Exposing the REST API "officially"

[jghiloni]

In the 10ish years I've used Concourse, I've seen discussions around this 100 times or more. Let's do it!

We would need to add some sauce around getting tokens. I think we can use the Dex APIs to do that pretty easily. I think adding OAuth "clients" to do OOB auth scoped to one or more teams could be useful, with API endpoints to get auth tokens with associated fly commands. I'd be happy to look into it for a v8 release.

[kcbimonte]

Definitely excited for the options that this could bring! With an official API, tighter automation can be created with tools like Terraform / OpenTofu.

The issue for making the OpenAPI 3.1 Spec may just need to be officially created and started at this point based on this discussion [Blog Post] v7.13.0 Release and Project Update.

May also be a case for an RFC to determine how the API spec should be created (e.g off of code or separate spec).

[jghiloni]

Hadn’t thought about that part honestly! I figured there might be some openapi spec internally lol

@taylorsilva mentioned the issues around auth and token retrieval in discord and I think that’s likely more pressing.