[YUNIKORN-2281] Support OIDC credentials in YuniKorn

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.0
• Labels: release-notes
• Target Version: 1.6.0
• Assignee: Manikandan R
• Reporter: Dmitry
• Created: 21/Dec/23 07:28
• Updated: 04/Sep/24 08:21
• Resolved: 04/Sep/24 08:21

Description

Currently only alphanumeric chars are allowed in usernames. We're using CiLogon OIDC users, in the form of "http://cilogon.org/serverA/users/123456", which is denied in configuration by the admission controller:

> error: configmaps "yunikorn-configs" could not be patched: admission webhook "admission-webhook.yunikorn.validate-conf" denied the request: invalid limit user name 'http://cilogon.org/serverA/users/123456' in limit definition

 

Sub-Tasks

• Validate user name: Resolved
• Validate queue generated as part of the placement rules: Resolved
• Validate "value" param in fixed placement rule: Resolved
• Validate user and group specified in filter config: Resolved
• Handle special characters for params like queue, username & groupname: Resolved
• Doc changes to escape query params in REST API: Resolved
• Doc changes to describe the new behaviour and caveats: Resolved