Theia cloud deployment on AWS with Cognito

[tmirza]

Hi,

Is there any example configuration available for deploying theia cloud in AWS? I can see there are configurations for minikube and GKE, but if there is anything for AWS, it can help me quickly start.

Another relevant question is that for my current standalone Theia IDE deployment on AWS, I am using AWS Cognito for user authentication to access my IDE.
With moving to Theia cloud, I noticed it uses Keycloak for authentication. How much work will be required if I want to use my existing AWS Cognito users with Theia Cloud? What is the recommended path for this? Should I modify Theia cloud to use AWS Cognito only, or can I integrate AWS Cognito with Keycloak and make it work via Keycloak only?

Thanks,
TM

[tmirza]

Regarding Keycloak, I am able to integrate AWS cognito as external OIDC identity provider with Keycloak in Theia cloud.

[lucas-koehler]

Sounds good. This is the recommended path for integrating external identity providers and we have successfully done it like this in a project before.

[lucas-koehler]

Hi @tmirza , regarding setup on AWS, unfortunately we do not have any documentation regarding setup there.
We have hosted a deployment on AWS in the past. This was some time ago.
In contrast to GKE, the Ingress (we used nginx) did not just expose an external address. For this, we use AWS's ALB. The ALB then forwarded traffic to the nginx.
The nginx controller then uses service type NodePort and, thus, is not (Tried to be) exposed outside the cluster. This way, theia cloud can use nginx as before and the ALB handles exposing everything externally. The ALB can then also use an HTTPS certificate created with AWS.