Hi team! I’m trying to integrate OKTA + Datahub, I...
# all-things-deployment
a
Hi team! I’m trying to integrate OKTA + Datahub, I’v done all steps from documentation https://datahubproject.io/docs/authentication/guides/sso/configure-oidc-react-okta But it doesn’t work for some reason I can access the datahub just like before, so nothing has changed The documentation says:
To do so, you must update the datahub-frontend docker.env file with the values received from your identity provider:
the thing is I have installed the datahub on kubernetes (EKS) using helm and AWS managed services I can’t edit the docker.env file Instead, I manually edit k8s deployment.apps/datahub-datahub-frontend and put the envs (AUTH_OIDC_ENABLED, AUTH_OIDC_CLIENT_ID, etc.) there. The new frontend pod is ready and contains all the envs. But redirection to okta does not work, I still have access to the datahab, w/o okta
i
Hello Slava, If you installed datahub with helm. Then change the values.yaml to have the environment variables. Do not modify the pod directly.
Also, please run kubectl describe on the frontend pod
And share the output
a
Hello @incalculable-ocean-74010,
Do not modify the pod directly
I’m didn’t modify the pod manually, but i’v edited the deployment then kubernetes re-created the replica set and the pod. Here is the new pod, it contains the envs:
i
Don't modify the k8s deployment if you use helm as helm will override it. Instead update the deployment via helm so you have a consistent deployment every time.
The discovery uri is wrong, it should be the url for the oidc provider
Also, obfuscate the secret information when sharing data
a
Instead update the deployment via helm so you have a consistent deployment every time
ok, i’ll do it
The discovery uri is wrong, it should be the url for the oidc provider
Where I can find the proper uri for okta?
Also, obfuscate the secret information when sharing data
It’s already obfuscated 🙂
i
The discovery uri is wrong, it should be the url for the oidc provider
Where I can find the proper uri for okta? It’s in the documentation…. https://datahubproject.io/docs/authentication/guides/sso/configure-oidc-react-okta#3-obtain-discovery-uri
a
I’v put “sdfg” randomly
Copy code
<https://your-okta-domain.com/.well-known/openid-configuration>
sorry, I’v miss this thing - your-okta-domain
@incalculable-ocean-74010 I’v followed all your instructions and I have progress, it seems the datahub is now integrated with okta, but I get this error when accessing the datahub:
Copy code
Access denied. The OIDC service responded with 'Access denied'. It seems that you don't have access to this application yet. Please apply for access. 

If you already have been assigned this application, it may be so that your OIDC request is still in action. Error details: 'access_denied':'User is not assigned to the client application.'
Sorry about that
i’v forgot to assign me to app. Now it’s work! Thanks a lot ❤️
i
awesome!
c
@miniature-plastic-94007