purpose.