Authenticate KubeVirt VM Console Access via ManageIQ

[Dhamo1107]

Description

We have integrated an OpenShift provider with ManageIQ under the Container Provider section and connected KubeVirt under the Virtualization tab. The KubeVirt virtual machines (VMs) are successfully appearing in ManageIQ.

Currently, there is no built-in feature in ManageIQ to access the KubeVirt VM console. To work around this, I added a button in ManageIQ that redirects users to the OpenShift console page of that VM. However, when clicking on the console button, it requires authentication on OpenShift before the console is accessible.

I need to know if it is possible to authenticate in the backend automatically using the KubeVirt connection token from ManageIQ and open the console directly without requiring manual login.

Current Implementation

• The redirection is performed using the following URL format:

  https://console-openshift-console.apps.ocp4.int/k8s/ns/default/kubevirt.io~v1~VirtualMachine/{vm_name}/console/standalone
  

• When accessing this URL, it asks for OpenShift authentication before loading the console.
• If credentials are entered, the console works as expected.

Expected Behavior

• When clicking "Open Console" from ManageIQ, the OpenShift VM console should open directly without requiring login.
• ManageIQ should authenticate the session automatically using the KubeVirt provider credentials/token.

Questions/Requirements

1. Does OpenShift support passing an authentication token in the URL or request headers to authenticate automatically?
2. Can we use the KubeVirt API token stored in ManageIQ to authorize the session when redirecting to OpenShift?
3. Is there an API endpoint available that allows authentication and direct console access?

Would appreciate guidance on how to achieve seamless authentication between ManageIQ and OpenShift for KubeVirt VM consoles.