fix: Add 'openrag' auth mode and ingest fields#1683
Merged
Conversation
Introduce support for an 'openrag' authentication mode that delegates writes to an OpenRAG backend ingest callback. Adds new inputs (openrag_ingest_token, openrag_ingest_run_id) and exposes openrag_ingest_url/batch_size fields as configurable (and required when openrag is selected). Update auth_mode options/default to include 'openrag', validate required OPENRAG_* fields in _build_auth_kwargs, and adjust the dynamic UI build logic to show/require OpenRAG fields when appropriate. Update ingestion flow JSON to mirror these input/option changes. This enables ingestion via OpenRAG callbacks without direct OpenSearch credentials.
Contributor
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
phact
approved these changes
May 26, 2026
edwinjosechittilappilly
added a commit
that referenced
this pull request
May 29, 2026
* group canonicalization to avoid collisions, security config, integration test * style: ruff format (auto) * centralize jwt construction path, fix webhook bug * bug fixes * style: ruff format (auto) * pr feedback * style: ruff format (auto) * missing etst * remove doc loading from playwright e2e test, add new integration test for coverage * style: ruff format (auto) * lint, mypy fixes * Fix integration test startup lifecycle * Fix onboarding integration and e2e flakes * new shape, dls principals backed by OS principals index * fix so ibm does index refresh * principal per user refresh ttl for check and index update * Fix DLS ingestion mapping client * style: ruff format (auto) * Fix DLS writes in ingestion paths * Repair roleless users during sign-in * Fix integration reload isolation * Fix Langflow DLS ingestion preflight * style: ruff format (auto) * Avoid delete by query under DLS * Avoid bulk writes under DLS * Stabilize onboarding e2e waits * pre merge * mypy fix * OR does the ingest instead of langflow * use gvpassthrough * Fix Langflow ingest callback globals * Wire Langflow ingest callback globals through flow * Fix Langflow ingest callback globals * Fix Langflow response fallback and env globals * fix nudges * Fix OpenSearch search results table output * Restore sample docs Langflow indexing coverage * Use real default docs in onboarding sample test * style: ruff autofix (auto) * Re-enable sample data ingest in e2e * Fix Langflow ingest callback token handling * Fix Langflow callback ids and chat sources * skip source extraction integration test * get rid of per request opensearch jwts * style: ruff autofix (auto) * Use keyed hashes for API keys * Fix OpenSearch JWT propagation * style: ruff autofix (auto) * Fix operator env example merge markers * Add 'openrag' auth mode and ingest fields (#1683) Introduce support for an 'openrag' authentication mode that delegates writes to an OpenRAG backend ingest callback. Adds new inputs (openrag_ingest_token, openrag_ingest_run_id) and exposes openrag_ingest_url/batch_size fields as configurable (and required when openrag is selected). Update auth_mode options/default to include 'openrag', validate required OPENRAG_* fields in _build_auth_kwargs, and adjust the dynamic UI build logic to show/require OpenRAG fields when appropriate. Update ingestion flow JSON to mirror these input/option changes. This enables ingestion via OpenRAG callbacks without direct OpenSearch credentials. * Add OpenRAG ingest debug logging and token masking (#1684) Improve observability and safety for OpenRAG ingest callbacks: trim callback inputs, mask tokens when logging, and emit structured debug payloads. Added request-level summaries and per-batch/response logging (including status, headers and body preview) and attempt to call self.log where available. Also include the callback URL in error messages to aid troubleshooting. Changes touch the OpenSearch multimodal component and the flow JSON that embeds the updated component code. * readable principal names * style: ruff autofix (auto) * lint fix * style: ruff autofix (auto) * lint fix * style: ruff autofix (auto) * Add typing annotations to services and settings Import typing.Any and add explicit type annotations to several module-level and local variables for better static type checking: DLS_PRINCIPAL_INDEX_BODY in src/config/settings.py; query in src/services/file_service.py; filter_clauses and fallback_search_body in src/services/search_service.py. No functional changes; only type hints added for clarity and mypy/IDE support. * lint fix * style: ruff autofix (auto) * lint fix * strip issue regression * style: ruff autofix (auto) * faster integration tests / better instrumentation * Add split integration suite runner --------- Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com> Co-authored-by: Edwin Jose <edwin.jose@datastax.com> Co-authored-by: Edwin Jose <edwinjose900@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Introduce support for an 'openrag' authentication mode that delegates writes to an OpenRAG backend ingest callback. Adds new inputs (openrag_ingest_token, openrag_ingest_run_id) and exposes openrag_ingest_url/batch_size fields as configurable (and required when openrag is selected). Update auth_mode options/default to include 'openrag', validate required OPENRAG_* fields in _build_auth_kwargs, and adjust the dynamic UI build logic to show/require OpenRAG fields when appropriate. Update ingestion flow JSON to mirror these input/option changes. This enables ingestion via OpenRAG callbacks without direct OpenSearch credentials.