Tests: initial token infrastructure

Install and configure two oidc providers: indigo iam and keycloak.
For this, had to rework the container initialization to wait for the
database to be ready and to initialize it with the test configuration.

Configure xrood in the XRD2 container to allow token authentication:
this required a separate entrypoint and mounting multiple configuration
files into the container.

Add two Webdav Containers. Only WEB0 is configured for token support,
the second one relies on certificates.

.github/workflows/integration_tests.yml

@@ -98,7 +98,7 @@ jobs:
         shell: bash
         run: |
           docker login https://ghcr.io -u ${{ github.actor }} -p ${{ secrets.GITHUB_TOKEN }}
-          docker-compose -f $GITHUB_WORKSPACE/dev/rucio/etc/docker/dev/docker-compose.yml --profile storage --profile externalmetadata pull
+          docker-compose -f $GITHUB_WORKSPACE/dev/rucio/etc/docker/dev/docker-compose.yml --profile storage --profile externalmetadata --profile iam pull
           i=0; until [ "$i" -ge 3 ]; do
             IMAGES=$(echo '${{ toJson(matrix.cfg) }}' | $GITHUB_WORKSPACE/dev/rucio/tools/test/build_images.py --output list \
                 --cache-repo ghcr.io/${{ github.repository }} --branch "${{ needs.setup.outputs.branch }}" \
@@ -119,12 +119,14 @@ jobs:
           sed -i 's;image: docker.io/rucio/rucio-dev.*;image: ${{ fromJSON(steps.images.outputs.images)[0] }};' \
               $GITHUB_WORKSPACE/dev/rucio/etc/docker/dev/docker-compose.yml
       - name: Start containers
-        run: docker-compose -f $GITHUB_WORKSPACE/dev/rucio/etc/docker/dev/docker-compose.yml --profile storage --profile externalmetadata up -d
+        run: docker-compose -f $GITHUB_WORKSPACE/dev/rucio/etc/docker/dev/docker-compose.yml --profile storage --profile externalmetadata --profile iam up -d
       - name: Initialize tests
         shell: bash
         run: |
           docker exec -t dev_rucio_1 cp etc/rse-accounts.cfg.template etc/rse-accounts.cfg
           docker exec -t dev_rucio_1 tools/run_tests.sh -ir
+      - name: Test Token Deletion
+        run: docker exec -t dev_rucio_1 tools/pytest.sh -v --tb=short tests/test_reaper.py::test_deletion_with_tokens
       - name: File Upload/Download Test
         run: docker exec -t dev_rucio_1 tools/pytest.sh -v --tb=short tests/test_rucio_server.py
       - name: UploadClient Test
@@ -173,4 +175,4 @@ jobs:
       - name: Test external metadata plugin (postgres)
         run: docker exec -t dev_rucio_1 tools/pytest.sh -v --tb=short tests/test_did_meta_plugins.py::TestDidMetaExternalPostgresJSON
       - name: Stop containers
-        run: docker-compose -f $GITHUB_WORKSPACE/dev/rucio/etc/docker/dev/docker-compose.yml --profile storage --profile externalmetadata down
+        run: docker-compose -f $GITHUB_WORKSPACE/dev/rucio/etc/docker/dev/docker-compose.yml --profile storage --profile externalmetadata --profile iam down

etc/certs/generate.sh

@@ -29,7 +29,7 @@ openssl x509 -req -days $DAYS -CAcreateserial -extfile <(printf "keyUsage = crit
 cat "ruciouser.pem" "ruciouser.key.pem" > "ruciouser.certkey.pem"
 
 # The service certificates
-for CN in rucio fts xrd1 xrd2 xrd3 xrd4 minio
+for CN in rucio fts xrd1 xrd2 xrd3 xrd4 minio indigoiam keycloak web1 web2
 do
   SAN="subjectAltName=DNS:$CN,DNS:localhost,DNS:$CN.default.svc.cluster.local"
   openssl req -new -newkey rsa:2048 -noenc -keyout "hostcert_$CN.key.pem" -subj "/CN=$CN" > "hostcert_$CN.csr"

etc/certs/hostcert_indigoiam.key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

etc/certs/hostcert_indigoiam.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

etc/certs/hostcert_keycloak.key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

etc/certs/hostcert_keycloak.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDSDCCAjCgAwIBAgIUVXpZxftaUMwrwgk6wYR1cGl0l5owDQYJKoZIhvcNAQEL
+BQAwHzEdMBsGA1UEAwwUUnVjaW8gRGV2ZWxvcG1lbnQgQ0EwHhcNMjMxMjEyMTEy
+MDQ4WhcNNDgwODAyMTEyMDQ4WjATMREwDwYDVQQDDAhrZXljbG9hazCCASIwDQYJ
+KoZIhvcNAQEBBQADggEPADCCAQoCggEBALDi8xX1WKtiH1O6nisWYMh8lxecmRZN
+Tdx5pZBUIEIr/AtxenVvDsNhve4LC6adNuTUjlZMPGy6zTafm++w5Wq+tbzb8mfr
+Xq2l5pnSnKHz47kn1DAFshVJamD5q00FHTvh/hjQXZiC9CZQk87sHpcbIsJ4q9Hz
+venaVl1bnBLaQDW49QLEAheOIt2pLFVckNH4XiKptCg48tSL6FQRvA4XB8dntFqw
+nXc8G1R3comXZ2BKE/kHL552As68tDQkS/IrylIej32IqPPmleOe2UvTH+TRrjei
+lMi1wnZK1u2S3kFielgFHO/8pUDd7pMl5Y5IpGigoWK7B13umRwbxucCAwEAAaOB
+hzCBhDBCBgNVHREEOzA5gghrZXljbG9ha4IJbG9jYWxob3N0giJrZXljbG9hay5k
+ZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsMB0GA1UdDgQWBBSWJb2GH++dve3l/qg1
+o4RL4uM8hjAfBgNVHSMEGDAWgBSApEBpOOCBJC8+We2zfCWOdPyuqTANBgkqhkiG
+9w0BAQsFAAOCAQEApnxNUKaXMJ78n/EeYpeztKJu42m2LkJu1Jz4n/t9Rj9QvnOk
+QdrE0V4SNWckJhuY1fj75Rczjv3pk5bKgy8bkZckSENTtVEGPLPa5fYOtR58YKq4
+VhG4YcvCYNrBUZaTIZ5pqjeWDFyEwM3wFk69iLRZhv+jaOqZ7Dnq5AC3ZLeK6bUR
+U4Dg9URmZP7dIEoBzbW6luXCOuxKx9bto6mp3Ddc2WiMaUnvYAxM+iCFki6mQFfX
+h4Q2EEIUiWgvZD1GMbK5Wrexh/K8Es9LBqZtAgFi5isJ5L1ojdd+XCr5Q+gYIv80
+dECdhlcBKok+orDvhUnJvzx0W9yGP5nTGnCvGw==
+-----END CERTIFICATE-----

etc/certs/hostcert_web1.key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

etc/certs/hostcert_web1.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDOjCCAiKgAwIBAgIUVXpZxftaUMwrwgk6wYR1cGl0l5wwDQYJKoZIhvcNAQEL
+BQAwHzEdMBsGA1UEAwwUUnVjaW8gRGV2ZWxvcG1lbnQgQ0EwHhcNMjMxMjIxMDkz
+NjE1WhcNNDgwODExMDkzNjE1WjAPMQ0wCwYDVQQDDAR3ZWIxMIIBIjANBgkqhkiG
+9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI8Dsi64T19FgzQzXaLNG8ZOKzUk2KE7S3hT
+S7R83ujyJv99sCXz3FXZBae9LpfsfeJRAEfbKQ24nYTsKML02dNdo/oVYEv1C2n/
++Z+zfL9KEgJi4PxDP055a8krWkxtB811uhaSSwCxyqz1SCVVfIFj/RemO/fHByY5
+GcVf/bTb2qKIynEffKmQt5y6c2HWUiJhUHRjC8/iDJV4By5Vsf9wrfAXSrIE0hX1
+ugnqYxSX2AdcA9uvsKuxU0r7bj7w/R2XSuYjCcPNpaPWr/C/z0mP/oqkm4PYZBMM
+unflnCBryiE/A4NxwZ+DTtIlQZM9e3KEmm3ZG2UrxfEGH/6mdwIDAQABo34wfDA6
+BgNVHREEMzAxggR3ZWIxgglsb2NhbGhvc3SCHndlYjEuZGVmYXVsdC5zdmMuY2x1
+c3Rlci5sb2NhbDAdBgNVHQ4EFgQUAbyVrp8ltYSiF2vis3kN7wyKtIMwHwYDVR0j
+BBgwFoAUgKRAaTjggSQvPlnts3wljnT8rqkwDQYJKoZIhvcNAQELBQADggEBAJb9
+d7BWmSkdIYjMwbEkIlkOtj0QXGRbOHCyLkSAJnT1yGvEesja6AhUWhdng0JxfVEc
+uxJm78PBIihhzs3gHtmO2PemAxz6NjedCQWukrmXWnHIlOzm42v0mA0nxTMH32lF
+YJq3sq3zreMX/4TkwUzIuU2+LLGfzfyshqv1lvmwuGKbX1Zc9das1XAojh8pqNho
+DYocHGDoEh/sFjoLrDPR1w7lfSj1nLMmLpt0nuFpY03nZeEyiLKnisDEgP9xCM2a
+KHlJ9m52yZpRXEzMfF0ISjW4UaS13XRFNCNOh5hVJlTDUhMQ9yYJw1diVEwTAHd8
+bPA3G1OmxAMMtuut5c8=
+-----END CERTIFICATE-----

etc/certs/hostcert_web2.key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

etc/certs/hostcert_web2.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

etc/docker/dev/docker-compose.ports.yml

@@ -64,12 +64,12 @@ services:
   grafana:
     ports:
       - "127.0.0.1:3000:3000"
-  db-iam:
+  indigoiam-db:
     ports:
       - "127.0.0.1:3307:3306"
-  nginx-iam:
+  indigoiam:
     ports:
       - "127.0.0.1:9443:443"
-  iam:
+  indigoiam-login-service:
     ports:
       - "127.0.0.1:8090:8090"