- Clarification of the proxy_pages/saml2 comments in the templates.

- Added an auth-type/auth-configuration specification matrix.

README.md

@@ -623,6 +623,19 @@ _Examples_:
 
 Binary files can be specified in the configuration map in their base64 encoded format with a basename having a `.base64` extension. Such files are then converted back to binary as they are copied to their target path.
 
+### Auth-type and auth-configuration specification matrix in a configmap:
+
+* auth-type depicts the Identity Provider external authentication is being configured against.
+* auth-configuration identifies which Httpd external authentication configuration files to load.
+
+| auth-type | auth-configuration | Note |
+|-----------|--------------------|------|
+| internal  | internal           | Database / ManageIQ Ldap(s) / Amazon    |
+| ldap      | external           |     |
+| ipa       | external           |     |
+| active-directory | external | Configured against AD via SSSD as an Ldap directory |
+| active-directory | active-directory | Configured against AD domain via realm join |
+| saml | saml | Keycloak / ADFS / etc. |
 
 ### Sample external authentication configuration:
 

templates/miq-template-ext-db.yaml

@@ -440,10 +440,10 @@ objects:
         ProxyPass        /ws/ ws://${NAME}/ws/
         ProxyPassReverse /ws/ ws://${NAME}/ws/
 
-        # For httpd, some ErrorDocuments must by served by the front-end httpd
+        # For httpd, some ErrorDocuments must by served by the httpd pod
         RewriteCond %{REQUEST_URI} !^/proxy_pages
 
-        # For SAML /saml2 is only served by front-end httpd by mod_auth_mellon
+        # For SAML /saml2 is only served by mod_auth_mellon in the httpd pod
         RewriteCond %{REQUEST_URI} !^/saml2
         RewriteRule ^/ http://${NAME}%{REQUEST_URI} [P,QSA,L]
         ProxyPassReverse / http://${NAME}/

templates/miq-template.yaml

@@ -135,10 +135,10 @@ objects:
         ProxyPass        /ws/ ws://${NAME}/ws/
         ProxyPassReverse /ws/ ws://${NAME}/ws/
 
-        # For httpd, some ErrorDocuments must by served by the front-end httpd
+        # For httpd, some ErrorDocuments must by served by the httpd pod
         RewriteCond %{REQUEST_URI} !^/proxy_pages
 
-        # For SAML /saml2 is only served by front-end httpd by mod_auth_mellon
+        # For SAML /saml2 is only served by mod_auth_mellon in the httpd pod
         RewriteCond %{REQUEST_URI} !^/saml2
         RewriteRule ^/ http://${NAME}%{REQUEST_URI} [P,QSA,L]
         ProxyPassReverse / http://${NAME}/